Upgrade installers to OpenSSL 1.0.2k

[zware]

BPO	29572
Nosy	@pfmoore, @ronaldoussoren, @vstinner, @larryhastings, @tiran, @tjguk, @ned-deily, @zware, @zooba
PRs	bpo-29572: Update Windows build to OpenSSL 1.0.2k #439 bpo-29572: Update Windows build to OpenSSL 1.0.2k #442 bpo-29572: Update Windows build to OpenSSL 1.0.2k #443 bpo-29572: Update Windows build to OpenSSL 1.0.2k #444 bpo-29572: Update macOS installer build to OpenSSL 1.0.2k #457 bpo-29572: Update macOS installer build to OpenSSL 1.0.2k (#457) #459 bpo-29572: Update macOS installer build to OpenSSL 1.0.2k (#457) #2835 bpo-29572: Update macOS installer build to OpenSSL 1.0.2k (#457) #2836 [3.4][Security] bpo-29572: Update Windows build to OpenSSL 1.0.2k (GH-443) #3445 [Security][3.4] bpo-29572: Update macOS installer build to OpenSSL 1.0.2k #3447

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = 'https://github.com/ned-deily'
closed_at = <Date 2017-07-24.08:04:34.505>
created_at = <Date 2017-02-15.18:06:12.057>
labels = ['type-security', 'OS-mac', 'expert-installation', 'expert-SSL', '3.7', 'OS-windows']
title = 'Upgrade installers to OpenSSL 1.0.2k'
updated_at = <Date 2019-05-10.18:01:33.550>
user = 'https://github.com/zware'

bugs.python.org fields:

activity = <Date 2019-05-10.18:01:33.550>
actor = 'ned.deily'
assignee = 'ned.deily'
closed = True
closed_date = <Date 2017-07-24.08:04:34.505>
closer = 'ned.deily'
components = ['Installation', 'macOS', 'Windows', 'SSL']
creation = <Date 2017-02-15.18:06:12.057>
creator = 'zach.ware'
dependencies = []
files = []
hgrepos = []
issue_num = 29572
keywords = []
message_count = 15.0
messages = ['287877', '288924', '288925', '288938', '290303', '290304', '290314', '290316', '290317', '290318', '290589', '290627', '298931', '298932', '307873']
nosy_count = 9.0
nosy_names = ['paul.moore', 'ronaldoussoren', 'vstinner', 'larry', 'christian.heimes', 'tim.golden', 'ned.deily', 'zach.ware', 'steve.dower']
pr_nums = ['439', '442', '443', '444', '457', '459', '2835', '2836', '3445', '3447']
priority = 'high'
resolution = 'fixed'
stage = 'resolved'
status = 'closed'
superseder = None
type = 'security'
url = 'https://bugs.python.org/issue29572'
versions = ['Python 2.7', 'Python 3.5', 'Python 3.6', 'Python 3.7']

[zware]

It's that time once again (as of a few weeks ago). This one doesn't seem to be a high severity update, though. Also, it seems that 1.1.0e is due tomorrow; I'm not sure if that means 1.0.2l will also come out tomorrow, so we'll want to hold off until at least then anyway. This is mostly just a reminder for now.

[ned-deily]

Steve, Zach: can we get this in for 3.6.1?

[zware]

Yes*.

[zware]

Done on Windows except for PR444 for 2.7, which is waiting on Travis.

[ned-deily]

New changeset 343d483 by Ned Deily in branch '3.6':
bpo-29572: Update macOS installer build to OpenSSL 1.0.2k (#457) (#459)
343d483

[ned-deily]

New changeset cfcd767 by Ned Deily in branch 'master':
bpo-29572: Update macOS installer build to OpenSSL 1.0.2k (#457)
cfcd767