[Python-Dev] OpenSSL Voluntarily (openssl-1.0.0a)

Wed Nov 24 02:56:57 CET 2010

On Nov 23, 2010, at 9:02 AM, Antoine Pitrou wrote:
> On 2010年11月23日 00:07:09 -0500
> Glyph Lefkowitz <glyph at twistedmatrix.com> wrote:
>> On Mon, Nov 22, 2010 at 11:13 PM, Hirokazu Yamamoto <
>> ocean-city at m2.ccsnet.ne.jp> wrote:
>>>>> Hello. Does this affect python? Thank you.
>>>>>> http://www.openssl.org/news/secadv_20101116.txt
>>>>>>> No.
>> Well, actually it does, but Python links against the system OpenSSL on
> most platforms (except Windows), so it's up to the OS vendor to apply
> the patch.

It does? If so, I must have misunderstood the vulnerability. Can you explain how it affects Python?