Openssl vulnerability CVE-2023-5678, CVE-2023-6237, CVE-2024-0727, CVE-2024-2511

[nathian]

Our Microsoft defender scans are showing vulnerabilies for Zoom on the above CVE. Its relating to the following DLL libssl-3-zm.dll & libcrypto-3-zm.dll. Is there any update from Zoom on these so they can be replaced. I have tried doing an update to Zoom however i get the same DLL.

Thanks

[threwmetothesky]

I have the same question. Zoom packaged with openSSL 3.1.5 is showing as vulnerable - is updating the openSSL version packaged with Zoom on the roadmap? when will this be available?

[troubletom]

same issue is on zoom-workplace-6-4-12-64384 has this issue with libssl-3-zm-libcryto-3-zm