[3.9] gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u (GH-105174) (GH-105200) by gpshead · Pull Request #105205 · python/cpython (original) (raw)

Upgrade binary builds to OpenSSL 1.1.1u. (but we aren't producing binaries for a release this old so...)

Also updates _ssl_data_111.h from OpenSSL 1.1.1u, _ssl_data_300.h from 3.0.9.

Manual edits to the _ssl_data_300.h file prevent it from removing any existing definitions in case those exist in some peoples builds and were important (avoiding regressions during backporting).

(cherry picked from commit ede89af).
(cherry picked from commit a5d2b54)
(cherry picks commit f90d3f6 as well to include #105130)

• Issue: Update OpenSSL used in binary releases per CVE-2023-0464 #103142