Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update to OpenSSL 1.1.1n #91180

Closed
tiran opened this issue Mar 15, 2022 · 6 comments
Closed

Update to OpenSSL 1.1.1n #91180

tiran opened this issue Mar 15, 2022 · 6 comments
Assignees
@tiran
Labels
3.7 (EOL) end of life 3.8 only security fixes 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes build The build process and cross-build OS-mac OS-windows type-security A security issue

Comments

@tiran
Copy link
Member

tiran commented Mar 15, 2022

BPO 47024
Nosy @pfmoore, @ronaldoussoren, @tiran, @tjguk, @ned-deily, @ambv, @zware, @zooba, @pablogsal
PRs
  • bpo-47024: Update OpenSSL to 1.1.1n (GH-31895) #31895
  • [3.7] bpo-47024: Update Windows builds and macOS installer build to use OpenSSL 1.1.1n. #31911
  • [3.8] bpo-47024: Update Windows builds and macOS installer build to use OpenSSL 1.1.1n. #31912
  • [3.10] bpo-47024: Update OpenSSL to 1.1.1n (GH-31895) (GH-31916) #31916
  • [3.9] bpo-47024: Update OpenSSL to 1.1.1n (GH-31895) #31917
    		•

    Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = 'https://github.com/tiran'
closed_at = <Date 2022-03-15.20:54:24.217>
created_at = <Date 2022-03-15.08:28:31.480>
labels = ['OS-mac', '3.7', '3.8', '3.9', 'build', 'type-security', '3.10', '3.11', 'OS-windows']
title = 'Update to OpenSSL 1.1.1n'
updated_at = <Date 2022-03-15.20:54:24.216>
user = 'https://github.com/tiran'

    bugs.python.org fields:

    activity = <Date 2022-03-15.20:54:24.216>
actor = 'christian.heimes'
assignee = 'christian.heimes'
closed = True
closed_date = <Date 2022-03-15.20:54:24.217>
closer = 'christian.heimes'
components = ['Build', 'macOS', 'Windows']
creation = <Date 2022-03-15.08:28:31.480>
creator = 'christian.heimes'
dependencies = []
files = []
hgrepos = []
issue_num = 47024
keywords = ['patch']
message_count = 6.0
messages = ['415226', '415281', '415290', '415292', '415293', '415296']
nosy_count = 9.0
nosy_names = ['paul.moore', 'ronaldoussoren', 'christian.heimes', 'tim.golden', 'ned.deily', 'lukasz.langa', 'zach.ware', 'steve.dower', 'pablogsal']
pr_nums = ['31895', '31911', '31912', '31916', '31917']
priority = 'normal'
resolution = 'fixed'
stage = 'resolved'
status = 'closed'
superseder = None
type = 'security'
url = 'https://bugs.python.org/issue47024'
versions = ['Python 3.7', 'Python 3.8', 'Python 3.9', 'Python 3.10', 'Python 3.11']
    @tiran
    Copy link
    Member Author

    tiran commented Mar 15, 2022

    Update OpenSSL to 1.1.1n and test with OpenSSL 3.0.2. The update will become available later today and features a HIGH security bug, https://mta.openssl.org/pipermail/openssl-announce/2022-March/000216.html

    $ sed -i 's/1.1.1m/1.1.1n/g' Tools/ssl/multissltests.py .azure-pipelines/pr.yml .azure-pipelines/ci.yml .github/workflows/build.yml PCbuild/python.props PCbuild/get_externals.bat Mac/BuildScript/build-installer.py
$ sed -i 's/3.0.1/3.0.2/g' Tools/ssl/multissltests.py .github/workflows/build.yml

    @tiran tiran added release-blocker 3.10 only security fixes 3.11 only security fixes 3.9 only security fixes labels Mar 15, 2022
    @tiran tiran self-assigned this Mar 15, 2022
    @tiran tiran added 3.10 only security fixes build The build process and cross-build OS-mac 3.11 only security fixes OS-windows 3.9 only security fixes type-security A security issue labels Mar 15, 2022
    @tiran tiran self-assigned this Mar 15, 2022
    @tiran tiran added build The build process and cross-build OS-mac OS-windows type-security A security issue labels Mar 15, 2022
    @ned-deily
    Copy link
    Member

    New changeset b620446 by Ned Deily in branch '3.7':
    bpo-47024: Update Windows builds and macOS installer build to use OpenSSL 1.1.1n. (GH-31911)
    b620446

    @tiran
    Copy link
    Member Author

    tiran commented Mar 15, 2022

    New changeset af0a50d by Christian Heimes in branch 'main':
    bpo-47024: Update OpenSSL to 1.1.1n (GH-31895)
    af0a50d

    @tiran
    Copy link
    Member Author

    tiran commented Mar 15, 2022

    New changeset a59ac1e by Christian Heimes in branch '3.10':
    [3.10] bpo-47024: Update OpenSSL to 1.1.1n (GH-31895) (GH-31916)
    a59ac1e

    @tiran
    Copy link
    Member Author

    tiran commented Mar 15, 2022

    New changeset 513911b by Christian Heimes in branch '3.9':
    [3.9] bpo-47024: Update OpenSSL to 1.1.1n (GH-31895) (bpo-31917)
    513911b

    @ambv
    Copy link
    Contributor

    ambv commented Mar 15, 2022

    New changeset e8b72fc by Ned Deily in branch '3.8':
    [3.8] bpo-47024: Update Windows builds and macOS installer build to use OpenSSL 1.1.1n. (GH-31912)
    e8b72fc

    @tiran tiran added 3.7 (EOL) end of life 3.8 only security fixes labels Mar 15, 2022
    @tiran tiran closed this as completed Mar 15, 2022
    @tiran tiran added 3.7 (EOL) end of life 3.8 only security fixes and removed release-blocker labels Mar 15, 2022
    @tiran tiran closed this as completed Mar 15, 2022
    @ezio-melotti ezio-melotti transferred this issue from another repository Apr 10, 2022
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
    Assignees

    @tiran tiran

    Labels
    3.7 (EOL) end of life 3.8 only security fixes 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes build The build process and cross-build OS-mac OS-windows type-security A security issue
    Projects
    None yet
    Milestone
    No milestone
    Development

    No branches or pull requests
    3 participants
    @ambv @tiran @ned-deily