Edit report at https://bugs.php.net/bug.php?id=67867&edit=1
ID: 67867
Comment by: jacob dot bednarz at gmail dot com
Reported by: fn84b at outlook dot com
Summary: php.net is vulnerable to CVE-2014-0224 and
exploitable
Status: Verified
Type: Bug
Package: Website problem
Operating System: Irrelevant
PHP Version: Irrelevant
Block user comment: N
Private report: N
New Comment:
Can confirm this is showing as fixed for me. Is this one ok to close now?
Previous Comments:
------------------------------------------------------------------------
[2014-08-20 19:01:13] [email protected]
php.net and wiki.php.net are now fixed.
master and bugs need to be updated.
------------------------------------------------------------------------
[2014-08-19 20:12:42] fn84b at outlook dot com
Also bugs.php.net "is vulnerable to the OpenSSL CCS vulnerability
(CVE-2014-0224), but probably not exploitable."
https://www.ssllabs.com/ssltest/analyze.html?d=bugs.php.net
------------------------------------------------------------------------
[2014-08-19 20:05:00] fn84b at outlook dot com
Description:
------------
Qualys SSL Labs says php.net server "is vulnerable to the OpenSSL CCS
vulnerability (CVE-2014-0224) and exploitable". So please fix it.
https://www.ssllabs.com/ssltest/analyze.html?d=php.net
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=67867&edit=1
--
PHP Webmaster List Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
