[quote user="idw"]

[quote user="netware5"]David, I will appreciate if you provide some information about the OpenSSL library used in v.4.70 and probably when the fix will be issued if needed.[/quote]

The fix is already there, it's currently being tested for release. According to David Harris it's especially urgent for Mercury users, but not so for Pegasus Mail users.

[/quote]

Thank you very much for the information provided. As usual David is doing perfect job! Thank you David!

Recently a very critical vulnerability in OpenSSL has been announced. For details please check http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160

The OpenSSL versions equal or greater to 1.0.1 are vulnerable except the new fix 1.0.1g which has been released yesterday. As the PMail v4.70 uses OpenSSL a question raises if it is vulnerable.

David, I will appreciate if you provide some information about the OpenSSL library used in v.4.70 and probably when the fix will be issued if needed.

[quote user="netware5"]David, I will appreciate if you provide some information about the OpenSSL library used in v.4.70 and probably when the fix will be issued if needed.[/quote]

The fix is already there, it's currently being tested for release. According to David Harris it's especially urgent for Mercury users, but not so for Pegasus Mail users.