Bug #67867 [Ver->Csd]: php.net is vulnerable to CVE-2014-0224 and exploitable

Edit report at https://bugs.php.net/bug.php?id=67867&edit=1 ID: 67867 Updated by: bjori@php.net Reported by: fn84b at outlook dot com Summary: php.net is vulnerable to CVE-2014-0224 and exploitable -Status: Verified +Status: Closed Type: Bug Package: Website problem Operating System: Irrelevant PHP Version: Irrelevant -Assigned To: +Assigned To: bjori Block user comment: N Private report: N New Comment: They are all updated now. Thanks for the report. Previous Comments: ------------------------------------------------------------------------ [2014-12-28 02:01:10] jacob dot bednarz at gmail dot com Can confirm this is showing as fixed for me. Is this one ok to close now? ------------------------------------------------------------------------ [2014-08-20 19:01:13] bjori@php.net php.net and wiki.php.net are now fixed. master and bugs need to be updated. ------------------------------------------------------------------------ [2014-08-19 20:12:42] fn84b at outlook dot com Also bugs.php.net "is vulnerable to the OpenSSL CCS vulnerability (CVE-2014-0224), but probably not exploitable." https://www.ssllabs.com/ssltest/analyze.html?d=bugs.php.net ------------------------------------------------------------------------ [2014-08-19 20:05:00] fn84b at outlook dot com Description: ------------ Qualys SSL Labs says php.net server "is vulnerable to the OpenSSL CCS vulnerability (CVE-2014-0224) and exploitable". So please fix it. https://www.ssllabs.com/ssltest/analyze.html?d=php.net ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=67867&edit=1