]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u (#105174)
authorGregory P. Smith <greg@krypto.org>
Thu, 1 Jun 2023 16:42:18 +0000 (09:42 -0700)
committerGitHub <noreply@github.com>
Thu, 1 Jun 2023 16:42:18 +0000 (09:42 -0700)
commitede89af605b1c0442353435ad22195c16274f65d
treee78ea003cf7cb1d2bec557594555470d16ccaf15
parenta241003d048f33c9072d47217aa6e28beb7ac54f
gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u (#105174)

Upgrade builds to OpenSSL 1.1.1u.

This OpenSSL version addresses a pile if less-urgent CVEs since 1.1.1t.

The Mac/BuildScript/build-installer.py was already updated.

Also updates _ssl_data_111.h from OpenSSL 1.1.1u, _ssl_data_300.h from 3.0.9, and adds a new _ssl_data_31.h file from 3.1.1 along with the ssl.c code to use it.

Manual edits to the _ssl_data_300.h file prevent it from removing any existing definitions in case those exist in some peoples builds and were important (avoiding regressions during backporting).

backports of this prior to 3.12 will not include the openssl 3.1 header.
13 files changed:
.azure-pipelines/ci.yml
.azure-pipelines/pr.yml
.github/workflows/build.yml
Misc/NEWS.d/next/Security/2023-06-01-03-24-58.gh-issue-103142.GLWDMX.rst [new file with mode: 0644]
Modules/_ssl.c
Modules/_ssl_data_111.h
Modules/_ssl_data_300.h
Modules/_ssl_data_31.h [new file with mode: 0644]
PCbuild/get_externals.bat
PCbuild/python.props
PCbuild/readme.txt
Tools/c-analyzer/cpython/_parser.py
Tools/ssl/multissltests.py