#26415 [Asn->Csd]: OpenSSL 0.9.7b is vulnerable

ID: 26415 Updated by: edink@php.net Reported By: dietrich dot ayala at foundstone dot com -Status: Assigned +Status: Closed Bug Type: OpenSSL related Operating System: win32 PHP Version: 4.3.4 Assigned To: edink New Comment: The version packed with latest snaps is 0.9.7c. Previous Comments: ------------------------------------------------------------------------ [2004-03-15 18:14:38] sniper@php.net Did you really update ALL dlls from the snapshot package? ------------------------------------------------------------------------ [2004-03-15 16:17:57] dietrich dot ayala at foundstone dot com the latest 4.3.5 snaps are still using version 0.9.7b. these vulns are widely known and have been in the field for quite a while. it'd be great to get this updated. thanks so much for your effort edin! ------------------------------------------------------------------------ [2004-01-03 18:26:29] edink@php.net Finally, I managed to find some time to upgrade openssl. The version bundled with the snaps and releases from now on is OpenSSL-0.9.7c. ------------------------------------------------------------------------ [2003-12-03 13:43:07] dietrich dot ayala at foundstone dot com Hi Edin, Is there any ETA on this? I've tried using the new DLLs but they don't work. Wez said the function signatures may have changed. Thanks! Dietrich ------------------------------------------------------------------------ [2003-11-27 11:45:44] sniper@php.net Edin, take care.. :) ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/26415 -- Edit this bug report at http://bugs.php.net/?id=26415&edit=1