Re: psqlODBC msi download for Heartbleed - Mailing list pgsql-odbc

From Michael Paquier
Subject Re: psqlODBC msi download for Heartbleed
Date
Msg-id CAB7nPqR3M28YUofqMiSrmZbfueHhaLtRYERrdFVvOb8aMD-ugg@mail.gmail.com
Whole thread Raw
In response to Re: psqlODBC msi download for Heartbleed  (Heikki Linnakangas <hlinnakangas@vmware.com>)
Responses Re: psqlODBC msi download for Heartbleed  (Hiroshi Saito <hiroshi@winpg.jp>)
List pgsql-odbc
On Tue, May 13, 2014 at 6:11 PM, Heikki Linnakangas
<hlinnakangas@vmware.com> wrote:
> On 05/12/2014 10:01 PM, Anna Gershnik wrote:
>>
>> Hi,
>>
>> I was wondering when a new download with a fix for Heartbleed
>> vulnerability will be available?
>> The latest available here is from March 8, 2014:
>> http://www.postgresql.org/ftp/odbc/versions/msi/
>
>
> Oh, I didn't realize we ship the SSL libraries in the installer. Yeah, we
> should update those ASAP.
>
> Hiroshi, others, can we put out a new release, with updated SSL libraries,
> please?
Yeah, that's definitely something we should do.

> Where exactly do the libraries come from, i.e. what is the upstream
> project? If there's anything I can do to help, let me know.
I was planning to have a look at the msvc specs of odbc soon... But
could not really find the time. Btw, I would assume that the openssl
libs come from here:
http://slproweb.com/products/Win32OpenSSL.html
--
Michael


pgsql-odbc by date:

Previous
From: Heikki Linnakangas
Date:
Subject: Re: psqlODBC msi download for Heartbleed
Next
From: "N. Campbell"
Date:
Subject: Sqlcancel and commands ignored until end of transaction block