Am 17.06.14 18:41, schrieb Yates, Andy (CS Houston, TX): > Python Dev, > > Andy here. I have a Windows product based on Python and I’m getting > hammered to release a version that includes the fix in OpenSSL 1.0.1h. > My product is built on a Windows system using Python installed from the > standard Python installer at Python.org. I would be grateful if I could > get some advice on my options.
Can you please report - what version of Python you are distributing? - why it absolutely has to be 1.0.1h that is included? According to the CVE, 0.9.8za and 1.0.0m would work as well (and in our case, would be preferred for older versions of Python). Regards, Martin _______________________________________________ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com
