Subclipse 1.10.4 / JavaHL 1.8.8 on Win64 vulnerable to Heartbleed OpenSSL bug?
Nick Radov <[email protected]> Wed, 23 Apr 2014 16:24:32 -0700 (PDT)
| Newsgroups | gmane.comp.version-control.subversion.subclipse.user |
|---|---|
| Message-ID | <499373918.2164.1398295472772.JavaMail.httpd@localhost> |
Is Subclipse 1.10.4 on MS Windows 64 bit impacted by the Heartbleed vulnerability (CVE-2014-0160)? It includes JavaHL 1.8.8, which in turn includes the OpenSSL 1.0.1f ssleay32.dll. The Heartbleed bug was fixed in OpenSSL 1.0.1g. Does JavaHL need to be updated? In the mean time I suppose we can either switch to SVNKit, or manually replace ssleay32.dll with the fixed version. ------------------------------------------------------ http://subclipse.tigris.org/ds/viewMessage.do?dsForumId=1047&dsMessageId=3076950 To unsubscribe from this discussion, e-mail: [[email protected]].
ssleay32.dll Properties.png
(image/png, 33.3 KB) - not displayed