[gdal-dev] OpenSSL versions in GDAL releases

[David Brito]

Hi all,


I tried to get the latest GDAL and found that latest stable version is 2.3.1:
https://trac.osgeo.org/gdal/wiki

Found for instance the binaries here:
http://www.gisinternals.com/release.php


The OpenSSL versions used in this release (1.0.1h) seem to be outdated because of heartbleed security issue.
libeay32.dll
ssleay32.dll

It is suggested that all uses upgrade to version 1.1.0c:
https://www.openssl.org/news/secadv/20161110.txt

Am I looking at it correctly?
If no, please let me know where should look for them.
If yes, are there plans to update the openSSL version in upcoming releases?



Thanks,
David
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/gdal-dev/attachments/20180918/747d8aea/attachment.html>