Some new vulnerabilities in openssl

SQLCipher
1

Hi,
Our scan tool reports vulnerabilities CVE-2024-6119 and CVE-2024-9143 in openssl used by sqlcipher 4.6.1.
Does these vulnerabilities affect net.zetetic:sqlcipher-android?

Thanks,
Fred

2

Hello @Fred,

Thank you for your interest in SQLCipher. SQLCipher does not use TLS, or elliptic curve cryptography and is not impacted by CVE-2024-6119 or CVE-2024-9143.