Notice Regarding High Severity Vulnerabilities in OpenSSL

OpenSSL released an advisory concerning two high severity vulnerabilities in the 3.x line of releases. Devolutions products are not affected by these vulnerabilities. Remote Desktop Manager includes OpenSSL 1.1.1, as a FreeRDP dependency, which is not vulnerable.

Further details and guidance regarding these security issues can be found in the following articles:

• https://www.openssl.org/blog/blog/2022/11/01/email-address-overflows/
• https://www.openssl.org/news/secadv/20221101.txt

Additionally, the National Cyber Security Centre of the Netherlands maintains a list of products that are shipping a vulnerable version of OpenSSL:

https://github.com/NCSC-NL/OpenSSL-2022/tree/main/software