Page 1 of 1

OpenSSL vulnerability CVE-2014-0224

PostPosted: 06. June 2014 17:18
by MacMike
This new vulnerability requires OpenSSL v1.0.1h to fix it. Do you have a time estimate as to when a kit we be available for download to patch/upgrage OpenSSL in XAMPP on windows?

Re: OpenSSL vulnerability CVE-2014-0224

PostPosted: 06. June 2014 19:23
by Altrea
It's done when it's done.

XAMPP is designed as local test and development environment. In such environments you should not really be effected by such vulnerabilities. So there is no pressure on XAMPP side to fix it as fast as possible.

Best wishes,
Altrea