[osgeo4w-dev] [osgeo4w] #414: Outdated OpenSSL on OSGEO4W - Heartbleed

OSGeo4W trac_osgeo4w at osgeo.org
Fri Apr 11 12:02:36 PDT 2014

#414: Outdated OpenSSL on OSGEO4W - Heartbleed
Reporter:  hgrundy   |        Owner:  osgeo4w-dev@…              
    Type:  defect    |       Status:  closed                     
Priority:  critical  |    Component:  Package                    
 Version:            |   Resolution:  invalid                    
Keywords:            |  

Comment(by jef):

 Replying to [comment:3 hgrundy]:
 > There is an easy workaround if you don't want to update all of OSGEO4W.
 You can replace the libeay32.dll and ssleay32.dll files in the bin
 directory with the latest ones found at

 You can also "keep" all packages at the installed version.  Clicking on
 the new version number switched between available versions, Keep,
 Reinstall and Uninstall).

Ticket URL: <https://trac.osgeo.org/osgeo4w/ticket/414#comment:5>
OSGeo4W <http://trac.osgeo.org/osgeo4w>
OSGeo4W is the Windows installer and package environment for the OSGeo stack.

More information about the osgeo4w-dev mailing list