Sitelet https://github.com/python/cpython/issues/151159
Skip to content

Update OpenSSL (June 2026) #151159

Closed
Closed
Update OpenSSL (June 2026)#151159
Labels
3.13only security fixes3.14bugs and security fixes3.15bugs and security fixes3.16new features, bugs and security fixesOS-androidOS-iosOS-macOS-windowsdependenciesPull requests that update a dependency fileinfraCI, GitHub Actions, buildbots, Dependabot, etc.topic-SSLtype-featureA feature request or enhancement

Description

@ned-deily
ned-deily
opened on Jun 9, 2026

Feature or enhancement

Proposal:

OpenSSL has updated releases, including 3.6.3, 3.5.7, 3.0.21.

We should update the CI, release artifacts, and so on.

Has this already been discussed elsewhere?

This is a minor feature, which does not need previous discussion elsewhere

Links to previous discussion of this feature:

See #149254 for the last round.

Linked PRs

Activity

  1. ned-deily
    added
    type-featureA feature request or enhancement
    OS-windows
    OS-mac
    OS-ios
    OS-android
    topic-SSL
    dependenciesPull requests that update a dependency file
    needs backport to 3.13only security fixes
    infraCI, GitHub Actions, buildbots, Dependabot, etc.
    needs backport to 3.14bugs and security fixes
    needs backport to 3.15pre-release feature fixes, bugs and security fixes
    on Jun 9, 2026
  2. StanFromIreland
    added
    3.13only security fixes
    and removed
    needs backport to 3.13only security fixes
    needs backport to 3.14bugs and security fixes
    needs backport to 3.15pre-release feature fixes, bugs and security fixes
    on Jun 9, 2026

  3. 15 remaining items

  4. zware
    added 5 commits that reference this issue on Jun 9, 2026

    [3.15] gh-151159: Update CI to use latest SSL library versions (GH-15…

    dcb049f

    [3.14] gh-151159: Bump OpenSSL versions for iOS and Android (GH-151198)

    6e160ad

    [3.13] gh-151159: Update CI to use latest SSL library versions (GH-15…

    2d8b0b8

    [3.14] gh-151159: Update CI to use latest SSL library versions (GH-15…

    ea7d943

    [3.13] gh-151159: Bump OpenSSL version for Android (GH-151200)

    7d530aa

  5. zware commented on Jun 9, 2026

    @zware
    zware
    on Jun 9, 2026
    Member

    I believe that's everything; 3.16, 3.15, and 3.14 are on OpenSSL 3.5.7 and 3.13 is on OpenSSL 3.0.21 on all relevant platforms for each branch. There do not appear to be any changes to warrant an update to Modules/_ssl_data*.h this time around.

  6. zware
    closed this as completedon Jun 9, 2026
  7. clin1234
    added 4 commits that reference this issue on Jun 9, 2026

    pythongh-151159: Update Windows builds to use OpenSSL 3.5.7 (pythonGH…

    208fe27

    pythongh-151159: Update macOS installer to use OpenSSL 3.5.7. (python…

    b403a41

    pythongh-151159: Bump OpenSSL versions for iOS and Android (pythonGH-…

    1a7e057

    pythongh-151159: Update CI to use latest SSL library versions (python…

    371a716
  8. philthompson10
    added 4 commits that reference this issue on Jun 17, 2026

    pythongh-151159: Update Windows builds to use OpenSSL 3.5.7 (pythonGH…

    7ddea21

    pythongh-151159: Update macOS installer to use OpenSSL 3.5.7. (python…

    bc0a174

    pythongh-151159: Bump OpenSSL versions for iOS and Android (pythonGH-…

    b2f8b9d

    pythongh-151159: Update CI to use latest SSL library versions (python…

    eb510da
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    3.13only security fixes3.14bugs and security fixes3.15bugs and security fixes3.16new features, bugs and security fixesOS-androidOS-iosOS-macOS-windowsdependenciesPull requests that update a dependency fileinfraCI, GitHub Actions, buildbots, Dependabot, etc.topic-SSLtype-featureA feature request or enhancement

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions