[Subclipse-users] Subclipse 1.10.4 / JavaHL 1.8.8 on Win64 vulnerable to Heartbleed OpenSSL bug?
From: Nick Radov <nick.radov_at_optum.com>
Date: Wed, 23 Apr 2014 16:24:32 -0700 (PDT)
Received on 2014-04-24 01:36:40 CEST
Date: Wed, 23 Apr 2014 16:24:32 -0700 (PDT)
Is Subclipse 1.10.4 on MS Windows 64 bit impacted by the Heartbleed vulnerability (CVE-2014-0160)? It includes JavaHL 1.8.8, which in turn includes the OpenSSL 1.0.1f ssleay32.dll. The Heartbleed bug was fixed in OpenSSL 1.0.1g. Does JavaHL need to be updated?
In the mean time I suppose we can either switch to SVNKit, or manually replace ssleay32.dll with the fixed version.
------------------------------------------------------
http://subclipse.tigris.org/ds/viewMessage.do?dsForumId=1047&dsMessageId=3076950
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subclipse.tigris.org].