[New-bugs-announce] [issue17425] Update OpenSSL versions in Windows builds

[Antoine Pitrou]

New submission from Antoine Pitrou:

OpenSSL recently issued a security advisory (*). Our bundled OpenSSL versions seem to be vulnerable. They should be updated to OpenSSL 1.0.1d, 1.0.0k or 0.9.8y depending on the version.

(*) http://www.openssl.org/news/secadv_20130205.txt

Apologies if this has already been handled and I've misunderstood Tools/buildbot/external-common.bat.

----------
components: Build, Windows
messages: 184199
nosy: benjamin.peterson, christian.heimes, georg.brandl, larry, loewis, pitrou
priority: release blocker
severity: normal
status: open
title: Update OpenSSL versions in Windows builds
type: security
versions: Python 2.7, Python 3.2, Python 3.3, Python 3.4

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue17425>
_______________________________________