This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

classification
Title: Update to OpenSSL 1.1.1n
Type: security Stage: resolved
Components: Build, macOS, Windows Versions: Python 3.11, Python 3.10, Python 3.9, Python 3.8, Python 3.7
process
Status: closed Resolution: fixed
Dependencies: Superseder:
Assigned To: christian.heimes Nosy List: christian.heimes, lukasz.langa, ned.deily, pablogsal, paul.moore, ronaldoussoren, steve.dower, tim.golden, zach.ware
Priority: normal Keywords: patch

Created on 2022-03-15 08:28 by christian.heimes, last changed 2022-04-11 14:59 by admin. This issue is now closed.

Pull Requests
URL Status Linked Edit
PR 31895 merged christian.heimes, 2022-03-15 08:30
PR 31911 merged ned.deily, 2022-03-15 17:39
PR 31912 merged ned.deily, 2022-03-15 18:15
PR 31916 merged christian.heimes, 2022-03-15 20:05
PR 31917 merged christian.heimes, 2022-03-15 20:06
Messages (6)
msg415226 - (view) Author: Christian Heimes (christian.heimes) * (Python committer) Date: 2022-03-15 08:28
Update OpenSSL to 1.1.1n and test with OpenSSL 3.0.2. The update will become available later today and features a HIGH security bug, https://mta.openssl.org/pipermail/openssl-announce/2022-March/000216.html

$ sed -i 's/1.1.1m/1.1.1n/g' Tools/ssl/multissltests.py .azure-pipelines/pr.yml .azure-pipelines/ci.yml .github/workflows/build.yml PCbuild/python.props PCbuild/get_externals.bat Mac/BuildScript/build-installer.py
$ sed -i 's/3.0.1/3.0.2/g' Tools/ssl/multissltests.py .github/workflows/build.yml
msg415281 - (view) Author: Ned Deily (ned.deily) * (Python committer) Date: 2022-03-15 19:30
New changeset b6204466c1209de5a0794c475096429fdb457a16 by Ned Deily in branch '3.7':
bpo-47024: Update Windows builds and macOS installer build to use OpenSSL 1.1.1n. (GH-31911)
https://github.com/python/cpython/commit/b6204466c1209de5a0794c475096429fdb457a16
msg415290 - (view) Author: Christian Heimes (christian.heimes) * (Python committer) Date: 2022-03-15 20:03
New changeset af0a50de4b77dc774fcfdf5468ec320b08bfb53b by Christian Heimes in branch 'main':
bpo-47024: Update OpenSSL to 1.1.1n (GH-31895)
https://github.com/python/cpython/commit/af0a50de4b77dc774fcfdf5468ec320b08bfb53b
msg415292 - (view) Author: Christian Heimes (christian.heimes) * (Python committer) Date: 2022-03-15 20:31
New changeset a59ac1e7d20713573c15c5259c83e998a73e9094 by Christian Heimes in branch '3.10':
[3.10] bpo-47024: Update OpenSSL to 1.1.1n (GH-31895) (GH-31916)
https://github.com/python/cpython/commit/a59ac1e7d20713573c15c5259c83e998a73e9094
msg415293 - (view) Author: Christian Heimes (christian.heimes) * (Python committer) Date: 2022-03-15 20:34
New changeset 513911b359c88df2b32d0bc2776438f52d5e4584 by Christian Heimes in branch '3.9':
[3.9] bpo-47024: Update OpenSSL to 1.1.1n (GH-31895) (#31917)
https://github.com/python/cpython/commit/513911b359c88df2b32d0bc2776438f52d5e4584
msg415296 - (view) Author: Łukasz Langa (lukasz.langa) * (Python committer) Date: 2022-03-15 20:53
New changeset e8b72fc7f3937b6b86354110917da161ca36cff7 by Ned Deily in branch '3.8':
[3.8] bpo-47024: Update Windows builds and macOS installer build to use OpenSSL 1.1.1n. (GH-31912)
https://github.com/python/cpython/commit/e8b72fc7f3937b6b86354110917da161ca36cff7
History
Date User Action Args
2022-04-11 14:59:57adminsetgithub: 91180
2022-03-15 20:54:24christian.heimessetpriority: release blocker -> normal
status: open -> closed
stage: patch review -> resolved
resolution: fixed
versions: + Python 3.7, Python 3.8
2022-03-15 20:53:57lukasz.langasetmessages: + msg415296
2022-03-15 20:34:53christian.heimessetmessages: + msg415293
2022-03-15 20:31:08christian.heimessetmessages: + msg415292
2022-03-15 20:06:44christian.heimessetpull_requests: + pull_request30008
2022-03-15 20:05:15christian.heimessetpull_requests: + pull_request30007
2022-03-15 20:03:27christian.heimessetmessages: + msg415290
2022-03-15 19:30:54ned.deilysetmessages: + msg415281
2022-03-15 18:15:56ned.deilysetpull_requests: + pull_request30005
2022-03-15 17:39:46ned.deilysetpull_requests: + pull_request30004
2022-03-15 08:30:13christian.heimessetkeywords: + patch
stage: patch review
pull_requests: + pull_request29992
2022-03-15 08:28:31christian.heimescreate