[3.8] bpo-30008: Fix OpenSSL no-deprecated compilation (GH-20397) #20566
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Fix :mod:`ssl`` code to be compatible with OpenSSL 1.1.x builds that use ``no-deprecated`` and ``--api=1.1.0``. Note: Tests assume full OpenSSL API and fail with limited API. Signed-off-by: Christian Heimes <christian@python.org> Co-authored-by: Mark Wright <gienah@gentoo.org> (cherry picked from commit a871f69) Co-authored-by: Christian Heimes <christian@python.org>
tiran
approved these changes
Jun 1, 2020
|
@tiran: Status check is done, and it's a success ✅ . |
|
@tiran: Status check is done, and it's a success ✅ . |
1 similar comment
|
@tiran: Status check is done, and it's a success ✅ . |
jefferyto
added a commit
to jefferyto/openwrt-packages
that referenced
this pull request
Jul 20, 2020
This version includes fixes for: * CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface * CVE-2020-15523: Python uses invalid DLL path after calling Py_SetPath on Windows This version also includes support for OpenSSL 1.1.x builds that use 'no-deprecated' and '--api=1.1.0'[1], and so this removes the previous OpenSSL-related patches. This also backports fixes for security issues, including: * CVE-2019-20907: Infinite loop in the tarfile module This also updates the setuptools and pip packages to 47.1.0 and 20.1.1, respectively. [1]: python/cpython#20566 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
1715173329
pushed a commit
to immortalwrt/packages
that referenced
this pull request
Jul 20, 2020
This version includes fixes for: * CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface * CVE-2020-15523: Python uses invalid DLL path after calling Py_SetPath on Windows This version also includes support for OpenSSL 1.1.x builds that use 'no-deprecated' and '--api=1.1.0'[1], and so this removes the previous OpenSSL-related patches. This also backports fixes for security issues, including: * CVE-2019-20907: Infinite loop in the tarfile module This also updates the setuptools and pip packages to 47.1.0 and 20.1.1, respectively. [1]: python/cpython#20566 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
blocktrron
pushed a commit
to blocktrron/packages
that referenced
this pull request
Jul 22, 2020
This version includes fixes for: * CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface * CVE-2020-15523: Python uses invalid DLL path after calling Py_SetPath on Windows This version also includes support for OpenSSL 1.1.x builds that use 'no-deprecated' and '--api=1.1.0'[1], and so this removes the previous OpenSSL-related patches. This also backports fixes for security issues, including: * CVE-2019-20907: Infinite loop in the tarfile module This also updates the setuptools and pip packages to 47.1.0 and 20.1.1, respectively. [1]: python/cpython#20566 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
farmergreg
pushed a commit
to farmergreg/packages
that referenced
this pull request
Sep 8, 2020
This version includes fixes for: * CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface * CVE-2020-15523: Python uses invalid DLL path after calling Py_SetPath on Windows This version also includes support for OpenSSL 1.1.x builds that use 'no-deprecated' and '--api=1.1.0'[1], and so this removes the previous OpenSSL-related patches. This also backports fixes for security issues, including: * CVE-2019-20907: Infinite loop in the tarfile module This also updates the setuptools and pip packages to 47.1.0 and 20.1.1, respectively. [1]: python/cpython#20566 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
farmergreg
pushed a commit
to farmergreg/packages
that referenced
this pull request
Sep 8, 2020
This version includes fixes for: * CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface * CVE-2020-15523: Python uses invalid DLL path after calling Py_SetPath on Windows This version also includes support for OpenSSL 1.1.x builds that use 'no-deprecated' and '--api=1.1.0'[1], and so this removes the previous OpenSSL-related patches. This also backports fixes for security issues, including: * CVE-2019-20907: Infinite loop in the tarfile module This also updates the setuptools and pip packages to 47.1.0 and 20.1.1, respectively. [1]: python/cpython#20566 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Fix :mod:`ssl
code to be compatible with OpenSSL 1.1.x builds that useno-deprecated`` and ``--api=1.1.0``.Note: Tests assume full OpenSSL API and fail with limited API.
Signed-off-by: Christian Heimes christian@python.org
Co-authored-by: Mark Wright gienah@gentoo.org
(cherry picked from commit a871f69)
Co-authored-by: Christian Heimes christian@python.org
https://bugs.python.org/issue30008
Automerge-Triggered-By: @tiran