You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
gh-35571: update openssl to 3.0.8
from sage-devel by Thierry: I took his branch and made this PR from it.
Sage's current openssl version (3.0.5) hass several "High severity"
vulnerabilities, see https://www.openssl.org/news/vulnerabilities.html
It would be nice to have the fixes included in the next Sage release. I
am not
using github, here is a pull request (literally) to fix this :
git pull https://lipn.univ-
paris13.fr/~monteil/hebergement/sage/sage.git openssl.3.0.8
(commit hash : 997a6bd)
I checked the hash of the tarballs against the GPG signatures by
upstream developers.
Tarball at : https://www.openssl.org/source/openssl-3.0.8.tar.gz
Ciao,
Thierry
P.S. Note that 3.1.0. has been very recently released, however 3.0.x is
LTS and will
not have structural changes. Just in case, here is a verified branch :
git pull https://lipn.univ-
paris13.fr/~monteil/hebergement/sage/sage.git openssl.3.1.0
(commit hash : 9229a2be66dc0e4f2e3f677aa515a33bfe72a873)
Tarball at : https://www.openssl.org/source/openssl-3.1.0.tar.gz
URL: #35571
Reported by: Dima Pasechnik
Reviewer(s):
0 commit comments