[issue24603] New update of OpenSSL

2015-07-10 Thread Friedrich Spee von Langenfeld
New submission from Friedrich Spee von Langenfeld: The developers of OpenSSL have published a new update. It fixes a bug marked as severe (https://www.openssl.org/news/secadv_20150709.txt). It seems that we are using a vulnerable version. Could someone who knows the relevant files' locations

[issue24603] New update of OpenSSL

2015-07-10 Thread STINNER Victor
STINNER Victor added the comment: Yes, read the discussion on python-dev: https://mail.python.org/pipermail/python-dev/2015-July/140706.html Christian Heimes wrote: 1.0.2c is only used in 3.5b3. The production builds are either using 1.0.2a or 1.0.1j. Should I understand that only Windows