Re: StrawberryPerl and the OpenSSL heartbleed bug

2014-04-16 Thread Alexandr Ciornii
A specially created server ( http://blog.meldium.com/home/2014/4/10/testing-for-reverse-heartbleed , in Russian: http://www.xakep.ru/post/62350/default.asp ) can send similar request to client. But such attack has low probability. 2014-04-16 15:40 GMT+03:00 matthew.pers...@lazard.com: Does it

Re: StrawberryPerl and the OpenSSL heartbleed bug

2014-04-16 Thread Matthew . Persico
...@atlas.cz To: win32-vanilla@perl.org Date: 04/16/2014 01:31 AM Subject:Re: StrawberryPerl and the OpenSSL heartbleed bug Olivier, You can try updated strawberry perl from: http://strawberryperl.com/download/5.18.2.2/strawberry-perl-5.18.2.2-32bit.msi http://strawberryperl.com

Re: StrawberryPerl and the OpenSSL heartbleed bug

2014-04-16 Thread kmx
Rockefeller Plaza New York, NY 10112 212 632 6136 From: kmx k...@atlas.cz To: win32-vanilla@perl.org Date: 04/16/2014 01:31 AM Subject: Re: StrawberryPerl and the OpenSSL heartbleed bug --- Olivier, You can try updated

Re: StrawberryPerl and the OpenSSL heartbleed bug

2014-04-16 Thread Jan Dubois
On Wed, Apr 16, 2014 at 1:46 PM, kmx k...@atlas.cz wrote: The reason is simple - it does not build anymore as it is not able to find required pari source tarball at ftp://megrez.math.u-bordeaux.fr/pub/pari/unix/ Here is a quick-and-dirty patch to work around this (but hard-wires you to 2.1.7):

Re: StrawberryPerl and the OpenSSL heartbleed bug

2014-04-16 Thread kmx
Excellent, I have put patched version at http://strawberryperl.com/package/kmx/perl-modules-patched/Math-Pari-2.01080605_patched.tar.gz Simply run: cpanm http://strawberryperl.com/package/kmx/perl-modules-patched/Math-Pari-2.01080605_patched.tar.gz -v -- kmx On 16.4.2014 22:50, Jan Dubois

Re: StrawberryPerl and the OpenSSL heartbleed bug

2014-04-16 Thread Olivier Mengué
2014-04-16 15:04 GMT+02:00 Alexandr Ciornii alexcho...@gmail.com: A specially created server ( http://blog.meldium.com/home/2014/4/10/testing-for-reverse-heartbleed , in Russian: http://www.xakep.ru/post/62350/default.asp ) can send similar request to client. But such attack has low

Re: StrawberryPerl and the OpenSSL heartbleed bug

2014-04-16 Thread Matthew . Persico
Lazard 30 Rockefeller Plaza New York, NY 10112 212 632 6136 From: kmx k...@atlas.cz To: Win32 Perl mailing list win32-vanilla@perl.org Date: 04/16/2014 05:21 PM Subject:Re: StrawberryPerl and the OpenSSL heartbleed bug Excellent, I have put patched version at http

Re: StrawberryPerl and the OpenSSL heartbleed bug

2014-04-16 Thread Jan Dubois
On Wed, Apr 16, 2014 at 2:35 PM, matthew.pers...@lazard.com wrote: Suggestion - maybe you can pull the file that is being fetched (I assume its pari217.exe) and install it locally once and for all? If the pari lib is found locally, will the build bother to attempt to go out and get it? It is

Re: StrawberryPerl and the OpenSSL heartbleed bug

2014-04-14 Thread kmx
Hi, you can get updated openssl binaries from: - http://strawberryperl.com/package/kmx/64_libs/gcc47-2014Q1/ - http://strawberryperl.com/package/kmx/32_libs/gcc47-2014Q1/ I am considering releasing strawberry perl 5.18.2.2 (with new openssl) before the end of April. -- kmx On 12.4.2014