From 81fed6676d8e71d86b15410c71e1083962e6f169 Mon Sep 17 00:00:00 2001 From: Terry Chia Date: Mon, 7 Jul 2014 11:25:51 +0800 Subject: Update security.rst to note that we statically link OpenSSL now. --- docs/security.rst | 10 ++++++++++ 1 file changed, 10 insertions(+) (limited to 'docs') diff --git a/docs/security.rst b/docs/security.rst index 3d44cd3d..3bb10fa4 100644 --- a/docs/security.rst +++ b/docs/security.rst @@ -27,6 +27,16 @@ Supported Versions At any given time, we will provide security support for the `master`_ branch as well as the 2 most recent releases. +New releases for OpenSSL updates +-------------------------------- + +As of version 0.5, ``cryptography`` statically links OpenSSL on Windows to ease +installation. Due to this, ``cryptography`` will release a new version whenever +OpenSSL has a security or bug fix release to avoid shipping insecure software. + +Like all our other releases, this will be announced on the mailing list and we +strongly recommend that you upgrade as soon as possible. + Disclosure Process ------------------ -- cgit v1.2.3