]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.12] gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u (GH-105174) (#105199)
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Thu, 1 Jun 2023 17:13:35 +0000 (10:13 -0700)
committerGitHub <noreply@github.com>
Thu, 1 Jun 2023 17:13:35 +0000 (17:13 +0000)
commit25543aecfe1e11c1a7aca02e2a83ddbfbadde85f
tree9630f64737f8c68d38d4ae0a5dc21cb41130f50a
parent6375287b37c226eb95d032b4714c43f8c04b7edb
[3.12] gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u (GH-105174) (#105199)

gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u (GH-105174)

Upgrade builds to OpenSSL 1.1.1u.

This OpenSSL version addresses a pile if less-urgent CVEs since 1.1.1t.

The Mac/BuildScript/build-installer.py was already updated.

Also updates _ssl_data_111.h from OpenSSL 1.1.1u, _ssl_data_300.h from 3.0.9, and adds a new _ssl_data_31.h file from 3.1.1 along with the ssl.c code to use it.

Manual edits to the _ssl_data_300.h file prevent it from removing any existing definitions in case those exist in some peoples builds and were important (avoiding regressions during backporting).

backports of this prior to 3.12 will not include the openssl 3.1 header.
(cherry picked from commit ede89af605b1c0442353435ad22195c16274f65d)

Co-authored-by: Gregory P. Smith [Google] <greg@krypto.org>
13 files changed:
.azure-pipelines/ci.yml
.azure-pipelines/pr.yml
.github/workflows/build.yml
Misc/NEWS.d/next/Security/2023-06-01-03-24-58.gh-issue-103142.GLWDMX.rst [new file with mode: 0644]
Modules/_ssl.c
Modules/_ssl_data_111.h
Modules/_ssl_data_300.h
Modules/_ssl_data_31.h [new file with mode: 0644]
PCbuild/get_externals.bat
PCbuild/python.props
PCbuild/readme.txt
Tools/c-analyzer/cpython/_parser.py
Tools/ssl/multissltests.py