#26415 [Bgs->Opn]: OpenSSL 0.9.7b is vulnerable

From: Date: Wed, 26 Nov 2003 01:32:44 +0000
Subject: #26415 [Bgs->Opn]: OpenSSL 0.9.7b is vulnerable
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-51083@lists.php.net to get a copy of this message 
 ID:               26415
 Updated by:       magnus@php.net
 Reported By:      dietrich dot ayala at foundstone dot com
-Status:           Bogus
+Status:           Open
 Bug Type:         OpenSSL related
 Operating System: all
 PHP Version:      4.3.2
 New Comment:

Oops.. We do.. Forgot about windows..


Previous Comments:
------------------------------------------------------------------------

[2003-11-25 20:26:58] magnus@php.net

The OpenSSL lib is NOT bundled with PHP.

------------------------------------------------------------------------

[2003-11-25 20:18:18] dietrich dot ayala at foundstone dot com

Description:
------------
the version of openssl shipped w/ php is has known vulnerabilities. php
should be updated to the latest version of openssl (0.9.7c).

http://www.openssl.org/news/secadv_20030930.txt

thanks,

dietrich




------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=26415&edit=1

Thread (9 messages)

« previous php.bugs (#51083) next »