github-starred/barrier

Fork 0

mirror of https://github.com/debauchee/barrier.git synced 2026-05-15 14:16:02 -06:00

[GH-ISSUE #1621] Unsupported or vulnerable versions of OpenSSL used for macOS and Windows #1199

New issue

Open

opened 2026-05-05 07:35:42 -06:00 by gitea-mirror · 0 comments

gitea-mirror commented

2026-05-05 07:35:42 -06:00

Owner

Originally created by @tmshort on GitHub (Mar 25, 2022).
Original GitHub issue: https://github.com/debauchee/barrier/issues/1621

What happened?

According to the logs, barrier is using unsupported (in the case of 1.0.2l) or vulnerable (in the case of 1.1.1g) versions of OpenSSL. The most recent versions of OpenSSL should be used.

Note that Windows doesn't include OpenSSL, and macOS includes LibreSSL, which does not appear to be the version referenced in the logs below.

Version

v2.4.0

Git commit hash (if applicable)

No response

If applicable, where did you install Barrier from?

Downloaded from github.

What OSes are you seeing the problem on? (Check all that apply)

Windows, macOS

What OS versions are you using?

Windows 10
macOS 11.x, 12.x

Relevant log output

On the Windows client, I see the following SSL info in the log:

[2022-03-23T14:07:31] INFO: log level: INFO
[2022-03-23T14:07:31] INFO: service command updated
[2022-03-23T14:07:32] INFO: starting new process as privileged user
[2022-03-23T14:07:32] INFO: drag and drop enabled
[2022-03-23T14:07:32] NOTE: started client
[2022-03-23T14:07:32] NOTE: connecting to '192.168.0.88': 192.168.0.88:24800
[2022-03-23T14:07:32] INFO: OpenSSL 1.0.2l 25 May 2017
server status: active

For the MAC client, we see this SSL info in the log:

[2022-03-24T16:04:37] INFO: log level: INFO
[2022-03-24T16:04:37] INFO: drag and drop enabled
[2022-03-24T16:04:37] NOTE: started client
[2022-03-24T16:04:37] NOTE: connecting to '192.168.0.99': 192.168.0.99:24800
[2022-03-24T16:04:37] INFO: OpenSSL 1.1.1g 21 Apr 2020

Any other information

OpenSSL 1.0.2 is out of support.
OpenSSL 1.1.1n is the latest version of OpenSSLLTS 1.1.1, and it fixed numerous vulnerabilities

Originally created by @tmshort on GitHub (Mar 25, 2022). Original GitHub issue: https://github.com/debauchee/barrier/issues/1621 ### What happened? According to the logs, barrier is using unsupported (in the case of 1.0.2l) or vulnerable (in the case of 1.1.1g) versions of OpenSSL. The most recent versions of OpenSSL should be used. Note that Windows doesn't include OpenSSL, and macOS includes LibreSSL, which does not appear to be the version referenced in the logs below. ### Version v2.4.0 ### Git commit hash (if applicable) _No response_ ### If applicable, where did you install Barrier from? Downloaded from github. ### What OSes are you seeing the problem on? (Check all that apply) Windows, macOS ### What OS versions are you using? Windows 10 macOS 11.x, 12.x ### Relevant log output ```shell On the Windows client, I see the following SSL info in the log: [2022-03-23T14:07:31] INFO: log level: INFO [2022-03-23T14:07:31] INFO: service command updated [2022-03-23T14:07:32] INFO: starting new process as privileged user [2022-03-23T14:07:32] INFO: drag and drop enabled [2022-03-23T14:07:32] NOTE: started client [2022-03-23T14:07:32] NOTE: connecting to '192.168.0.88': 192.168.0.88:24800 [2022-03-23T14:07:32] INFO: OpenSSL 1.0.2l 25 May 2017 server status: active For the MAC client, we see this SSL info in the log: [2022-03-24T16:04:37] INFO: log level: INFO [2022-03-24T16:04:37] INFO: drag and drop enabled [2022-03-24T16:04:37] NOTE: started client [2022-03-24T16:04:37] NOTE: connecting to '192.168.0.99': 192.168.0.99:24800 [2022-03-24T16:04:37] INFO: OpenSSL 1.1.1g 21 Apr 2020 ``` ### Any other information OpenSSL 1.0.2 is out of support. OpenSSL 1.1.1n is the latest version of OpenSSLLTS 1.1.1, and it fixed numerous vulnerabilities

No labels

Rows
Columns