• Support
  • Articles
  • Resources
  • Products

Tera Term 4.93 and OpenSSL

Moderator: boris

5 postsPage 1 of 1

SecTech
Newbie

Posts:
4
Joined: Wed Dec 28, 2016 12:43 pm
by SecTech » Wed Dec 28, 2016 1:51 pm
I see that version 4.93 of Tera Term also updates OpenSSL from 1.02h to 1.02j. This appears to address several CVE's https://www.openssl.org/news/openssl-1.0.2-notes.html.

Is Tera Term vulnerable to the same CVE's? This page (http://www.teraterm.org/manual/en/reference/sourcecode.html seems to indicate that it is not but is it still relevant?
Yutaka Hirata
TeraTerm Developer

Posts:
606
Joined: Wed Jan 12, 2005 2:35 pm
by Yutaka Hirata » Thu Dec 29, 2016 3:56 pm
Hi SecTech,

Thank you for feedback.
Unfortunately, I do not understand what you say.
Tera Term 4.93 has the OpenSSL 1.02j, and Tera Term does not have
any vulnerability for OpenSSL library because the library is the
latest version.

Thanks.
Best regards, Yutaka Hirata
(yutakakn at gmail.com)
http://hp.vector.co.jp/authors/VA013320/
SecTech
Newbie

Posts:
4
Joined: Wed Dec 28, 2016 12:43 pm
by SecTech » Fri Dec 30, 2016 12:14 pm
I apologize, I asked that wrong. Is v4.91 vulnerable to the referenced CVE's for OpenSSL 0.02h?

To be more specific, what I'm asking is there a security reason to upgrade or is the increment in OpenSSL due to it being the most recent version available at time of the build? Everything else looks to just be feature updates or bug fixes.
Yutaka Hirata
TeraTerm Developer

Posts:
606
Joined: Wed Jan 12, 2005 2:35 pm
by Yutaka Hirata » Sat Dec 31, 2016 8:13 am
Hi SecTech,

The vulnerability of OpenSSL 1.0.2h does not effect to Tera Term.
So, you need not to update Tera Term from v4.91 to v4.93.
Please refer to below announce. Sorry for Japanese only.

https://ja.osdn.net/projects/ttssh2/news/25290

Thanks.
Best regards, Yutaka Hirata
(yutakakn at gmail.com)
http://hp.vector.co.jp/authors/VA013320/
SecTech
Newbie

Posts:
4
Joined: Wed Dec 28, 2016 12:43 pm
by SecTech » Tue Jan 03, 2017 12:49 pm
Excellent. Thank you. We'll probably go through this each time Tera Term is updated, just so you know.
Display posts from previous:
Sort by:

5 postsPage 1 of 1

Users browsing this forum: No registered users
cron