Bug #67867 [Opn]: php.net is vulnerable to CVE-2014-0224 and exploitable

Edit report at https://bugs.php.net/bug.php?id=67867&edit=1 ID: 67867 User updated by: fn84b at outlook dot com Reported by: fn84b at outlook dot com Summary: php.net is vulnerable to CVE-2014-0224 and exploitable Status: Open Type: Bug Package: Website problem Operating System: Irrelevant PHP Version: Irrelevant Block user comment: N Private report: N New Comment: Also bugs.php.net "is vulnerable to the OpenSSL CCS vulnerability (CVE-2014-0224), but probably not exploitable." https://www.ssllabs.com/ssltest/analyze.html?d=bugs.php.net Previous Comments: ------------------------------------------------------------------------ [2014-08-19 20:05:00] fn84b at outlook dot com Description: ------------ Qualys SSL Labs says php.net server "is vulnerable to the OpenSSL CCS vulnerability (CVE-2014-0224) and exploitable". So please fix it. https://www.ssllabs.com/ssltest/analyze.html?d=php.net ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=67867&edit=1