Upgrade installers to OpenSSL 1.0.2j

[alex]

BPO	28248
Nosy	@pfmoore, @ronaldoussoren, @larryhastings, @tiran, @tjguk, @benjaminp, @ned-deily, @alex, @zware, @zooba, @dstufft, @matrixise, @scw, @Mariatta, @Safihre
PRs	[Do Not Merge] Convert Misc/NEWS so that it is managed by towncrier #552 [Security][3.4] bpo-29572: Update macOS installer build to OpenSSL 1.0.2k #3447
Files	issue28248.patch

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = 'https://github.com/ned-deily'
closed_at = <Date 2016-11-01.00:02:53.494>
created_at = <Date 2016-09-22.13:56:24.837>
labels = ['type-security', 'OS-mac', 'expert-SSL', '3.7', 'library', 'OS-windows']
title = 'Upgrade installers to OpenSSL 1.0.2j'
updated_at = <Date 2017-09-08.02:35:37.158>
user = 'https://github.com/alex'

bugs.python.org fields:

activity = <Date 2017-09-08.02:35:37.158>
actor = 'vstinner'
assignee = 'ned.deily'
closed = True
closed_date = <Date 2016-11-01.00:02:53.494>
closer = 'ned.deily'
components = ['Library (Lib)', 'macOS', 'Windows', 'SSL']
creation = <Date 2016-09-22.13:56:24.837>
creator = 'alex'
dependencies = []
files = ['45054']
hgrepos = []
issue_num = 28248
keywords = ['patch', 'security_issue']
message_count = 13.0
messages = ['277226', '277234', '277410', '278448', '278453', '278454', '278859', '278866', '278867', '279842', '279843', '283004', '283028']
nosy_count = 17.0
nosy_names = ['paul.moore', 'ronaldoussoren', 'janssen', 'larry', 'christian.heimes', 'tim.golden', 'benjamin.peterson', 'ned.deily', 'alex', 'python-dev', 'zach.ware', 'steve.dower', 'dstufft', 'matrixise', 'scw', 'Mariatta', 'Safihre']
pr_nums = ['552', '3447']
priority = None
resolution = 'fixed'
stage = 'resolved'
status = 'closed'
superseder = None
type = 'security'
url = 'https://bugs.python.org/issue28248'
versions = ['Python 2.7', 'Python 3.4', 'Python 3.5', 'Python 3.6', 'Python 3.7']

[alex]

https://www.openssl.org/news/secadv/20160922.txt

[tiran]

1.0.2i passes all tests of 2.7, 3.5-7 on Linux

[tiran]

Make that OpenSSL 1.0.2j with fix for CVE-2016-7052

https://www.openssl.org/news/openssl-1.0.2-notes.html

[ned-deily]

We didn't get this into 3.6.0b2; needs to be in 3.6.0b3.

[Mariatta]

Hi, I updated the openssl version from 1.0.2h to 1.0.2j in build-installer.py

Please let me know if this works.

Thanks :)