diff options
| author | Gregory P. Smith <greg@krypto.org> | 2023-06-01 16:42:18 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-06-01 16:42:18 (GMT) |
| commit | ede89af605b1c0442353435ad22195c16274f65d (patch) | |
| tree | e78ea003cf7cb1d2bec557594555470d16ccaf15 /.github | |
| parent | a241003d048f33c9072d47217aa6e28beb7ac54f (diff) | |
| download | cpython-ede89af605b1c0442353435ad22195c16274f65d.zip cpython-ede89af605b1c0442353435ad22195c16274f65d.tar.gz cpython-ede89af605b1c0442353435ad22195c16274f65d.tar.bz2 | |
gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u (#105174)
Upgrade builds to OpenSSL 1.1.1u.
This OpenSSL version addresses a pile if less-urgent CVEs since 1.1.1t.
The Mac/BuildScript/build-installer.py was already updated.
Also updates _ssl_data_111.h from OpenSSL 1.1.1u, _ssl_data_300.h from 3.0.9, and adds a new _ssl_data_31.h file from 3.1.1 along with the ssl.c code to use it.
Manual edits to the _ssl_data_300.h file prevent it from removing any existing definitions in case those exist in some peoples builds and were important (avoiding regressions during backporting).
backports of this prior to 3.12 will not include the openssl 3.1 header.
Diffstat (limited to '.github')
| -rw-r--r-- | .github/workflows/build.yml | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 8a42cda..6306f57 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -257,7 +257,7 @@ jobs: needs: check_source if: needs.check_source.outputs.run_tests == 'true' env: - OPENSSL_VER: 1.1.1t + OPENSSL_VER: 1.1.1u PYTHONSTRICTEXTENSIONBUILD: 1 steps: - uses: actions/checkout@v3 @@ -326,7 +326,7 @@ jobs: strategy: fail-fast: false matrix: - openssl_ver: [1.1.1t, 3.0.8, 3.1.0-beta1] + openssl_ver: [1.1.1u, 3.0.9, 3.1.1] env: OPENSSL_VER: ${{ matrix.openssl_ver }} MULTISSL_DIR: ${{ github.workspace }}/multissl @@ -378,7 +378,7 @@ jobs: needs: check_source if: needs.check_source.outputs.run_tests == 'true' && needs.check_source.outputs.run_hypothesis == 'true' env: - OPENSSL_VER: 1.1.1t + OPENSSL_VER: 1.1.1u PYTHONSTRICTEXTENSIONBUILD: 1 steps: - uses: actions/checkout@v3 @@ -487,7 +487,7 @@ jobs: needs: check_source if: needs.check_source.outputs.run_tests == 'true' env: - OPENSSL_VER: 1.1.1t + OPENSSL_VER: 1.1.1u PYTHONSTRICTEXTENSIONBUILD: 1 ASAN_OPTIONS: detect_leaks=0:allocator_may_return_null=1:handle_segv=0 steps: |