]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.11] gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u (GH-105174) (#105200)
authorGregory P. Smith <greg@krypto.org>
Thu, 1 Jun 2023 18:07:53 +0000 (11:07 -0700)
committerGitHub <noreply@github.com>
Thu, 1 Jun 2023 18:07:53 +0000 (18:07 +0000)
commita5d2b546c1b0b73d0695b98838a3ddd497382999
tree81b1a69deb94042d5e941645b3ec7c79691dbcf5
parent3b0747af909cf680543fd9f290bdae8ac6ed155e
[3.11] gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u (GH-105174)  (#105200)

Upgrade builds to OpenSSL 1.1.1u.

This OpenSSL version addresses a pile if less-urgent CVEs since 1.1.1t.

The Mac/BuildScript/build-installer.py was already updated.

Also updates _ssl_data_111.h from OpenSSL 1.1.1u, _ssl_data_300.h from 3.0.9.

Manual edits to the _ssl_data_300.h file prevent it from removing any existing definitions in case those exist in some peoples builds and were important (avoiding regressions during backporting).

(cherry picked from commit ede89af)
.azure-pipelines/ci.yml
.azure-pipelines/pr.yml
.github/workflows/build.yml
Misc/NEWS.d/next/Security/2023-06-01-03-24-58.gh-issue-103142.GLWDMX.rst [new file with mode: 0644]
Modules/_ssl_data_111.h
Modules/_ssl_data_300.h
PCbuild/get_externals.bat
PCbuild/python.props
PCbuild/readme.txt
Tools/c-analyzer/cpython/_parser.py
Tools/ssl/multissltests.py