New CVE-2022-1292 occurs

SQLCipher Issues
#1

Hi，
New vulnerabilities have been discovered in openssl recently. Do these vulnerabilities affect our products? Is there a repair plan?

#2

Hello @chen_song SQLCipher is not affected by CVE-2022-1292.

#3

Hello, recently new CVE-2022-2068 have been discovered in openssl. Do these affect our products?
@sjlombardo

#4

Hello @longchao1201 - SQLCipher is unaffected by this CVE. It does not directly use c_rehash or include any functionality related to it.

1 Like