Skip to content

[OpenSSL] Update to 1.1.1k#16937

Merged
strega-nil-ms merged 3 commits intomicrosoft:masterfrom
metsma:openssl
Apr 30, 2021
Merged

[OpenSSL] Update to 1.1.1k#16937
strega-nil-ms merged 3 commits intomicrosoft:masterfrom
metsma:openssl

Conversation

@metsma
Copy link
Contributor

@metsma metsma commented Mar 29, 2021 •
edited by NancyLi1013
Loading

Security fixes for CVE-2021-3450 and CVE-2021-3449
https://www.openssl.org/news/vulnerabilities.html
Use similar configure log file pattern as build log

Signed-off-by: Raul Metsma raul@metsma.ee

Fixed #17233

@NancyLi1013 NancyLi1013 self-assigned this Mar 30, 2021
@NancyLi1013 NancyLi1013 added the category:port-update The issue is with a library, which is requesting update new revision label Mar 30, 2021
@NancyLi1013
Copy link
Contributor

NancyLi1013 commented Mar 30, 2021

Hi @metsma
Thanks for your PR.

The failures on x86-windows like this:

CMake Error at CMakeLists.txt:377 (message):
  Must be able to find shared_ptr

@metsma
Copy link
Contributor Author

metsma commented Mar 30, 2021

OpenSSL is pure C and this is C++ class. Are you sure this error comes from OpenSSL

@NancyLi1013
Copy link
Contributor

NancyLi1013 commented Apr 1, 2021

The error is from coolprop:

-- Found PythonInterp: D:/downloads/tools/python/python-2.7.16-x86/python.exe (found suitable version "2.7.16", minimum required is "2.7") 
-- Looking for C++ include memory
-- Looking for C++ include memory - not found
-- Looking for C++ include tr1/memory
-- Looking for C++ include tr1/memory - not found
CMake Error at CMakeLists.txt:377 (message):
  Must be able to find shared_ptr


-- Configuring incomplete, errors occurred!

I tried to build this port on my machine and it can be built successfully.

Comparing with the configure log, I found something different:

-- Found PythonInterp: F:/16937/vcpkg/downloads/tools/python/python-2.7.16-x86/python.exe (found suitable version "2.7.16", minimum required is "2.7") 
-- Looking for C++ include memory
-- Looking for C++ include memory - found
-- Performing Test HAVE_SHARED_PTR_IN_STD_NAMESPACE
-- Performing Test HAVE_SHARED_PTR_IN_STD_NAMESPACE - Success
-- Found shared_ptr in std namespace using <memory> header.

So the root cause seems that memory cannot be found on CI test machine.

@PhoebeHui
Copy link
Contributor

PhoebeHui commented Apr 2, 2021

/azp run

@azure-pipelines
Copy link

azure-pipelines bot commented Apr 2, 2021

Azure Pipelines successfully started running 1 pipeline(s).

@Hoikas Hoikas mentioned this pull request Apr 12, 2021
Closed
@NancyLi1013 NancyLi1013 mentioned this pull request Apr 13, 2021
Closed
@NancyLi1013
Copy link
Contributor

NancyLi1013 commented Apr 14, 2021

/azp run

@azure-pipelines
Copy link

azure-pipelines bot commented Apr 14, 2021

Azure Pipelines successfully started running 1 pipeline(s).

@NancyLi1013
Copy link
Contributor

NancyLi1013 commented Apr 14, 2021

The failures caused by popsift will be fixed by #17277.

@NancyLi1013
Copy link
Contributor

NancyLi1013 commented Apr 15, 2021

/azp run

@azure-pipelines
Copy link

azure-pipelines bot commented Apr 15, 2021

Azure Pipelines successfully started running 1 pipeline(s).

@NancyLi1013 NancyLi1013 added the info:needs-maintainer-attention Lets the current 'on rotation' vcpkg maintainer know they need to look at this. label Apr 16, 2021
@NancyLi1013
Copy link
Contributor

NancyLi1013 commented Apr 16, 2021

LGTM, thanks for your update @metsma.

@IceCodeNew
Copy link

IceCodeNew commented Apr 18, 2021 •
edited
Loading

ping
@NancyLi1013

@Hoikas
Copy link
Contributor

Hoikas commented Apr 24, 2021

IMO This should be a priority over all other openssl port updates, considering the security content...

@NancyLi1013
Copy link
Contributor

NancyLi1013 commented Apr 25, 2021

@metsma

Could you please resolve the conflicts in this PR?

metsma added 2 commits April 25, 2021 11:28
@metsma
[OpenSSL] Update to 1.1.1k
28428a9 
Signed-off-by: Raul Metsma <raul@metsma.ee>
@metsma
Update JSON file
84fc43f 
Signed-off-by: Raul Metsma <raul@metsma.ee>
@shiena shiena mentioned this pull request Apr 25, 2021
Closed
@metsma
Copy link
Contributor Author

metsma commented Apr 25, 2021

Conflict resolved

@IceCodeNew
Copy link

IceCodeNew commented Apr 26, 2021

Will the failed check block this PR?
I see the marble somehow failed compiled in two different checks.

@Hoikas
Copy link
Contributor

Hoikas commented Apr 26, 2021

The failure seems to be fixed by #17492.

@NancyLi1013 NancyLi1013 added the depends:different-pr This PR or Issue depends on a PR which has been filed label Apr 26, 2021
@NancyLi1013
Copy link
Contributor

NancyLi1013 commented Apr 26, 2021

Will the failed check block this PR?
I see the marble somehow failed compiled in two different checks.

This failure is not related with this PR, but we need to wait for the PR #17492 merged. I will rerun this PR once solved.

@metsma
Copy link
Contributor Author

metsma commented Apr 28, 2021

It has been already month? How long takes to merge CVE fixes?

@NancyLi1013
Copy link
Contributor

NancyLi1013 commented Apr 28, 2021

It has been already month? How long takes to merge CVE fixes?

Sorry for the long delay. Currently, we need to wait for PR #17492 merged.

@Hoikas Hoikas mentioned this pull request Apr 29, 2021
Merged
@NancyLi1013
Copy link
Contributor

NancyLi1013 commented Apr 29, 2021

/azp run

@NancyLi1013 NancyLi1013 removed the depends:different-pr This PR or Issue depends on a PR which has been filed label Apr 29, 2021
@azure-pipelines
Copy link

azure-pipelines bot commented Apr 29, 2021

Azure Pipelines successfully started running 1 pipeline(s).

@NancyLi1013
Copy link
Contributor

NancyLi1013 commented Apr 30, 2021

@strega-nil , @BillyONeal

Could you please help merge this PR?

Thanks.

@strega-nil-ms
Copy link
Contributor

strega-nil-ms commented Apr 30, 2021

Thanks @metsma, this is great :)

@strega-nil-ms strega-nil-ms merged commit 85308d1 into microsoft:master Apr 30, 2021
@metsma metsma deleted the openssl branch April 30, 2021 18:43
@lstipakov lstipakov mentioned this pull request Jun 16, 2021
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer

@NancyLi1013 NancyLi1013 NancyLi1013 approved these changes

Reviewers whose approvals may not affect merge requirements

Assignees

@NancyLi1013 NancyLi1013

Labels

category:port-update The issue is with a library, which is requesting update new revision info:needs-maintainer-attention Lets the current 'on rotation' vcpkg maintainer know they need to look at this.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

[OpenSSL] update to 1.1.1k

7 participants

@metsma @NancyLi1013 @PhoebeHui @IceCodeNew @Hoikas @strega-nil-ms @BillyONeal