Page 1 of 1

OpenSSL "Heartbleed" vulnerability

Posted: Tue Apr 08, 2014 6:57 pm
by Mac_Fife
Given the security advisory posted on the OpenSSL website and reported by the BBC (amongst others), I've rebuilt the openssl32 and libeay32 DLLs using the latest, fixed 1.0.1g sources (I know a few folk aren't keen to try following the instructions that OpenSSL.org provide).

It can be downloaded here: http://uru.mac-fife.me.uk/openssl-1.0.1g.zip - I've removed the old download file (1.0.1e), since it was likely affected by the vulnerability.

Re: OpenSSL "Heartbleed" vulnerability

Posted: Wed Apr 09, 2014 12:46 am
by Hoikas
Uru itself wasn't affected by the vulnerability... But if you're using those DLLs for something else, it's probably a good idea to upgrade.