Bug #67867 [Opn->Ver]: php.net is vulnerable to CVE-2014-0224 and exploitable

Edit report at https://bugs.php.net/bug.php?id=67867&edit=1 ID: 67867 Updated by: bjori@php.net Reported by: fn84b at outlook dot com Summary: php.net is vulnerable to CVE-2014-0224 and exploitable -Status: Open +Status: Verified Type: Bug Package: Website problem Operating System: Irrelevant PHP Version: Irrelevant Block user comment: N Private report: N New Comment: php.net and wiki.php.net are now fixed. master and bugs need to be updated. Previous Comments: ------------------------------------------------------------------------ [2014-08-19 20:12:42] fn84b at outlook dot com Also bugs.php.net "is vulnerable to the OpenSSL CCS vulnerability (CVE-2014-0224), but probably not exploitable." https://www.ssllabs.com/ssltest/analyze.html?d=bugs.php.net ------------------------------------------------------------------------ [2014-08-19 20:05:00] fn84b at outlook dot com Description: ------------ Qualys SSL Labs says php.net server "is vulnerable to the OpenSSL CCS vulnerability (CVE-2014-0224) and exploitable". So please fix it. https://www.ssllabs.com/ssltest/analyze.html?d=php.net ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=67867&edit=1