Community
    • Login

    Vulnerability CVE-2024-7264 in `libcurl.dll` – When Will It Be Addressed in Notepad++?

    Scheduled Pinned Locked Moved Help wanted · · · – – – · · ·
    7 Posts 3 Posters 1.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Madhav VasanthM
      Madhav Vasanth
      last edited by

      Hi all,

      I recently updated Notepad++ to the latest version, hoping it would resolve the vulnerability in libcurl.dll (CVE-2024-7264), which affects versions >= 7.32.0, < 8.9.1. However, after the update, I checked the libcurl.dll version in the C:\Program Files (x86)\Notepad++\updater\libcurl.dll path, and it still shows version 8.4.0, which remains vulnerable.

      Is there any planned release that will include libcurl version 8.9.1 or higher to fix this vulnerability? Or should I manually update the libcurl.dll file? Any guidance would be appreciated.

      Thanks!

      Alan KilbornA 1 Reply Last reply Reply Quote 0
      • Alan KilbornA
        Alan Kilborn @Madhav Vasanth
        last edited by

        @Madhav-Vasanth

        Do you think you get better answers if you post the same thing 3 times??

        Madhav VasanthM 1 Reply Last reply Reply Quote 0
        • Madhav VasanthM
          Madhav Vasanth @Alan Kilborn
          last edited by

          @Alan-Kilborn is it posted 3 times

          Alan KilbornA 1 Reply Last reply Reply Quote 0
          • Alan KilbornA
            Alan Kilborn @Madhav Vasanth
            last edited by

            @Madhav-Vasanth said in Vulnerability CVE-2024-7264 in &#x60;libcurl.dll&#x60; – When Will It Be Addressed in Notepad++?:

            @Alan-Kilborn is it posted 3 times

            I’m sure that you know that it is, and you’re just acting ignorant of that fact.

            915b6dd0-a9da-46e7-94a4-b44da2b7c2ed-image.png

            Madhav VasanthM 1 Reply Last reply Reply Quote 0
            • xomxX
              xomx
              last edited by

              https://github.com/notepad-plus-plus/wingup/issues/73#issuecomment-2362168716

              Madhav VasanthM 1 Reply Last reply Reply Quote 1
              • PeterJonesP PeterJones referenced this topic on
              • Madhav VasanthM
                Madhav Vasanth @Alan Kilborn
                last edited by

                @Alan-Kilborn Hehe… i thought i il get response from every side

                1 Reply Last reply Reply Quote 0
                • Madhav VasanthM
                  Madhav Vasanth @xomx
                  last edited by

                  @xomx Thanks for the info

                  1 Reply Last reply Reply Quote 1
                  • First post
                    Last post
                  The Community of users of the Notepad++ text editor.
                  Powered by NodeBB | Contributors