logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in  RSS Apache Lounge  


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.



Post new topic   Forum Index -> Apache View previous topic :: View next topic
Reply to topic   Topic: mod_ssl.so windows binary build roadmap
Author
scott4455



Joined: 10 Feb 2020
Posts: 1

PostPosted: Mon 10 Feb '20 20:23    Post subject: mod_ssl.so windows binary build roadmap Reply with quote

We are getting a Medium level hit in our security scans due to OpenSSL being 1.1.1d rather than 1.1.1e-dev. We can mitigate with removing some of the cipher suites, but I could not find any information on how the mod_ssl.so module is slated to be updated.

We only have 1.1.1d due to scouring the forums here and finding a link where someone built one for another CVE, and I can't seem to find that post anymore either. Searches for openssl, mod_ssl.so, 1.1.1d, etc... seem to just turn up 2.2 to 2.4 upgrades, and PHP integrations.

I'm not advocating for a dev version of a module, but am curious how the process works. Any info in how these get into the pipeline, and where they could be found or requested, would be appreciated.

Many thanks!
Back to top
admin
Site Admin


Joined: 15 Oct 2005
Posts: 597

PostPosted: Mon 10 Feb '20 22:37    Post subject: Reply with quote

Policy is only released versions.

Dev versions can introduce new issues/vulnerabilities, is risky.

As soon the OpenSSL team releases a new version, and they classify fixes a severity levels critical and/or high, then we try to make a Apache binary available within days.

When your Medium level hit is a serious issue, then the OpenSSL Team gives it priority.
Back to top


Reply to topic   Topic: mod_ssl.so windows binary build roadmap View previous topic :: View next topic
Post new topic   Forum Index -> Apache