OpenSSL 1.0.2 < 1.0.2k Multiple Vulnerabilities

[Mishiago]

Hi everyone.

I Just found that OpenSSL 1.0.2j has Multiple Vulnerabilities and should be updated to 1.0.2k version.

For more details go to: https://www.openssl.org/news/secadv/20170126.txt

Please Advise.

Mishiago.

[Altrea]

Which of this vulnerabilities is critical for a local test and development environment?

[Mishiago]

What difference does it make?!?! It doesn't matter, there is known Vulnerability and you decided to ask rhetorical questionץץ

[Nobbie]

Just found that OpenSSL 1.0.2j has Multiple Vulnerabilities and should be updated to 1.0.2k version.

Why should it be updated? What does a vulnerability, when the server is not exposed? That costs only manpower for nothing - do you want to join Bitnami and fix these vulneratbilities?

[Altrea]

What difference does it make?!?!

A huge difference. Don't fix something that is not broken.
There is no benefit from it. Instead you could create issues with that upgrade which really matters.

Create your own webserver stack and release it for free than you can choose yourself if you want to update it daily.
XAMPP will not do that.