Update to OpenSSL 1.1.1d, 1.1.0l, 1.0.2t

[tiran]

BPO	38117
Nosy	@pfmoore, @ronaldoussoren, @tiran, @tjguk, @benjaminp, @ned-deily, @ambv, @zware, @zooba, @matrixise, @miss-islington
PRs	bpo-38117: Test with OpenSSL 1.1.1d #15983 [3.8] bpo-38117: Test with OpenSSL 1.1.1d (GH-15983) #15992 [3.7] bpo-38117: Test with OpenSSL 1.1.1d (GH-15983) #15994 bpo-38117: Updated OpenSSL to 1.1.1d in macOS installer. #16170 [2.7] bpo-38117: Updated OpenSSL to 1.0.2t in macOS installer for 2.7.x. #16171 [3.7] bpo-38117: Updated OpenSSL to 1.1.1d in macOS installer. (GH-16170) #16172 [3.8] bpo-38117: Updated OpenSSL to 1.1.1d in macOS installer. (GH-16170) #16173 [2.7] bpo-38117: Updates bundled OpenSSL to 1.0.2t #16178 bpo-38117: Update bundled Windows OpenSSL to 1.1.1d #16184 [3.8] bpo-38117: Update bundled Windows OpenSSL to 1.1.1d (GH-16184) #16185 [3.7] bpo-38117: Update bundled Windows OpenSSL to 1.1.1d (GH-16184) #16186

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = None
closed_at = <Date 2019-09-16.15:38:04.493>
created_at = <Date 2019-09-11.15:18:48.468>
labels = ['type-security', 'OS-mac', '3.8', '3.9', 'release-blocker', 'extension-modules', '3.7', 'OS-windows']
title = 'Update to OpenSSL 1.1.1d, 1.1.0l, 1.0.2t'
updated_at = <Date 2019-09-16.15:38:04.492>
user = 'https://github.com/tiran'

bugs.python.org fields:

activity = <Date 2019-09-16.15:38:04.492>
actor = 'steve.dower'
assignee = 'none'
closed = True
closed_date = <Date 2019-09-16.15:38:04.493>
closer = 'steve.dower'
components = ['Extension Modules', 'macOS', 'Windows']
creation = <Date 2019-09-11.15:18:48.468>
creator = 'christian.heimes'
dependencies = []
files = []
hgrepos = []
issue_num = 38117
keywords = ['patch']
message_count = 16.0
messages = ['351934', '351975', '351982', '351995', '351997', '352494', '352503', '352504', '352505', '352506', '352507', '352537', '352538', '352546', '352549', '352551']
nosy_count = 11.0
nosy_names = ['paul.moore', 'ronaldoussoren', 'christian.heimes', 'tim.golden', 'benjamin.peterson', 'ned.deily', 'lukasz.langa', 'zach.ware', 'steve.dower', 'matrixise', 'miss-islington']
pr_nums = ['15983', '15992', '15994', '16170', '16171', '16172', '16173', '16178', '16184', '16185', '16186']
priority = 'release blocker'
resolution = 'fixed'
stage = 'resolved'
status = 'closed'
superseder = None
type = 'security'
url = 'https://bugs.python.org/issue38117'
versions = ['Python 2.7', 'Python 3.7', 'Python 3.8', 'Python 3.9']

[tiran]

OpenSSL versions 1.1.1d, 1.1.0l, and 1.0.2t were released yesterday. They contain a low priority security fix.

[matrixise]

New changeset 58ab134 by Stéphane Wirtel (Christian Heimes) in branch 'master':
bpo-38117: Test with OpenSSL 1.1.1d (GH-15983)
58ab134

[miss-islington]

New changeset 0b7f370 by Miss Islington (bot) in branch '3.8':
bpo-38117: Test with OpenSSL 1.1.1d (GH-15983)
0b7f370

[miss-islington]

New changeset cec68c3 by Miss Islington (bot) (Stéphane Wirtel) in branch '3.7':
[3.7] bpo-38117: Test with OpenSSL 1.1.1d (GH-15983) (GH-15994)
cec68c3

[matrixise]

Thank you for your contribution Christian ;-)

[ned-deily]

The Windows and macOS installers also need to by updated to the new versions.

[ned-deily]

New changeset 24d1597 by Ned Deily in branch 'master':
bpo-38117: Updated OpenSSL to 1.1.1d in macOS installer. (GH-16170)
24d1597

[miss-islington]

New changeset 26c44b5 by Miss Islington (bot) in branch '3.7':
bpo-38117: Updated OpenSSL to 1.1.1d in macOS installer. (GH-16170)
26c44b5

[miss-islington]

New changeset 346b7c9 by Miss Islington (bot) in branch '3.8':
bpo-38117: Updated OpenSSL to 1.1.1d in macOS installer. (GH-16170)
346b7c9

[ned-deily]

New changeset 8dd358c by Ned Deily in branch '2.7':
bpo-38117: Updated OpenSSL to 1.0.2t in macOS installer for 2.7.x. (GH-16171)
8dd358c

[ned-deily]

macOS 3.9, 3.8, 3.7 installers updated to 1.1.1d, macOS 2.7 installer updated to 1.0.2t. Leaving open for Windows installers updates.

[zooba]

I've published the sources and binaries for Windows - will get to updating the 3.9/3.8/3.7 branches later today unless someone else does first (should just require version number changes).

[zooba]

New changeset d890341 by Steve Dower in branch '2.7':
bpo-38117: Updates bundled OpenSSL to 1.0.2t (GH-16178)
d890341

[zooba]

New changeset 3ab73f6 by Steve Dower in branch 'master':
bpo-38117: Update bundled Windows OpenSSL to 1.1.1d (GH-16184)
3ab73f6

[miss-islington]

New changeset 26729ce by Miss Islington (bot) in branch '3.8':
bpo-38117: Update bundled Windows OpenSSL to 1.1.1d (GH-16184)
26729ce

[zooba]

New changeset 76d8fb7 by Steve Dower in branch '3.7':
bpo-38117: Update bundled Windows OpenSSL to 1.1.1d (GH-16184)
76d8fb7