[Python-Dev] OpenSSL Vulnerability (openssl-1.0.0a)

Hirokazu Yamamoto ocean-city at m2.ccsnet.ne.jp
Thu Dec 9 13:49:49 CET 2010


On 2010/11/25 1:23, exarkun at twistedmatrix.com wrote:
> Ah. Okay, then Python 3.2 would be vulnerable. Good thing it isn't
> released yet. ;)

It seems OpenSSL 1.0.0c out.

http://openssl.org/news/secadv_20101202.txt

 > 02-Dec-2010: 	   Security Advisory: ciphersuite downgrade fix
 > 02-Dec-2010: 	   OpenSSL 1.0.0c is now available, including important 
 > bug and security fixes
 > 02-Dec-2010: 	   OpenSSL 0.9.8q is now available, including important 
 > bug and security fixes


More information about the Python-Dev mailing list