Forum Discussion

ChrisGonzales's avatar
ChrisGonzales
New Contributor
9 months ago

Openssl vulnerability in GoTo Resolve Unattended and GoTo Resolve Desktop Console applications

Using latest client as of 1/4/2023 of GoTo Resolve Unattended (v1.13.1.2908) and GoTo Resolve Desktop Console (1.8.1.103), Microsoft Defender has found the following vulnerability related to these applications.

 

Openssl (Installed version: 3.0.8.0)

 

Software Evidence
File paths:


c:\program files (x86)\goto resolve unattended\3855658948394338372\libcrypto-3.dll
c:\program files (x86)\goto resolve unattended\3855658948394338372\libcrypto-3-x64.dll
c:\program files (x86)\goto resolve unattended\3855658948394338372\libssl-3.dll
c:\program files (x86)\goto resolve unattended\3855658948394338372\libssl-3-x64.dll
c:\program files\goto\goto resolve desktop console\libcrypto-3-x64.dll
c:\program files\goto\goto resolve desktop console\libssl-3-x64.dll

 

Will there be a new version released anytime soon that will help address this openssl vulnerability?

 

Please advise.

 

-Chris

  • bhajdu's avatar
    bhajdu
    GoTo Contributor
    9 months ago

    Dear Chris,

    We plan to release support for 3.0.12 by the end of January. This is the most up to date on the 3.0 branch, wich is the LTS version (supported until September, 2026).

    Please let me know if you have any further questions.

    Kind Regards,
    Balázs Hajdu
    Product Manager @  Goto Resolve

    • ChrisGonzales's avatar
      ChrisGonzales
      New Contributor
      8 months ago

      Hello Bhajdu,

       

      Do you have an update on the new GoTo Resolve Applet release that addresses this openssl vulnerability? Thank you.

       

      -Chris

  • GlennD's avatar
    GlennD
    GoTo Manager
    9 months ago

    Hi ChrisGonzales, welcome to the community.

     

    We plan to update the OpenSSL version currently being used, I do not have an ETA just yet but I will update this topic when one is available.