[gdal-dev] OpenSSL versions in GDAL releases

[Even Rouault]

On mardi 18 septembre 2018 15:09:43 CEST David Brito wrote:
> Hi all,
> 
> 
> I tried to get the latest GDAL and found that latest stable version is
> 2.3.1: https://trac.osgeo.org/gdal/wiki
> 
> Found for instance the binaries here:
> http://www.gisinternals.com/release.php
> 
> 
> The OpenSSL versions used in this release (1.0.1h) seem to be outdated
> because of heartbleed security issue. libeay32.dll
> ssleay32.dll
> 
> It is suggested that all uses upgrade to version 1.1.0c:
> https://www.openssl.org/news/secadv/20161110.txt
> 
> Am I looking at it correctly?
> If no, please let me know where should look for them.
> If yes, are there plans to update the openSSL version in upcoming releases?

That's an issue specific to the GISInternals builds, so should be reported to:
https://github.com/gisinternals/buildsystem/issues

Even

-- 
Spatialys - Geospatial professional services
http://www.spatialys.com