[Python-Dev] OpenSSL Voluntarily (openssl-1.0.0a)

[Glyph Lefkowitz]

On Nov 23, 2010, at 9:02 AM, Antoine Pitrou wrote:

> On Tue, 23 Nov 2010 00:07:09 -0500
> Glyph Lefkowitz <glyph at twistedmatrix.com> wrote:
>> On Mon, Nov 22, 2010 at 11:13 PM, Hirokazu Yamamoto <
>> ocean-city at m2.ccsnet.ne.jp> wrote:
>> 
>>> Hello. Does this affect python? Thank you.
>>> 
>>> http://www.openssl.org/news/secadv_20101116.txt
>>> 
>> 
>> No.
> 
> Well, actually it does, but Python links against the system OpenSSL on
> most platforms (except Windows), so it's up to the OS vendor to apply
> the patch.


It does?  If so, I must have misunderstood the vulnerability.  Can you explain how it affects Python?