René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Update OpenSSL versions for CI and Windows","articleBody":"OpenSSL v3.4.1 is out and contains some security patches (see https://github.com/openssl/openssl/releases/tag/openssl-3.4.1). There is one high vulnerabilty ([CVE-2024-12797](https://nvd.nist.gov/vuln/detail/CVE-2024-12797)) that was fixed.\n\nHowever, what I'm interested in, are the fixes that allow me to continue working on #128391 (see https://github.com/openssl/openssl/issues/26388). Note that this high vulnerability does not affect the Windows build as the latter is still using OpenSSL 3.0.15 which is only affected by the following low vulnerabilities:\n\n- [CVE-2024-13176](https://openssl-library.org/news/vulnerabilities/#CVE-2024-13176)\n- [CVE-2024-9143](https://openssl-library.org/news/vulnerabilities/#CVE-2024-9143)\n\nThose low vulnerabilities affect OpenSSL 1.1.1+ and 3.x versions that we currently use and were fixed in the February 2025 release.\n\nNote: I don't think Python is directly affected by the low vulnerabilies and I just want the fixes that were included in those releases for my own work. Since the high vulnerability only affects 3.2+, Windows builds should not be affected.\n\ncc @gpshead \n\n### Plan:\n\n- [x] Update https://github.com/python/cpython-source-deps to pull OpenSSL 3.0.16 (cc @zooba)\n- [x] Update macOS and Windows builds to use OpenSSL 3.0.16.\n- [x] Update CI workflows to test against [3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.1]\n- [x] Update OpenSSL data headers\n\n\u003c!-- gh-linked-prs --\u003e\n### Linked PRs\n* gh-131839\n* gh-131848\n* gh-131849\n* gh-132051\n* gh-132052\n* gh-132053\n* gh-132189\n* gh-132196\n* gh-132197\n* gh-131618\n* gh-133077\n\u003c!-- /gh-linked-prs --\u003e\n","author":{"url":"https://github.com/picnixz","@type":"Person","name":"picnixz"},"datePublished":"2025-03-18T15:55:03.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":26},"url":"https://github.com/131423/cpython/issues/131423"}