Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OpenSSL 1.1.1l is released #89170

Closed
ned-deily opened this issue Aug 26, 2021 · 13 comments
Closed

OpenSSL 1.1.1l is released #89170

ned-deily opened this issue Aug 26, 2021 · 13 comments
Assignees
Labels
3.8 only security fixes 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes OS-mac OS-windows topic-SSL

Comments

@ned-deily
Copy link
Member

BPO 45007
Nosy @pfmoore, @ronaldoussoren, @tiran, @tjguk, @ned-deily, @ambv, @zware, @zooba, @miss-islington, @erlend-aasland
PRs
  • bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI #28009
  • [3.10] bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009) #28039
  • [3.9] bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009) #28040
  • [3.8] bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009) #28041
  • bpo-45007: Update multissl to openssl 1.1.1l as well #28044
  • bpo-45007: Update macOS installer builds to use OpenSSL 1.1.1l. #28051
  • [3.10] bpo-45007: Update macOS installer builds to use OpenSSL 1.1.1l. (GH-28051) #28055
  • [3.9] bpo-45007: Update macOS installer builds to use OpenSSL 1.1.1l. (GH-28051) #28056
  • [3.8] bpo-45007: Update macOS installer builds to use OpenSSL 1.1.1l (GH-28051) #28059
  • [3.10] bpo-45007: Update multissl to openssl 1.1.1l as well (GH-28044) #28061
  • [3.9] bpo-45007: Update multissl to openssl 1.1.1l as well (GH-28044) #28062
  • [3.8] bpo-45007: Update multissl to openssl 1.1.1l as well (GH-28044) #28063
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = 'https://github.com/tiran'
    closed_at = <Date 2021-08-30.13:21:44.690>
    created_at = <Date 2021-08-26.03:34:24.748>
    labels = ['OS-mac', 'expert-SSL', '3.8', '3.9', '3.10', '3.11', 'OS-windows']
    title = 'OpenSSL 1.1.1l is released'
    updated_at = <Date 2021-08-30.13:21:44.687>
    user = 'https://github.com/ned-deily'

    bugs.python.org fields:

    activity = <Date 2021-08-30.13:21:44.687>
    actor = 'lukasz.langa'
    assignee = 'christian.heimes'
    closed = True
    closed_date = <Date 2021-08-30.13:21:44.690>
    closer = 'lukasz.langa'
    components = ['macOS', 'Windows', 'SSL']
    creation = <Date 2021-08-26.03:34:24.748>
    creator = 'ned.deily'
    dependencies = []
    files = []
    hgrepos = []
    issue_num = 45007
    keywords = ['patch']
    message_count = 13.0
    messages = ['400307', '400377', '400536', '400544', '400545', '400551', '400584', '400589', '400591', '400592', '400593', '400596', '400598']
    nosy_count = 10.0
    nosy_names = ['paul.moore', 'ronaldoussoren', 'christian.heimes', 'tim.golden', 'ned.deily', 'lukasz.langa', 'zach.ware', 'steve.dower', 'miss-islington', 'erlendaasland']
    pr_nums = ['28009', '28039', '28040', '28041', '28044', '28051', '28055', '28056', '28059', '28061', '28062', '28063']
    priority = 'high'
    resolution = 'fixed'
    stage = 'resolved'
    status = 'closed'
    superseder = None
    type = None
    url = 'https://bugs.python.org/issue45007'
    versions = ['Python 3.8', 'Python 3.9', 'Python 3.10', 'Python 3.11']

    @ned-deily
    Copy link
    Member Author

    OpenSSL 1.1.1l was released on 2021-08-24 so the Windows build and macOS binary installers should be updated to it.

    https://www.openssl.org/source/

    However, it appears that 1.1.1l introduced a build failure on older macOS systems that would affect some python.org macOS installer builds so we should wait for an official fix before updating the macOS builds. I will take care of that part.

    openssl/openssl#16407

    @ned-deily ned-deily added 3.10 only security fixes 3.11 only security fixes 3.9 only security fixes labels Aug 26, 2021
    @ned-deily ned-deily added OS-mac OS-windows topic-SSL 3.10 only security fixes 3.11 only security fixes 3.9 only security fixes labels Aug 26, 2021
    @zooba
    Copy link
    Member

    zooba commented Aug 26, 2021

    The new build and tags for Windows are up.

    @ambv
    Copy link
    Contributor

    ambv commented Aug 29, 2021

    New changeset d3bdbbf by Steve Dower in branch 'main':
    bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009)
    d3bdbbf

    @ambv
    Copy link
    Contributor

    ambv commented Aug 29, 2021

    I backported #72196 to 3.8 inclusive, given that 3.7 and 3.6 currently list older versions than 1.1.1k.

    @ambv
    Copy link
    Contributor

    ambv commented Aug 29, 2021

    New changeset 5720bca by Łukasz Langa in branch '3.9':
    [3.9] bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009) (GH-28040)
    5720bca

    @ambv
    Copy link
    Contributor

    ambv commented Aug 29, 2021

    New changeset 803c607 by Łukasz Langa in branch '3.8':
    [3.8] bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009) (GH-28041)
    803c607

    @ambv
    Copy link
    Contributor

    ambv commented Aug 30, 2021

    New changeset 1f89e51 by Miss Islington (bot) in branch '3.8':
    bpo-45007: Update macOS installer builds to use OpenSSL 1.1.1l (GH-28051) (GH-28059)
    1f89e51

    @miss-islington
    Copy link
    Contributor

    New changeset d6cb5dd by Łukasz Langa in branch 'main':
    bpo-45007: Update multissl to openssl 1.1.1l as well (GH-28044)
    d6cb5dd

    @miss-islington
    Copy link
    Contributor

    New changeset dc46f4c by Miss Islington (bot) in branch '3.10':
    bpo-45007: Update multissl to openssl 1.1.1l as well (GH-28044)
    dc46f4c

    @ambv
    Copy link
    Contributor

    ambv commented Aug 30, 2021

    New changeset 576803d by Christian Heimes in branch '3.9':
    [3.9] bpo-45007: Update multissl to openssl 1.1.1l as well (GH-28044) (GH-28062)
    576803d

    @ambv
    Copy link
    Contributor

    ambv commented Aug 30, 2021

    New changeset 8371290 by Christian Heimes in branch '3.8':
    [3.8] bpo-45007: Update multissl to openssl 1.1.1l as well (GH-28044) (GH-28063)
    8371290

    @ambv
    Copy link
    Contributor

    ambv commented Aug 30, 2021

    New changeset 52bdda5 by Łukasz Langa in branch '3.10':
    [3.10] bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009) (GH-28039)
    52bdda5

    @ambv
    Copy link
    Contributor

    ambv commented Aug 30, 2021

    CI as well as Windows and macOS installers upgraded to use 1.1.1l all the way to 3.8 inclusive. Closing.

    Thanks all! ✨ 🍰 ✨

    @ambv ambv added the 3.8 only security fixes label Aug 30, 2021
    @ambv ambv closed this as completed Aug 30, 2021
    @ambv ambv added the 3.8 only security fixes label Aug 30, 2021
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
    Labels
    3.8 only security fixes 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes OS-mac OS-windows topic-SSL
    Projects
    None yet
    Development

    No branches or pull requests

    5 participants