HomeFreeBSD

openssl: Import OpenSSL 3.0.15.

Description

openssl: Import OpenSSL 3.0.15.

This release incorporates the following bug fixes and mitigations:

  • Fixed possible denial of service in X.509 name checks ([CVE-2024-6119])
  • Fixed possible buffer overread in SSL_select_next_proto() ([CVE-2024-5535])

Release notes can be found at:
https://openssl-library.org/news/openssl-3.0-notes/index.html

Co-authored-by: gordon
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D46602

Merge commit '108164cf95d9594884c2dcccba2691335e6f221b'

(cherry picked from commit a7148ab39c03abd4d1a84997c70bf96f15dd2a09)

Update config/build info for OpenSSL 3.0.15

This is a companion commit to the OpenSSL 3.0.15 update.

opensslv.h was regenerated via the following process:

cd crypto/openssl
./config
git reset --hard
gmake include/openssl/opensslv.h

Makefile.inc has been updated to match.

MFC after: 1 week
MFC with: a7148ab39c03abd4d1a84997c70bf96f15dd2a09
Differential Revision: https://reviews.freebsd.org/D46603

(cherry picked from commit cc717b574d7faa2e0b2de1a985076286cef74187)

sys/crypto/openssl: update powerpc* ASM

This change updates the crypto powerpc* ASM via the prescribed process
documented in crypto/openssl/FREEBSD-upgrade.

This change syncs the ASM with 3.0.15's generated ASM.

MFC after: 1 week
MFC with: a7148ab39c03abd4d1a84997c70bf96f15dd2a09
MFC with: cc717b574d7faa2e0b2de1a985076286cef74187
Differential Revision: https://reviews.freebsd.org/D46604

(cherry picked from commit 77864b545b0aaa91bc78b1156c477825007a6233)

Details

Provenance
ngieAuthored on Sep 8 2024, 4:30 AM
Differential Revision
D46602: openssl: Import OpenSSL 3.0.15.
Parents
rGc09ca8f43de1: mountd: Add check for "=" after exports(5) options
Branches
Unknown
Tags
Unknown