Do not input private or sensitive data. View Qlik Privacy & Cookie Policy.
Skip to main content

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Announcements
Congratulations to the new Qlik Luminary and Partner Ambassador class! Meet them here
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Irshadubs22
Contributor II
Contributor II
Thursday

QlikSense Vulnerability Description

Hi team,

 

We got the Vulnerability description below on Qlik sense server.

Path : C:\Program Files\Common Files\Qlik\Custom Data\QvOdbcConnectorPackage\gbq\lib\LibCurl64.DllA\libcurl.dll
Installed version : 7.84.0.0
Fixed version : 8.21.0

Could you please suggest whether this should done by window team or do we need to upgrade anything related to Qlik.

 

Thanks & Regards,

Irshad Ahmad

Labels (1)
Labels
126 Views
3 Replies
JacovCohenQ
Partner - Creator
Partner - Creator
Thursday

Which Qlik Sense version is installed?

 

95 Views
0 Likes
nehal062karkera
Contributor
Contributor
Thursday

Hello, Ishan ahemad

Previously addressed libcurl vulnerabilities by updating the bundled libraries in newer connector releases, which strongly supports treating this as a component vulnerability rather than a Windows-team DLL update. 

The Windows team can assist with OS-level remediation, but they should not independently replace this DLL.

86 Views
0 Likes
Irshadubs22
Contributor II
Contributor II
Thursday
Author

In response to JacovCohenQ

Hi @JacovCohenQ ,

 

Thank you for your response.

 

We are using February 2024 patch 1.

Thanks & Regards,

Irshad Ahmad

66 Views
0 Likes