Path: csiph.com!usenet.pasdenom.info!aioe.org!news.stack.nl!newsfeed.xs4all.nl!newsfeed2a.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail
Return-Path: <python-python-list@m.gmane.org>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
X-Spam-Status: OK 0.001
X-Spam-Evidence: '*H*': 1.00; '*S*': 0.00; 'python.': 0.02; 'affected': 0.07; 'binary': 0.07; 'fixes': 0.07; 'cherrypy': 0.09; 'received:80.91': 0.09; 'received:80.91.229': 0.09; 'received:gmane.org': 0.09; 'received:list': 0.09; 'release,': 0.09; 'python': 0.11; 'windows': 0.15; 'installer,': 0.16; 'received:80.91.229.3': 0.16; 'received:plane.gmane.org': 0.16; 'subject:windows': 0.16; 'wrote:': 0.18; 'bit': 0.19; 'app': 0.19; '(the': 0.22; 'header:User-Agent:1': 0.23; 'planned': 0.24; 'subject:python.org': 0.24; 'source': 0.25; 'header:X-Complaints- To:1': 0.27; 'testing': 0.29; 'mode': 0.30; 'python.org': 0.32; 'running': 0.33; 'updated': 0.34; 'subject:the': 0.34; 'building': 0.35; 'version': 0.36; 'subject:skip:d 10': 0.36; 'charset:us- ascii': 0.36; 'problems': 0.38; 'needed': 0.38; 'to:addr:python- list': 0.38; 'to:addr:python.org': 0.39; 'received:org': 0.40; 'release': 0.40; 'further': 0.61; 'kind': 0.63; 'received:204': 0.75; 'article': 0.77; 'installer': 0.84; 'received:204.14': 0.84; 'timothy': 0.84; 'vulnerable': 0.84
X-Injected-Via-Gmane: http://gmane.org/
To: python-list@python.org
From: Ned Deily <nad@acm.org>
Subject: Re: Heartbleed and the windows distributions on python.org
Date: Mon, 28 Apr 2014 12:15:10 -0700
References: <d576956a-5bcc-4508-bac1-87e954b7e3ec@googlegroups.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-Gmane-NNTP-Posting-Host: 204.14.154.233
User-Agent: MT-NewsWatcher/3.5.3b3 (Intel Mac OS X)
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe: <https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-list/>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups: comp.lang.python
Message-ID: <mailman.9555.1398712549.18130.python-list@python.org>
Lines: 20
NNTP-Posting-Host: 2001:888:2000:d::a6
X-Trace: 1398712549 news.xs4all.nl 2917 [2001:888:2000:d::a6]:54146
X-Complaints-To: abuse@xs4all.nl
Xref: csiph.com comp.lang.python:70691

In article <d576956a-5bcc-4508-bac1-87e954b7e3ec@googlegroups.com>,
 Timothy McDonald <tmcdon4ld@gmail.com> wrote:
> I am building a cherrypy app that is testing as vulnerable to the heartbleed 
> exploit. The app is running on the 64 bit 3.3.5 Windows distribution of 
> python. An updated version of 64 bit Python 3.3.x for Windows or an updated 
> pyopenssl? I am kind of surprised the distribution on python.org hasen't been 
> updated.

The current release of Python 3 is 3.4.0.  A 3.4.1 maintenance release, 
with OpenSSL updated in the Windows installer, is planned for final 
release in mid-May.  Python 3.3.x is now in security-fix-only mode which 
means only source fixes for security problems are released as needed and 
no further binary installers for Windows or OS X are produced.  (The 
Python 2 Windows installer is not affected since it bundles an older, 
pre-heartbleed version of OpenSSL.)

-- 
 Ned Deily,
 nad@acm.org