XNView MP 1.6.4 - Vulnerability in OpenSSL 1.1.1 - CVE-2021-3711

[z8mail]

Hello,

The library “The OpenSSL Toolkit” used by XNView MP 1.6.4 has a critical vulnerability (rating 9.8):
Vulnerability in OpenSSL 1.1.1 up to 1.1.1k (CVE-2021-3711)
CVE-2021-3711
https://cve.mitre.org/cgi-bin/cvename.c ... -2021-3711

The vulnerability is in the file used:
C:\Program Files\XnViewMP\libssl-1_1-x64.dll

Please provide an update.

Kind regards,

z8mail

[xnview]

Thanks to your detailed description I can reproduce the problem.

[xnview]

This problem is supposed to be fixed in XnView MP 1.7.0. Please check and confirm the bug fix here.