OpenSSL 3.0.16

[plancksecond]

Describe the feature

Update OpenSSL to 3.0.16 for cve-2024-13176 and cve-2024-9143

Use Case

Security patch

Proposed Solution

No response

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

CLI version used

Latest

Environment details (OS name and version, etc.)

Windows

[adev-code]

Hello @adev-code, thanks for raising the feature request. The team will update OpenSSL but we cannot provide an ETA for release. Please refer to an AWS CLI changelog for updates about this going forward https://raw.githubusercontent.com/aws/aws-cli/v2/CHANGELOG.rst . Please let me know if you have any other questions. Thanks.

[github-actions]

Greetings! It looks like this issue hasn’t been active in longer than five days. We encourage you to check if this is still an issue in the latest release. In the absence of more information, we will be closing this issue soon. If you find that this is still a problem, please feel free to provide a comment or upvote with a reaction on the initial post to prevent automatic closure. If the issue is already closed, please feel free to open a new one.

[plancksecond]

I checked the latest version and OpenSSL has not been updated. It is still 3.0.15

[aemous]

Closing issue as the latest (2.27.11 and later) AWS CLI v2 Windows and Mac installers now ship with OpenSSL 3.0.16 bundled.

[github-actions]

This issue is now closed. Comments on closed issues are hard for our team to see.
If you need more assistance, please open a new issue that references this one.