Sebastien DuquetteOpenSSL released an advisory concerning two high severity vulnerabilities in the 3.x line of releases. Devolutions products are not affected by these vulnerabilities. Remote Desktop Manager includes OpenSSL 1.1.1, as a FreeRDP dependency, which is not vulnerable.
Further details and guidance regarding these security issues can be found in the following articles:
- https://www.openssl.org/blog/blog/2022/11/01/email-address-overflows/
- https://www.openssl.org/news/secadv/20221101.txt
Additionally, the National Cyber Security Centre of the Netherlands maintains a list of products that are shipping a vulnerable version of OpenSSL:
Patrick Pilotte
Vincent Lambert