[Xitami] EU: OpenSSL Security Update

[Jeff Hamblin]

> Affected Software:  ProtoNova v1.0-v1.1.  Xitami/Pro - all versions.
> Apache (mod_ssl) - all versions.
>
> Security Issues:  A buffer overrun in the distributed OpenSSL binaries can
> enable an attacker to execute arbitrary code on the local machine.  Other
> serious security issues are also present in 0.9.6f and lower.
>
> Fix For Windows Users:  Install the Win32 OpenSSL project (0.9.6g) and
> rename the old libeay32.dll and ssleay32.dll files to libeay32b.dll and
> ssleay32b.dll in the directory where the web server is installed.


Is an update going to be released for Xitami/Pro? Or is there
some way to patch this ourselves? The fix described above
does not seem to apply to Xitami/Pro -- I cannot find any of
the files listed in the xitami directory, or anywhere on the
system for that matter (Win2k Pro platform).

-Jeff Hamblin