[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Ned Deily added the comment: Thanks, Steve and Srinivas! -- priority: deferred blocker -> versions: +Python 3.10 ___ Python tracker ___

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Change by Steve Dower : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker ___ ___

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Steve Dower added the comment: New changeset 617af99312ca36ad5a08db764858caf11c92a2c0 by Steve Dower in branch '3.7': bpo-40164: Update Windows OpenSSL to 1.1.1g (GH-20834) https://github.com/python/cpython/commit/617af99312ca36ad5a08db764858caf11c92a2c0 --

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Steve Dower added the comment: New changeset 7e57c367d65f3d0219978b465dc00da15ae3724c by Steve Dower in branch '3.8': bpo-40164: Update Windows OpenSSL to 1.1.1g (GH-20834) https://github.com/python/cpython/commit/7e57c367d65f3d0219978b465dc00da15ae3724c --

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

miss-islington added the comment: New changeset 166d7234b5ae07f78feb5ddfb3026fbd2a1a36e2 by Miss Islington (bot) in branch '3.9': bpo-40164: Update Windows OpenSSL to 1.1.1g (GH-20834) https://github.com/python/cpython/commit/166d7234b5ae07f78feb5ddfb3026fbd2a1a36e2 --

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Change by Steve Dower : -- pull_requests: +20033 pull_request: https://github.com/python/cpython/pull/20840 ___ Python tracker ___

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Change by Steve Dower : -- pull_requests: +20034 pull_request: https://github.com/python/cpython/pull/20841 ___ Python tracker ___

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Steve Dower added the comment: New changeset 80d827c3cb041ae72b9b0572981c50bdd1fe2cab by Srinivas Reddy Thatiparthy (శ్రీనివాస్ రెడ్డి తాటిపర్తి) in branch 'master': bpo-40164: Update Windows OpenSSL to 1.1.1g (GH-20834)

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Change by miss-islington : -- pull_requests: +20032 pull_request: https://github.com/python/cpython/pull/20839 ___ Python tracker ___

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Steve Dower added the comment: Okay, new sources and build are up, so I retriggered the PR. If it's all good, I'll merge and backport. -- ___ Python tracker ___

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Steve Dower added the comment: Thanks. Your PR will start to work once I've done the updated build, so don't worry about the failure right now. OpenSSL updates require build manager involvement, so it's blocked on me :) -- ___ Python tracker

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Srinivas Reddy Thatiparthy(శ్రీనివాస్ రెడ్డి తాటిపర్తి) added the comment: Steve, I have done it. And I didn't see your reply. -- ___ Python tracker ___

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Change by Srinivas Reddy Thatiparthy(శ్రీనివాస్ రెడ్డి తాటిపర్తి) : -- nosy: +thatiparthy nosy_count: 9.0 -> 10.0 pull_requests: +20028 pull_request: https://github.com/python/cpython/pull/20834 ___ Python tracker

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Steve Dower added the comment: Yeah, I'll get onto it now. -- ___ Python tracker ___ ___ Python-bugs-list mailing list

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Ned Deily added the comment: Any chance of getting the Windows builds using 1.1.1g for the upcoming 3.7.8? -- ___ Python tracker ___

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Ned Deily added the comment: I believe the Windows builds are still using 1.1.1f. -- ___ Python tracker ___ ___ Python-bugs-list

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Łukasz Langa added the comment: Should this still be open? -- nosy: +lukasz.langa ___ Python tracker ___ ___ Python-bugs-list

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Ned Deily added the comment: New changeset 7ad3adda9bff8a9055eaf0b66489e8204f1e7cc6 by Miss Islington (bot) in branch '3.7': bpo-40164: Update macOS installer builds to use OpenSSL 1.1.1g. (GH-19642) (GH-19644)

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

miss-islington added the comment: New changeset 9e51aab37e9af6fa0fe406fd56184a0aded28e11 by Miss Islington (bot) in branch '3.8': bpo-40164: Update macOS installer builds to use OpenSSL 1.1.1g. (GH-19642) https://github.com/python/cpython/commit/9e51aab37e9af6fa0fe406fd56184a0aded28e11

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Ned Deily added the comment: New changeset 783a673f23c5e9ffafe12fe172e119dc0fa2abda by Ned Deily in branch 'master': bpo-40164: Update macOS installer builds to use OpenSSL 1.1.1g. (GH-19642) https://github.com/python/cpython/commit/783a673f23c5e9ffafe12fe172e119dc0fa2abda --

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Change by miss-islington : -- nosy: +miss-islington nosy_count: 7.0 -> 8.0 pull_requests: +18967 pull_request: https://github.com/python/cpython/pull/19643 ___ Python tracker

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Change by miss-islington : -- pull_requests: +18968 pull_request: https://github.com/python/cpython/pull/19644 ___ Python tracker ___

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Change by Ned Deily : -- pull_requests: +18966 pull_request: https://github.com/python/cpython/pull/19642 ___ Python tracker ___

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Ned Deily added the comment: > Are we even impacted by the issue though? Certainly we use a check_chain function at least indirectly but, whether that path is vulnerable, dunno. But, in any case, we will no doubt be pinged about it so best to be ahead of the curve, I think. --

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Steve Dower added the comment: That'll teach me for being so quick on this... Are we even impacted by the issue though? I don't see any calls to SSL_check_chain() in our code or the SSL sources. Advisory: https://www.openssl.org/news/secadv/20200421.txt Full diff:

[issue40164] Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g

Ned Deily added the comment: And today (2020-04-21) 1.1.1g is released with a high severity fix. -- title: Upgrade Windows and macOS installer builds to OpenSSL 1.1.1f -> Upgrade Windows and macOS installer builds to OpenSSL 1.1.1g ___ Python