Repository navigation
Upgrade OpenSSL bundled with windows to 1.1.1s #100180
Copy link
Copy link
Closed
Labels
release-blockertype-featureA feature request or enhancementA feature request or enhancementtype-securityA security issueA security issue
Description
Activity
added on Dec 11, 2022
type-featureA feature request or enhancementA feature request or enhancement
Agreed that there's nothing critical in there, but since you've created the issue, let's keep this open so we remember to update before the next round of releases.
We just released every version last week, so I'll mark this as a blocker before the next release (apart from the next 3.12 alpha), as there's a pretty good chance we'll get 1.1.1t before then.
added on Dec 12, 2022
type-securityA security issueA security issue
and removed type-featureA feature request or enhancementA feature request or enhancement
added on Dec 12, 2022
type-featureA feature request or enhancementA feature request or enhancement
Since 3.12.0a4 is scheduled for today, do you want to get this done before I cut the release, @zooba?
@Yhg1s I'll get on it now
We should also update the macOS installer as well. I'll do that and test it before tomorrow's release.
4 remaining items
added 4 commits that reference this issue on Jan 10, 2023
Closing as complete. Please reopen if I am mistaken.
moved this from Todo to Done in Release and Deferred blockers 🚫on Feb 1, 2023
Metadata
Metadata
Assignees
Labels
release-blockertype-featureA feature request or enhancementA feature request or enhancementtype-securityA security issueA security issue
Projects
- StatusShow more project fieldsDone
Enhancement
The version of OpenSSL used in get_externals.bat is 1.1.1q, where 1.1.1s has been released. This in turn pulls from https://github.com/python/cpython-bin-deps/tree/openssl-bin, which was last updated by @zooba to 1.1.1q
Pitch
It would be nice to get the latest updates. Looking at the changelog I don't see anything critial for windows, so maybe 1.1.1q is still OK, in which csae feel free to close the issue.
Previous discussion
Linked PRs