-
Notifications
You must be signed in to change notification settings - Fork 56
Description
Many of the dependencies listed in conanfile.py seem severely outdated, dating back to 2023. Besides making it really hard to build the project on a modern system (especially with a modern compiler version), they are likely to contain bugs and vulnerabilities. While I haven't looked in detail at other dependencies, at least the OpenSSL version is very worrying:
Line 27 in d07a3fa
| "openssl/1.1.1t", |
OpenSSL 1.1.1 series are not maintained since Sep 2023. The used 1.1.1t version has at least 9 reported vulnerabilities, including some rated "high". That said, this number is likely underestimated, because the 1.1.1 branch is no longer maintained, and new OpenSSL vulnerabilities are no longer tested or marked against that version.
Could you please look into updating the dependencies used to newer versions that are secure, supported and compatible with modern systems?