#26415 [Asn]: OpenSSL 0.9.7b is vulnerable

From: Date: Wed, 03 Dec 2003 18:43:07 +0000
Subject: #26415 [Asn]: OpenSSL 0.9.7b is vulnerable
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-51632@lists.php.net to get a copy of this message 
 ID:               26415
 User updated by:  dietrich dot ayala at foundstone dot com
 Reported By:      dietrich dot ayala at foundstone dot com
 Status:           Assigned
 Bug Type:         OpenSSL related
 Operating System: win32
 PHP Version:      4.3.4
 Assigned To:      edink
 New Comment:

Hi Edin,

Is there any ETA on this? I've tried using the new DLLs but they don't
work. Wez said the function signatures may have changed.

Thanks!

Dietrich


Previous Comments:
------------------------------------------------------------------------

[2003-11-27 11:45:44] sniper@php.net

Edin, take care.. :)


------------------------------------------------------------------------

[2003-11-25 20:18:18] dietrich dot ayala at foundstone dot com

Description:
------------
the version of openssl shipped w/ php is has known vulnerabilities. php
should be updated to the latest version of openssl (0.9.7c).

http://www.openssl.org/news/secadv_20030930.txt

thanks,

dietrich




------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=26415&edit=1

Thread (9 messages)

« previous php.bugs (#51632) next »