| View previous topic :: View next topic |
| Author |
Message |
boris
-
Joined: 01 Jan 2013
Posts: 15
|
 Posted: Wed Apr 09, 2014 6:45 pm Post subject: OpenSSL heartbleed |
 |
|
| Does the OpenSSL heartbleed bug affect Abyss ? |
|
| Back to top |
  |
 |
admin
Site Admin
Joined: 03 Mar 2002
Posts: 1286
|
|
| Back to top |
|
|
Paul123
-
Joined: 31 Jan 2009
Posts: 13
|
|
| Back to top |
|
|
boris
-
Joined: 01 Jan 2013
Posts: 15
|
| Posted: Sun Apr 13, 2014 2:03 pm Post subject: PHP 5.5.11 |
|
|
the PHP pre-configured packages you have available contain OpenSSL 1.0.1f (the vulnerable versions), not the 1.0.1g
I realize PHP has not released a new version of PHP, but your pre-configured packages should probably be rebuilt ? :) |
|
| Back to top |
|
|
admin
Site Admin
Joined: 03 Mar 2002
Posts: 1286
|
| Posted: Mon Apr 14, 2014 4:06 pm Post subject: Re: PHP 5.5.11 |
|
|
| boris wrote: | the PHP pre-configured packages you have available contain OpenSSL 1.0.1f (the vulnerable versions), not the 1.0.1g
I realize PHP has not released a new version of PHP, but your pre-configured packages should probably be rebuilt ? :) |
Replacing the OpenSSL DLLs with those in the package linked to above is the way to go. Please note also that unless you're writing a server software with PHP (in which case you're not doing simple PHP Web scripting), you won't have any issue with that language. Heartbleed is bug with a limited scope and it doesn't include general PHP scripting.
_________________
Follow @abyssws on Twitter
Subscribe to our newsletter
_________________
Forum Administrator
Aprelium - https://aprelium.com |
|
| Back to top |
|
|
admin
Site Admin
Joined: 03 Mar 2002
Posts: 1286
|
|
| Back to top |
|
|
|
@abyssws