| Commit message (Collapse) | Author | Age | Files | Lines |
| |\
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This change includes all necessary changes required to update to OpenSSL
3.5.4.
More information about the 3.5.4 release can be found in the relevant
release notes (see 8e12a5c4eb3507846b5 for more details).
Merge commit '8e12a5c4eb3507846b507d0afe87d115af41df40'
|
| |\|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This change updates the sources for crypto/openssl. The subsequent
commit will update the build artifacts to match the 3.5.3 release.
More details about the update can be found in the related vendor branch
commits.
MFC after: 1 week
Merge commit 'aed904c48f330dc76da942a8ee2d6eef9d11f572'
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Migrate to OpenSSL 3.5 in advance of FreeBSD 15.0. OpenSSL 3.0 will be
EOL after 2026-09-07.
Approved by: philip (mentor)
Sponsored by: Alpha-Omega Beach Cleaning Project
Sponsored by: The FreeBSD Foundation
Differential revision: https://reviews.freebsd.org/D51613
|
| |\|
| |
| |
| |
| |
| | |
Approved by: philip (mentor)
Sponsored by: Alpha-Omega Beach Cleaning Project
Sponsored by: The FreeBSD Foundation
|
| |\|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This release incorporates the following bug fixes and mitigations:
- [CVE-2024-13176](https://www.openssl.org/news/vulnerabilities.html#CVE-2024-13176
- [CVE-2024-9143](https://www.openssl.org/news/vulnerabilities.html#CVE-2024-9143)
Release notes can be found at:
https://openssl-library.org/news/openssl-3.0-notes/index.html
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D49296
|
| |\|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This release incorporates the following bug fixes and mitigations:
- Fixed possible denial of service in X.509 name checks ([CVE-2024-6119])
- Fixed possible buffer overread in SSL_select_next_proto() ([CVE-2024-5535])
Release notes can be found at:
https://openssl-library.org/news/openssl-3.0-notes/index.html
Co-authored-by: gordon
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D46602
Merge commit '108164cf95d9594884c2dcccba2691335e6f221b'
|
| |\|
| |
| |
| | |
Merge commit 'e60dbfd00b009d424dfc5446d132872c93dd0aed'
|
| |\|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This release resolves 3 upstream found CVEs:
- Fixed potential use after free after SSL_free_buffers() is called (CVE-2024-4741)
- Fixed an issue where checking excessively long DSA keys or parameters may be very slow (CVE-2024-4603)
- Fixed unbounded memory growth with session handling in TLSv1.3 (CVE-2024-2511)
MFC after: 3 days
Merge commit '1070e7dca8223387baf5155524b28f62bfe7da3c'
|
| |/
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Fixed PKCS12 Decoding crashes ([CVE-2024-0727])
* Fixed Excessive time spent checking invalid RSA public keys
([CVE-2023-6237])
* Fixed POLY1305 MAC implementation corrupting vector registers on
PowerPC CPUs which support PowerISA 2.07 ([CVE-2023-6129])
* Fix excessive time spent in DH check / generation with large Q
parameter value ([CVE-2023-5678])
Release notes can be found at
https://www.openssl.org/news/openssl-3.0-notes.html.
Approved by: emaste
MFC after: 3 days
Merge commit '9dd13e84fa8eca8f3462bd55485aa3da8c37f54a'
|
| |
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=182044
|
| |
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=167612
|
| |
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=162911
|
| |
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=160814
|
| |
|
|
|
|
|
| |
branch. This time, these are mostly the `Makefile.ssl' files.
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=142430
|
| |
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=142425
|
| |
|
|
|
|
|
| |
part of recent releases.
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=142421
|
| |
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=127128
|
| |
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=120631
|
| |
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=111147
|
| |
|
|
|
|
|
| |
support for AES and OpenBSD's hardware crypto.
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=109998
|
| |
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=100936
|
| |
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=100928
|
| |
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=89837
|
| |
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=79998
|
| |
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=76866
|
| |
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=72613
|
| |
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=68651
|
| |
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=59191
|
|
|
infringement reasons.
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=55714
|