OS/2, eCS & ArcaOS - Technical > Web applications

'Heartbleed' vulnerability - OS/2 web server fixes

(1/3) > >>

Paul Smedley:
Apache2, PHP 5.3.x, PHP 5.4.x, PHP 5.5.x updated to include OpenSSL 1.0.1g fixes that address 'Heart Bleed' vulnerability - http://os2ports.smedley.id.au

dbanet:
Thank you.

After I've checked RPM just after the vulnerability became available, and found that there is version 1.0.0a that is not vulnerable, and that I don't use SSL in Apache, I settled down and added the link to #netlabs topic.

I can't remember any other application that uses OpenSSL, but if it is, please say what one.
We should check that it uses the openssl.dll that ships via netlabs repository, or if it uses its own, that it is not vulnerable.

Dave Yeo:
Lots of applications use OpenSSL, I know I've distributed a few such as the Links web browser. Luckily I always used the old 0.98 which I believe is not vulnerable.
The real question is how many other vulnerabilities our American friends are keeping secret so they can read our stuff.

Ben:

Hello, Dave


--- Quote ---The real question is how many other vulnerabilities our American friends are keeping secret so they can read our stuff.
--- End quote ---

You might as well ask yourself the same thing about the entire Internet...

...and after that, ask yourself "what is the real reason why it was created?".

The "light" clicks on in some, (bright!), but not in most, (dull).

BigGoofyGuy:
http://en.wikipedia.org/wiki/Internet
I find this to be very informative on The Internet.  8)



--- Quote ---The real question is how many other vulnerabilities our American friends are keeping secret so they can read our stuff.
--- End quote ---
As an American, I have no idea what you are talking about.  :-X
 ;D

Navigation

[0] Message Index

[#] Next page

Go to full version