Is ssl_sign safe as it is using OPENSSL_PKCS1_PADDING I've been hearing a lot of scare talk about PKCS1 padding attacks.

Is PKCS1 v1.5 safe in signatures as it is practically transporting only message digest?

I'm using it in one of my applications so i'd like to know if it is safe to keep using it.
You're fine.

There are several different padding methods listed in PKCS v1.5.  The method that has active attacks is actually a padding used during public key encryption - that is, it's used to encode the plaintext message before handing it off to the RSA public function. We don't use that method to sign messages.

For that matter, the attack model used against that PKCS v1.5 encryption padding doesn't apply to a signature method.  In that attack model, the attacker  generates bogus ciphertexts, and send them to the holder of the private key and see what it does with them, and uses that to be able to figure out the decryption of a specific ciphertext.  This doesn't apply to signature methods, as the holder of the private key just signs messages, and performs any necessary padding itself.