SparkLabs Blog.

The latest news and releases.


Viscosity For Mac & Windows: Version 1.9.4

Viscosity version 1.9.4 is now available for both macOS and Windows! This update is a security release and includes an important security fix for the macOS version, OpenSSL updates for both platforms, and a number of small bug fixes.

On the macOS side, a privilege escalation vulnerability has been identified that could potentially allow a local user to gain elevated privileges with a maliciously crafted update bundle. Local machine access is required, it cannot be exploited remotely, and it does not affect the security of VPN connections. However, as it potentially allows a standard user to gain admin (root) permissions, we've classified it as a high severity issue. We strongly encourage all macOS users to update to version 1.9.4 as soon as possible, particularly those in multi-user or enterprise environments. Special thanks to AfkVkas for taking a look at Viscosity and identifying this attack chain.

While the Windows version is not affected by this issue, we've taken the opportunity to perform some additional hardening of the service in this update. Both versions also include an updated version of OpenSSL and several small bug fixes.


Version 1.9.4 Mac Release Notes:

updated
OpenSSL updated to version 1.1.1l
fixed
Security: Resolves a local privilege escalation vulnerability during helper update
fixed
Resolves issue where the connection editor may display the wrong device type
fixed
Resolves issue that could cause proxy authentication to fail
fixed
Resolves issue that could helper connections to fail on certain machines (build 1578)
fixed
Various bug fixes and enhancements


Version 1.9.4 Windows Release Notes:

added
Initial Windows 11 compatibility
improved
High DPI scaling improvements
updated
OpenSSL updated to version 1.1.1l
updated
VPN Network Adapter driver updated
fixed
Resolves a rare issue where a crash can occur opening certain windows
fixed
Multiple lines can be added at the same time to Advanced Commands in the connection editor
fixed
Various bug fixes and enhancements

The 1.9.4 update can be automatically installed from inside Viscosity, or downloaded and manually installed. For support with this version please visit our support section.