Zoom Workplace v6.4.0 Using EOL Version of OpenSSL...

Community

On April 16, between 2:25 P.M. ET and 4:12 P.M. ET, the domain zoom.us was not available due to a server block by GoDaddy Registry. This block was the result of a communication error between Zoom’s domain registrar, Markmonitor, and GoDaddy Registry, which resulted in GoDaddy Registry mistakenly shutting down zoom.us domain. Zoom, Markmonitor, and GoDaddy worked quickly to identify and remove the block, which restored service to the domain zoom.us. There was no product, security or network failure at Zoom during the outage. GoDaddy and Markmonitor are working together to prevent this from happening again.

Hello Zoom Community,

I recently updated to the latest version of Zoom Workplace v6.4.0 software and noticed that it is using an End-of-Life (EOL) version of the OpenSSL library, specifically v3.1.7. Given the importance of maintaining up-to-date security protocols, I am concerned about the potential vulnerabilities associated with using an outdated library.

Could anyone provide information on whether Zoom has plans to address this issue in upcoming updates? Is there a timeline for when a fix might be implemented?

The affected paths are:
c:\program files\zoom\bin\libcrypto-3-zm.dll
c:\program files\zoom\bin\libssl-3-zm.dll
c:\users\user\appdata\roaming\zoom\bin\libcrypto-3-zm.dll
c:\users\user\appdata\roaming\zoom\bin\libssl-3-zm.dll

0 REPLIES 0

Communication

Productivity

Apps & Integration

Spaces

Employee Engagement