Skip to content

Conversation

@miss-islington
Copy link
Contributor

@miss-islington miss-islington commented Jun 1, 2020

Fix :mod:`sslcode to be compatible with OpenSSL 1.1.x builds that useno-deprecated`` and ``--api=1.1.0``.

Note: Tests assume full OpenSSL API and fail with limited API.

Signed-off-by: Christian Heimes [email protected]
Co-authored-by: Mark Wright [email protected]
(cherry picked from commit a871f69)

Co-authored-by: Christian Heimes [email protected]

https://bugs.python.org/issue30008

Automerge-Triggered-By: @tiran

Fix :mod:`ssl`` code to be compatible with OpenSSL 1.1.x builds that use
``no-deprecated`` and ``--api=1.1.0``.

Note: Tests assume full OpenSSL API and fail with limited API.

Signed-off-by: Christian Heimes <[email protected]>
Co-authored-by: Mark Wright <[email protected]>
(cherry picked from commit a871f69)

Co-authored-by: Christian Heimes <[email protected]>
@miss-islington
Copy link
Contributor Author

@tiran: Status check is done, and it's a success ✅ .

@miss-islington miss-islington merged commit 9c0ff17 into python:3.8 Jun 1, 2020
@miss-islington miss-islington deleted the backport-a871f69-3.8 branch June 1, 2020 07:17
@miss-islington
Copy link
Contributor Author

@tiran: Status check is done, and it's a success ✅ .

1 similar comment
@miss-islington
Copy link
Contributor Author

@tiran: Status check is done, and it's a success ✅ .

jefferyto added a commit to jefferyto/openwrt-packages that referenced this pull request Jul 20, 2020
This version includes fixes for:
* CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface
* CVE-2020-15523: Python uses invalid DLL path after calling Py_SetPath
  on Windows

This version also includes support for OpenSSL 1.1.x builds that use
'no-deprecated' and '--api=1.1.0'[1], and so this removes the previous
OpenSSL-related patches.

This also backports fixes for security issues, including:
* CVE-2019-20907: Infinite loop in the tarfile module

This also updates the setuptools and pip packages to 47.1.0 and 20.1.1,
respectively.

[1]: python/cpython#20566

Signed-off-by: Jeffery To <[email protected]>
1715173329 pushed a commit to immortalwrt/packages that referenced this pull request Jul 20, 2020
This version includes fixes for:
* CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface
* CVE-2020-15523: Python uses invalid DLL path after calling Py_SetPath
  on Windows

This version also includes support for OpenSSL 1.1.x builds that use
'no-deprecated' and '--api=1.1.0'[1], and so this removes the previous
OpenSSL-related patches.

This also backports fixes for security issues, including:
* CVE-2019-20907: Infinite loop in the tarfile module

This also updates the setuptools and pip packages to 47.1.0 and 20.1.1,
respectively.

[1]: python/cpython#20566

Signed-off-by: Jeffery To <[email protected]>
blocktrron pushed a commit to blocktrron/packages that referenced this pull request Jul 22, 2020
This version includes fixes for:
* CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface
* CVE-2020-15523: Python uses invalid DLL path after calling Py_SetPath
  on Windows

This version also includes support for OpenSSL 1.1.x builds that use
'no-deprecated' and '--api=1.1.0'[1], and so this removes the previous
OpenSSL-related patches.

This also backports fixes for security issues, including:
* CVE-2019-20907: Infinite loop in the tarfile module

This also updates the setuptools and pip packages to 47.1.0 and 20.1.1,
respectively.

[1]: python/cpython#20566

Signed-off-by: Jeffery To <[email protected]>
farmergreg pushed a commit to farmergreg/packages that referenced this pull request Sep 8, 2020
This version includes fixes for:
* CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface
* CVE-2020-15523: Python uses invalid DLL path after calling Py_SetPath
  on Windows

This version also includes support for OpenSSL 1.1.x builds that use
'no-deprecated' and '--api=1.1.0'[1], and so this removes the previous
OpenSSL-related patches.

This also backports fixes for security issues, including:
* CVE-2019-20907: Infinite loop in the tarfile module

This also updates the setuptools and pip packages to 47.1.0 and 20.1.1,
respectively.

[1]: python/cpython#20566

Signed-off-by: Jeffery To <[email protected]>
farmergreg pushed a commit to farmergreg/packages that referenced this pull request Sep 8, 2020
This version includes fixes for:
* CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface
* CVE-2020-15523: Python uses invalid DLL path after calling Py_SetPath
  on Windows

This version also includes support for OpenSSL 1.1.x builds that use
'no-deprecated' and '--api=1.1.0'[1], and so this removes the previous
OpenSSL-related patches.

This also backports fixes for security issues, including:
* CVE-2019-20907: Infinite loop in the tarfile module

This also updates the setuptools and pip packages to 47.1.0 and 20.1.1,
respectively.

[1]: python/cpython#20566

Signed-off-by: Jeffery To <[email protected]>
@floppym floppym mannequin mentioned this pull request May 18, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants