On Tue, May 13, 2014 at 6:11 PM, Heikki Linnakangas
<hlinnakangas@vmware.com> wrote:
> On 05/12/2014 10:01 PM, Anna Gershnik wrote:
>>
>> Hi,
>>
>> I was wondering when a new download with a fix for Heartbleed
>> vulnerability will be available?
>> The latest available here is from March 8, 2014:
>> http://www.postgresql.org/ftp/odbc/versions/msi/
>
>
> Oh, I didn't realize we ship the SSL libraries in the installer. Yeah, we
> should update those ASAP.
>
> Hiroshi, others, can we put out a new release, with updated SSL libraries,
> please?
Yeah, that's definitely something we should do.
> Where exactly do the libraries come from, i.e. what is the upstream
> project? If there's anything I can do to help, let me know.
I was planning to have a look at the msvc specs of odbc soon... But
could not really find the time. Btw, I would assume that the openssl
libs come from here:
http://slproweb.com/products/Win32OpenSSL.html
--
Michael