Re : What is the recommended procedure to update outdated/vulnerable Desktop Central components?

Hello,

Thank you for your continues feedback in our discussion.

I took some time for the analysis which is the reason for the late response.

I have forwarded your request of upgrading OpenSSL to the latest version 1 .0.1j in order to handle the vulnerabilities in our current version. Our development team will look into the feasibility and the same will be added to our development task.

Regarding the Open SSL in PostgreSQL, SSL is kept disabled state by default. We never enable it as both the server and DB are on the same machine. Since both the server service and DB are running on the same machine, there isn't any need for the secure transfer between these two hence we disabled it. Hence you needn't worry about the OpenSSL version which is bundled with PostgreSQL.