]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.10] gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u (GH-105174) (GH...
authorGregory P. Smith <greg@krypto.org>
Mon, 5 Jun 2023 16:07:30 +0000 (09:07 -0700)
committerGitHub <noreply@github.com>
Mon, 5 Jun 2023 16:07:30 +0000 (18:07 +0200)
commitcb37100bec64a9313a325151ebef9896e8c76046
treec65a243cb5518025f6005d404be3e900f48a3e0d
parentf12502b2b337cf0e05f0685f3864a117db9885e3
[3.10] gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u (GH-105174) (GH-105200) (#105204)

Upgrade builds to OpenSSL 1.1.1u.

This OpenSSL version addresses a pile if less-urgent CVEs since 1.1.1t.

The Mac/BuildScript/build-installer.py was already updated.

Also updates _ssl_data_111.h from OpenSSL 1.1.1u, _ssl_data_300.h from 3.0.9.

Manual edits to the _ssl_data_300.h file prevent it from removing any existing definitions in case those exist in some peoples builds and were important (avoiding regressions during backporting).

(cherry picked from commit ede89af).
(cherry picked from commit a5d2b546c1b0b73d0695b98838a3ddd497382999)
(cherry picked from commit f90d3f68db720bd6d0deda8cc0030339ccd43858)

Co-authored-by: Gregory P. Smith <greg@krypto.org>
.azure-pipelines/ci.yml
.azure-pipelines/pr.yml
.github/workflows/build.yml
Mac/BuildScript/build-installer.py
Misc/NEWS.d/next/Security/2023-06-01-03-24-58.gh-issue-103142.GLWDMX.rst [new file with mode: 0644]
Modules/_ssl_data_111.h
Modules/_ssl_data_300.h
PCbuild/get_externals.bat
PCbuild/python.props
PCbuild/readme.txt
Tools/ssl/multissltests.py