# Cve-2021-3711& cve-2021-3712

**URL:** <https://discuss.zetetic.net/t/cve-2021-3711-cve-2021-3712/5088>\
**Category:** SQLCipher\
**Created:** [August 26, 2021, 8:51am UTC](https://discuss.zetetic.net/t/cve-2021-3711-cve-2021-3712/5088 "2021-08-26T08:51:09Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![GreatAnn0827](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.zetetic.net/greatann0827/32/1601_2.png) [@GreatAnn0827](https://discuss.zetetic.net/u/GreatAnn0827)\
**Post date:** [August 26, 2021, 8:51am UTC](https://discuss.zetetic.net/t/cve-2021-3711-cve-2021-3712/5088/1 "2021-08-26T08:51:09Z")

</div>

Hi，  
New vulnerabilities have been discovered in openssl recently. Do these vulnerabilities affect our products? Is there a repair plan?

---

<div class="post-metadata">

**Author:** ![sjlombardo](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.zetetic.net/sjlombardo/32/3_2.png) [@sjlombardo](https://discuss.zetetic.net/u/sjlombardo)\
**Post date:** [August 26, 2021, 8:42pm UTC](https://discuss.zetetic.net/t/cve-2021-3711-cve-2021-3712/5088/2 "2021-08-26T20:42:50Z")

</div>

Hello @GreatAnn0827 - SQLCipher is not affected by either CVE. However, we will be updating to the latest available OpenSSL in the next release.

---

<div class="post-metadata">

**Author:** ![sjlombardo](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.zetetic.net/sjlombardo/32/3_2.png) [@sjlombardo](https://discuss.zetetic.net/u/sjlombardo)\
**Post date:** [November 1, 2021, 4:37pm UTC](https://discuss.zetetic.net/t/cve-2021-3711-cve-2021-3712/5088/3 "2021-11-01T16:37:29Z")

</div>

The latest OpenSSL version 1.1.1l is used in SQLCipher 4.5.0.