[3.11] gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u (GH-105174) by gpshead · Pull Request #105200 · python/cpython (original) (raw)

Upgrade builds to OpenSSL 1.1.1u.

This OpenSSL version addresses a pile if less-urgent CVEs since 1.1.1t.

The Mac/BuildScript/build-installer.py was already updated.

Also updates _ssl_data_111.h from OpenSSL 1.1.1u, _ssl_data_300.h from 3.0.9.

Manual edits to the _ssl_data_300.h file prevent it from removing any existing definitions in case those exist in some peoples builds and were important (avoiding regressions during backporting).

Omits the 3.12+ addition of a _ssl_data_31.h file.

(cherry picked from commit ede89af)

• Issue: Update OpenSSL used in binary releases per CVE-2023-0464 #103142