Diffusion FreeBSD src repository 108164cf95d9

openssl: Import OpenSSL 3.0.15.
108164cf95d9
Actions

Tags

None

Referenced Files

None

Subscribers

None

Description

openssl: Import OpenSSL 3.0.15.

This release incorporates the following bug fixes and mitigations:

Fixed possible denial of service in X.509 name checks ([CVE-2024-6119])
Fixed possible buffer overread in SSL_select_next_proto() ([CVE-2024-5535])

Release notes can be found at:
https://openssl-library.org/news/openssl-3.0-notes/index.html

Details

Provenance

Authored on Sep 4 2024, 3:56 AM

Parents

rGe60dbfd00b00: Avoid type errors in EAI-related name check logic.

Branches

Unknown

Tags

Unknown

References

tag: vendor/openssl/3.0.15, vendor/openssl-3.0

Event Timeline

gordon committed rG108164cf95d9: openssl: Import OpenSSL 3.0.15. (authored by gordon).Sep 4 2024, 3:56 AM

ngie mentioned this in D46602: openssl: Import OpenSSL 3.0.15..Sep 7 2024, 3:49 PM

ngie mentioned this in rGa7148ab39c03: openssl: Import OpenSSL 3.0.15..Sep 8 2024, 4:32 AM

ngie mentioned this in rGcc43f991ab3e: openssl: Import OpenSSL 3.0.15..Sep 28 2024, 3:52 AM

Changes (174)
Show All Changes

Very Large Commit

This commit is very large. Load each file individually.

Path

Size

CONTRIBUTING.md

Configurations/

apps/

lib/

crypto/

aes/

asm/

asn1/

bio/

cmp/

conf/

ec/

engine/

evp/

ctrl_params_translate.c

pkcs12/

pkcs7/

property/

rand/

rsa/

x509/

doc/

HOWTO/

certificates.txt

fingerprints.txt

man1/

openssl-enc.pod.in

openssl-passphrase-options.pod

openssl-s_client.pod.in

openssl-s_server.pod.in

openssl-verification-options.pod

man3/

ASN1_INTEGER_new.pod

ASYNC_WAIT_CTX_new.pod

BIO_ADDRINFO.pod

BIO_f_base64.pod

BIO_meth_new.pod

BN_generate_prime.pod

BUF_MEM_new.pod

CRYPTO_THREAD_run_once.pod

CTLOG_STORE_new.pod

CT_POLICY_EVAL_CTX_new.pod

DH_meth_new.pod

DSA_SIG_new.pod

DSA_meth_new.pod

ECDSA_SIG_new.pod

EVP_ASYM_CIPHER_free.pod

EVP_CIPHER_meth_new.pod

EVP_DigestInit.pod

EVP_EncodeInit.pod

EVP_EncryptInit.pod

EVP_KEM_free.pod

EVP_KEYEXCH_free.pod

EVP_KEYMGMT.pod

EVP_MD_meth_new.pod

EVP_PKEY_ASN1_METHOD.pod

EVP_PKEY_meth_new.pod

EVP_SIGNATURE.pod

NCONF_new_ex.pod

OCSP_REQUEST_new.pod

OCSP_cert_to_id.pod

OCSP_response_status.pod

OPENSSL_LH_COMPFUNC.pod

OPENSSL_init_crypto.pod

OPENSSL_malloc.pod

OPENSSL_secure_malloc.pod

OSSL_CMP_CTX_new.pod

OSSL_CMP_SRV_CTX_new.pod

OSSL_CMP_validate_msg.pod

OSSL_DECODER.pod

OSSL_DECODER_CTX.pod

OSSL_DECODER_CTX_new_for_pkey.pod

OSSL_ENCODER.pod

OSSL_ENCODER_CTX.pod

OSSL_HTTP_REQ_CTX.pod

OSSL_LIB_CTX.pod

OSSL_PARAM_BLD.pod

OSSL_PARAM_dup.pod

OSSL_SELF_TEST_new.pod

OSSL_STORE_INFO.pod

OSSL_STORE_LOADER.pod

OSSL_STORE_SEARCH.pod

PEM_read_bio_PrivateKey.pod

RAND_set_DRBG_type.pod

RSA_meth_new.pod

SSL_CTX_set_alpn_select_cb.pod

SSL_CTX_set_cipher_list.pod

SSL_CTX_set_tlsext_ticket_key_cb.pod

TS_RESP_CTX_new.pod

X509V3_get_d2i.pod

X509_LOOKUP.pod

X509_LOOKUP_meth_new.pod

X509_STORE_new.pod

man7/

EVP_KEYEXCH-DH.pod

EVP_PKEY-DH.pod

fuzz/

include/

crypto/

openssl/

providers/

fips-sources.checksums

implementations/

encode_decode/

decode_der2key.c

rands/

ssl/

statem/

extensions_clnt.c

extensions_srvr.c

test/

endecode_test.c

evp_byname_test.c

evp_extra_test.c

helpers/

prov_config_test.c

provider_fallback_test.c

provider_internal_test.c

provider_test.c

recipes/

03-test_fipsinstall.t

04-test_conf_data/

oversized_line.cnf

oversized_line.txt

25-test_eai_data.t

30-test_evp_byname.t

30-test_evp_data/

evppkey_dsa.txt

evppkey_ecdsa.txt

evppkey_rsa_common.txt

ssl-tests/

util/

check-format-commit.sh

check-format-test-negatives.c

check-format.pl

perl/

OpenSSL/

Test/

TLSProxy/

rG108164cf95d9

CHANGES.md

CONTRIBUTING.md

Configurations/10-main.conf

Configurations/15-ios.conf

Configure

FAQ.md

INSTALL.md

NEWS.md

VERSION.dat

apps/cms.c

apps/dgst.c

apps/lib/opt.c

apps/lib/s_cb.c

apps/smime.c

crypto/aes/asm/aesp8-ppc.pl

crypto/aes/build.info

crypto/asn1/a_d2i_fp.c

crypto/asn1/a_mbstr.c

crypto/asn1/a_strex.c

crypto/asn1/a_verify.c

crypto/asn1/tasn_fre.c

crypto/bio/bf_readbuff.c

crypto/bio/bio_addr.c

crypto/cmp/cmp_vfy.c

crypto/conf/conf_def.c

crypto/conf/conf_lib.c

crypto/conf/conf_sap.c

crypto/context.c

crypto/ec/ecdsa_ossl.c

crypto/engine/eng_table.c

crypto/evp/ctrl_params_translate.c

crypto/evp/digest.c

crypto/evp/names.c

crypto/evp/pmeth_lib.c

crypto/o_str.c

crypto/pkcs12/p12_crt.c

crypto/pkcs7/pk7_doit.c

crypto/property/property.c

crypto/rand/randfile.c

crypto/rsa/rsa_oaep.c

crypto/x509/v3_utl.c

crypto/x509/x_name.c

doc/HOWTO/certificates.txt

doc/fingerprints.txt

doc/man1/openssl-enc.pod.in

doc/man1/openssl-passphrase-options.pod

doc/man1/openssl-s_client.pod.in

doc/man1/openssl-s_server.pod.in

doc/man1/openssl-verification-options.pod

doc/man3/ASN1_INTEGER_new.pod

doc/man3/ASYNC_WAIT_CTX_new.pod

doc/man3/BIO_ADDR.pod

doc/man3/BIO_ADDRINFO.pod

doc/man3/BIO_f_base64.pod

doc/man3/BIO_meth_new.pod

doc/man3/BN_add.pod

doc/man3/BN_generate_prime.pod

doc/man3/BN_set_bit.pod

doc/man3/BUF_MEM_new.pod

doc/man3/CRYPTO_THREAD_run_once.pod

doc/man3/CTLOG_STORE_new.pod

doc/man3/CTLOG_new.pod

doc/man3/CT_POLICY_EVAL_CTX_new.pod

doc/man3/DH_meth_new.pod

doc/man3/DSA_SIG_new.pod

doc/man3/DSA_meth_new.pod

doc/man3/ECDSA_SIG_new.pod

doc/man3/ENGINE_add.pod

doc/man3/EVP_ASYM_CIPHER_free.pod

doc/man3/EVP_CIPHER_meth_new.pod

doc/man3/EVP_DigestInit.pod

doc/man3/EVP_EncodeInit.pod

doc/man3/EVP_EncryptInit.pod

doc/man3/EVP_KEM_free.pod

doc/man3/EVP_KEYEXCH_free.pod

doc/man3/EVP_KEYMGMT.pod

doc/man3/EVP_MD_meth_new.pod

doc/man3/EVP_PKEY_ASN1_METHOD.pod

doc/man3/EVP_PKEY_meth_new.pod

doc/man3/EVP_RAND.pod

doc/man3/EVP_SIGNATURE.pod

doc/man3/HMAC.pod

doc/man3/MD5.pod

doc/man3/NCONF_new_ex.pod

doc/man3/OCSP_REQUEST_new.pod

doc/man3/OCSP_cert_to_id.pod

doc/man3/OCSP_response_status.pod

doc/man3/OPENSSL_LH_COMPFUNC.pod

doc/man3/OPENSSL_init_crypto.pod

doc/man3/OPENSSL_malloc.pod

doc/man3/OPENSSL_secure_malloc.pod

doc/man3/OSSL_CMP_CTX_new.pod

doc/man3/OSSL_CMP_SRV_CTX_new.pod

doc/man3/OSSL_CMP_validate_msg.pod

doc/man3/OSSL_DECODER.pod

doc/man3/OSSL_DECODER_CTX.pod

doc/man3/OSSL_DECODER_CTX_new_for_pkey.pod

doc/man3/OSSL_ENCODER.pod

doc/man3/OSSL_ENCODER_CTX.pod

doc/man3/OSSL_HTTP_REQ_CTX.pod

doc/man3/OSSL_LIB_CTX.pod

doc/man3/OSSL_PARAM_BLD.pod

doc/man3/OSSL_PARAM_dup.pod

doc/man3/OSSL_SELF_TEST_new.pod

doc/man3/OSSL_STORE_INFO.pod

doc/man3/OSSL_STORE_LOADER.pod

doc/man3/OSSL_STORE_SEARCH.pod

doc/man3/PEM_read_bio_PrivateKey.pod

doc/man3/RAND_set_DRBG_type.pod

doc/man3/RSA_meth_new.pod

doc/man3/SCT_new.pod

doc/man3/SSL_CTX_set_alpn_select_cb.pod

doc/man3/SSL_CTX_set_cipher_list.pod

doc/man3/SSL_CTX_set_tlsext_ticket_key_cb.pod

doc/man3/TS_RESP_CTX_new.pod

doc/man3/X509V3_get_d2i.pod

doc/man3/X509_LOOKUP.pod

doc/man3/X509_LOOKUP_meth_new.pod

doc/man3/X509_STORE_new.pod

doc/man3/X509_dup.pod

doc/man3/X509_new.pod

doc/man3/d2i_X509.pod

doc/man7/EVP_KEYEXCH-DH.pod

doc/man7/EVP_PKEY-DH.pod

doc/man7/ossl_store.pod

fuzz/bignum.c

include/crypto/aes_platform.h

include/crypto/bn.h

include/openssl/tls1.h

providers/fips-sources.checksums

providers/fips.checksum

providers/implementations/encode_decode/decode_der2key.c

providers/implementations/rands/drbg.c

ssl/bio_ssl.c

ssl/ssl_lib.c

ssl/ssl_sess.c

ssl/statem/extensions.c

ssl/statem/extensions_clnt.c

ssl/statem/extensions_srvr.c

ssl/statem/statem_lib.c

ssl/t1_lib.c

test/build.info

test/crltest.c

test/endecode_test.c

test/evp_byname_test.c

test/evp_extra_test.c

test/helpers/handshake.c

test/hexstr_test.c

test/prov_config_test.c

test/provider_fallback_test.c

test/provider_internal_test.c

test/provider_test.c

test/recipes/03-test_fipsinstall.t

test/recipes/04-test_conf.t

test/recipes/04-test_conf_data/oversized_line.cnf

test/recipes/04-test_conf_data/oversized_line.txt

test/recipes/25-test_eai_data.t

test/recipes/30-test_evp_byname.t

test/recipes/30-test_evp_data/evppkey_dsa.txt

test/recipes/30-test_evp_data/evppkey_ecdsa.txt

test/recipes/30-test_evp_data/evppkey_rsa_common.txt

test/recipes/70-test_npn.t

test/ssl-tests/08-npn.cnf

test/ssl-tests/08-npn.cnf.in

test/ssl-tests/09-alpn.cnf

test/ssl-tests/09-alpn.cnf.in

test/sslapitest.c

util/check-format-commit.sh

util/check-format-test-negatives.c

util/check-format.pl

util/perl/OpenSSL/Test/Utils.pm

util/perl/TLSProxy/Message.pm

util/perl/TLSProxy/NextProto.pm

util/perl/TLSProxy/Proxy.pm