cpython/Misc/NEWS.d/next/Security/2023-06-01-03-24-58.gh-issue-103142.GLWDMX.rst at cb37100bec64a9313a325151ebef9896e8c76046 - Stowage/cpython - Remotebranch.eu

Stowage/cpython

mirror of https://github.com/python/cpython.git synced 2025-12-31 04:23:37 +00:00

Gregory P. Smith cb37100bec

[3.10] gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u (GH-105174) (GH-105200) (#105204 )

Upgrade builds to OpenSSL 1.1.1u.

This OpenSSL version addresses a pile if less-urgent CVEs since 1.1.1t.

The Mac/BuildScript/build-installer.py was already updated.

Also updates _ssl_data_111.h from OpenSSL 1.1.1u, _ssl_data_300.h from 3.0.9.

Manual edits to the _ssl_data_300.h file prevent it from removing any existing definitions in case those exist in some peoples builds and were important (avoiding regressions during backporting).

(cherry picked from commit ede89af).
(cherry picked from commit a5d2b546c1)
(cherry picked from commit f90d3f68db)

Co-authored-by: Gregory P. Smith <greg@krypto.org>

2023-06-05 18:07:30 +02:00

2 lines

102 B

ReStructuredText

Raw Blame History

	`The version of OpenSSL used in our binary builds has been upgraded to 1.1.1u`
	`to address several CVEs.`