postgresql-interfaces/psqlodbc GitHub issues and pull requests (mirror)  

help / color / mirror / Atom feed

From: cbourner (@cbourner) <[email protected]>
To: postgresql-interfaces/psqlodbc <[email protected]>
Subject: [postgresql-interfaces/psqlodbc] issue #158: Request: New MSI release with updated OpenSSL (fix for CVE‑2025‑15467)
Date: Mon, 09 Mar 2026 23:56:07 +0000
Message-ID: <[email protected]> (raw)

Hello maintainers,

Could you please publish a new psqlODBC Windows build (MSI) that includes an updated OpenSSL version?

The current latest release 7.00.0007 (Nov 2025) uses an OpenSSL which is vulnerable to CVE-2025-15467.

This vulnerability has been fixed in OpenSSL versions 3.3.6 / 3.4.4 / 3.5.5 / 3.6.1 / 3.0.19.

We are using psqlODBC in production (via SQL Server Reporting Services), and the bundled OpenSSL version is now affected by the above CVE.  A new MSI release would allow me to deploy a patched driver without building from source.

Thank you — happy to help test if needed.

view thread (5+ messages)  latest in thread

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: github://postgresql-interfaces/psqlodbc
  Cc: [email protected], [email protected]
  Subject: Re: [postgresql-interfaces/psqlodbc] issue #158: Request: New MSI release with updated OpenSSL (fix for CVE‑2025‑15467)
  In-Reply-To: <<[email protected]>>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox