Re: psqlODBC msi download for Heartbleed

From: Michael Paquier <michael(dot)paquier(at)gmail(dot)com>
To: Heikki Linnakangas <hlinnakangas(at)vmware(dot)com>
Cc: Anna Gershnik <agershnik(at)tableausoftware(dot)com>, "pgsql-odbc(at)postgresql(dot)org" <pgsql-odbc(at)postgresql(dot)org>, Hiroshi Saito <hiroshi(at)winpg(dot)jp>
Subject: Re: psqlODBC msi download for Heartbleed
Date: 2014-05-13 10:32:31
Message-ID: CAB7nPqR3M28YUofqMiSrmZbfueHhaLtRYERrdFVvOb8aMD-ugg@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-odbc

On Tue, May 13, 2014 at 6:11 PM, Heikki Linnakangas
<hlinnakangas(at)vmware(dot)com> wrote:
> On 05/12/2014 10:01 PM, Anna Gershnik wrote:
>>
>> Hi,
>>
>> I was wondering when a new download with a fix for Heartbleed
>> vulnerability will be available?
>> The latest available here is from March 8, 2014:
>> http://www.postgresql.org/ftp/odbc/versions/msi/
>
>
> Oh, I didn't realize we ship the SSL libraries in the installer. Yeah, we
> should update those ASAP.
>
> Hiroshi, others, can we put out a new release, with updated SSL libraries,
> please?
Yeah, that's definitely something we should do.

> Where exactly do the libraries come from, i.e. what is the upstream
> project? If there's anything I can do to help, let me know.
I was planning to have a look at the msvc specs of odbc soon... But
could not really find the time. Btw, I would assume that the openssl
libs come from here:
http://slproweb.com/products/Win32OpenSSL.html
--
Michael

In response to

Responses

Browse pgsql-odbc by date

  From Date Subject
Next Message N. Campbell 2014-05-13 11:42:50 Sqlcancel and commands ignored until end of transaction block
Previous Message Heikki Linnakangas 2014-05-13 09:11:16 Re: psqlODBC msi download for Heartbleed