Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!news.swapon.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: Arno Welzel Newsgroups: comp.lang.php Subject: Re: Heartbleed bug? Date: Thu, 10 Apr 2014 08:57:54 +0200 Lines: 19 Message-ID: <534640F2.3010009@arnowelzel.de> References: <38941292-a3a7-4dc0-ba31-873351d81924@googlegroups.com> <53463D84.5090007@arnowelzel.de> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Trace: individual.net N9Ic2QJb9BGD6atWAUIefggyeBlNMWRCmC/hU6Xx8Fqg5/5c+I Cancel-Lock: sha1:eD/O/duSPN346fk2mNNcYNU16Rc= User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0 In-Reply-To: <53463D84.5090007@arnowelzel.de> X-Enigmail-Version: 1.6 Xref: csiph.com comp.lang.php:13369 Arno Welzel, 2014-04-10 08:43: > Kevin Burton, 2014-04-09 14:24: > >> Anyone know how this bug http://heartbleed.com/ affects PHP when the >> extension is enabled? Is there a patch for the extension? > > This bug has nothing to do with PHP at all - it affects OpenSSL and all > services depending on ot (Apache, Nginx, Mailservers etc.). To be precise: If the installed PHP version is linked against OpenSSL then it should be replaced with a patched version of course. -- Arno Welzel http://arnowelzel.de http://de-rec-fahrrad.de http://fahrradzukunft.de