HomeFreeBSD
Diffusion FreeBSD src repository a7148ab39c03

openssl: Import OpenSSL 3.0.15.
a7148ab39c03
Actions

Description

openssl: Import OpenSSL 3.0.15.

This release incorporates the following bug fixes and mitigations:

  • Fixed possible denial of service in X.509 name checks ([CVE-2024-6119])
  • Fixed possible buffer overread in SSL_select_next_proto() ([CVE-2024-5535])

Release notes can be found at:
https://openssl-library.org/news/openssl-3.0-notes/index.html

Co-authored-by: gordon
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D46602

Merge commit '108164cf95d9594884c2dcccba2691335e6f221b'

Details

Provenance
ngieAuthored on Sep 8 2024, 4:30 AM
Differential Revision
D46602: openssl: Import OpenSSL 3.0.15.
Parents
rG4086a0635d38: openssl: Update upgrade instructions.
rG108164cf95d9: openssl: Import OpenSSL 3.0.15.
Branches
Unknown
Tags
Unknown

Merged Changes

Changes (174)
Show All Changes

Very Large Commit

This commit is very large. Load each file individually.
PathSize
crypto/
openssl/
Configurations/
apps/
lib/
crypto/
aes/
asm/
asn1/
bio/
cmp/
conf/
ec/
engine/
evp/
pkcs12/
pkcs7/
property/
rand/
rsa/
x509/
doc/
HOWTO/
man1/
man3/
man7/
fuzz/
include/
crypto/
openssl/
providers/
implementations/
encode_decode/
rands/
ssl/
statem/
test/
helpers/
recipes/
04-test_conf_data/
30-test_evp_data/
ssl-tests/
util/
perl/
OpenSSL/
Test/
TLSProxy/

rGa7148ab39c03

View Options

crypto/openssl/CHANGES.md

View Options

crypto/openssl/CONTRIBUTING.md

View Options

crypto/openssl/Configurations/10-main.conf

View Options

crypto/openssl/Configurations/15-ios.conf

View Options

crypto/openssl/Configure

View Options

crypto/openssl/FAQ.md

View Options

crypto/openssl/INSTALL.md

View Options

crypto/openssl/NEWS.md

View Options

crypto/openssl/VERSION.dat

View Options

crypto/openssl/apps/cms.c

View Options

crypto/openssl/apps/dgst.c

View Options

crypto/openssl/apps/lib/opt.c

View Options

crypto/openssl/apps/lib/s_cb.c

View Options

crypto/openssl/apps/smime.c

View Options

crypto/openssl/crypto/aes/asm/aesp8-ppc.pl

View Options

crypto/openssl/crypto/aes/build.info

View Options

crypto/openssl/crypto/asn1/a_d2i_fp.c

View Options

crypto/openssl/crypto/asn1/a_mbstr.c

View Options

crypto/openssl/crypto/asn1/a_strex.c

View Options

crypto/openssl/crypto/asn1/a_verify.c

View Options

crypto/openssl/crypto/asn1/tasn_fre.c

View Options

crypto/openssl/crypto/bio/bf_readbuff.c

View Options

crypto/openssl/crypto/bio/bio_addr.c

View Options

crypto/openssl/crypto/cmp/cmp_vfy.c

View Options

crypto/openssl/crypto/conf/conf_def.c

View Options

crypto/openssl/crypto/conf/conf_lib.c

View Options

crypto/openssl/crypto/conf/conf_sap.c

View Options

crypto/openssl/crypto/context.c

View Options

crypto/openssl/crypto/ec/ecdsa_ossl.c

View Options

crypto/openssl/crypto/engine/eng_table.c

View Options

crypto/openssl/crypto/evp/ctrl_params_translate.c

View Options

crypto/openssl/crypto/evp/digest.c

View Options

crypto/openssl/crypto/evp/names.c

View Options

crypto/openssl/crypto/evp/pmeth_lib.c

View Options

crypto/openssl/crypto/o_str.c

View Options

crypto/openssl/crypto/pkcs12/p12_crt.c

View Options

crypto/openssl/crypto/pkcs7/pk7_doit.c

View Options

crypto/openssl/crypto/property/property.c

View Options

crypto/openssl/crypto/rand/randfile.c

View Options

crypto/openssl/crypto/rsa/rsa_oaep.c

View Options

crypto/openssl/crypto/x509/v3_utl.c

View Options

crypto/openssl/crypto/x509/x_name.c

View Options

crypto/openssl/doc/HOWTO/certificates.txt

View Options

crypto/openssl/doc/fingerprints.txt

View Options

crypto/openssl/doc/man1/openssl-enc.pod.in

View Options

crypto/openssl/doc/man1/openssl-passphrase-options.pod

View Options

crypto/openssl/doc/man1/openssl-s_client.pod.in

View Options

crypto/openssl/doc/man1/openssl-s_server.pod.in

View Options

crypto/openssl/doc/man1/openssl-verification-options.pod

View Options

crypto/openssl/doc/man3/ASN1_INTEGER_new.pod

View Options

crypto/openssl/doc/man3/ASYNC_WAIT_CTX_new.pod

View Options

crypto/openssl/doc/man3/BIO_ADDR.pod

View Options

crypto/openssl/doc/man3/BIO_ADDRINFO.pod

View Options

crypto/openssl/doc/man3/BIO_f_base64.pod

View Options

crypto/openssl/doc/man3/BIO_meth_new.pod

View Options

crypto/openssl/doc/man3/BN_add.pod

View Options

crypto/openssl/doc/man3/BN_generate_prime.pod

View Options

crypto/openssl/doc/man3/BN_set_bit.pod

View Options

crypto/openssl/doc/man3/BUF_MEM_new.pod

View Options

crypto/openssl/doc/man3/CRYPTO_THREAD_run_once.pod

View Options

crypto/openssl/doc/man3/CTLOG_STORE_new.pod

View Options

crypto/openssl/doc/man3/CTLOG_new.pod

View Options

crypto/openssl/doc/man3/CT_POLICY_EVAL_CTX_new.pod

View Options

crypto/openssl/doc/man3/DH_meth_new.pod

View Options

crypto/openssl/doc/man3/DSA_SIG_new.pod

View Options

crypto/openssl/doc/man3/DSA_meth_new.pod

View Options

crypto/openssl/doc/man3/ECDSA_SIG_new.pod

View Options

crypto/openssl/doc/man3/ENGINE_add.pod

View Options

crypto/openssl/doc/man3/EVP_ASYM_CIPHER_free.pod

View Options

crypto/openssl/doc/man3/EVP_CIPHER_meth_new.pod

View Options

crypto/openssl/doc/man3/EVP_DigestInit.pod

View Options

crypto/openssl/doc/man3/EVP_EncodeInit.pod

View Options

crypto/openssl/doc/man3/EVP_EncryptInit.pod

View Options

crypto/openssl/doc/man3/EVP_KEM_free.pod

View Options

crypto/openssl/doc/man3/EVP_KEYEXCH_free.pod

View Options

crypto/openssl/doc/man3/EVP_KEYMGMT.pod

View Options

crypto/openssl/doc/man3/EVP_MD_meth_new.pod

View Options

crypto/openssl/doc/man3/EVP_PKEY_ASN1_METHOD.pod

View Options

crypto/openssl/doc/man3/EVP_PKEY_meth_new.pod

View Options

crypto/openssl/doc/man3/EVP_RAND.pod

View Options

crypto/openssl/doc/man3/EVP_SIGNATURE.pod

View Options

crypto/openssl/doc/man3/HMAC.pod

View Options

crypto/openssl/doc/man3/MD5.pod

View Options

crypto/openssl/doc/man3/NCONF_new_ex.pod

View Options

crypto/openssl/doc/man3/OCSP_REQUEST_new.pod

View Options

crypto/openssl/doc/man3/OCSP_cert_to_id.pod

View Options

crypto/openssl/doc/man3/OCSP_response_status.pod

View Options

crypto/openssl/doc/man3/OPENSSL_LH_COMPFUNC.pod

View Options

crypto/openssl/doc/man3/OPENSSL_init_crypto.pod

View Options

crypto/openssl/doc/man3/OPENSSL_malloc.pod

View Options

crypto/openssl/doc/man3/OPENSSL_secure_malloc.pod

View Options

crypto/openssl/doc/man3/OSSL_CMP_CTX_new.pod

View Options

crypto/openssl/doc/man3/OSSL_CMP_SRV_CTX_new.pod

View Options

crypto/openssl/doc/man3/OSSL_CMP_validate_msg.pod

View Options

crypto/openssl/doc/man3/OSSL_DECODER.pod

View Options

crypto/openssl/doc/man3/OSSL_DECODER_CTX.pod

View Options

crypto/openssl/doc/man3/OSSL_DECODER_CTX_new_for_pkey.pod

View Options

crypto/openssl/doc/man3/OSSL_ENCODER.pod

View Options

crypto/openssl/doc/man3/OSSL_ENCODER_CTX.pod

View Options

crypto/openssl/doc/man3/OSSL_HTTP_REQ_CTX.pod

View Options

crypto/openssl/doc/man3/OSSL_LIB_CTX.pod

View Options

crypto/openssl/doc/man3/OSSL_PARAM_BLD.pod

View Options

crypto/openssl/doc/man3/OSSL_PARAM_dup.pod

View Options

crypto/openssl/doc/man3/OSSL_SELF_TEST_new.pod

View Options

crypto/openssl/doc/man3/OSSL_STORE_INFO.pod

View Options

crypto/openssl/doc/man3/OSSL_STORE_LOADER.pod

View Options

crypto/openssl/doc/man3/OSSL_STORE_SEARCH.pod

View Options

crypto/openssl/doc/man3/PEM_read_bio_PrivateKey.pod

View Options

crypto/openssl/doc/man3/RAND_set_DRBG_type.pod

View Options

crypto/openssl/doc/man3/RSA_meth_new.pod

View Options

crypto/openssl/doc/man3/SCT_new.pod

View Options

crypto/openssl/doc/man3/SSL_CTX_set_alpn_select_cb.pod

View Options

crypto/openssl/doc/man3/SSL_CTX_set_cipher_list.pod

View Options

crypto/openssl/doc/man3/SSL_CTX_set_tlsext_ticket_key_cb.pod

View Options

crypto/openssl/doc/man3/TS_RESP_CTX_new.pod

View Options

crypto/openssl/doc/man3/X509V3_get_d2i.pod

View Options

crypto/openssl/doc/man3/X509_LOOKUP.pod

View Options

crypto/openssl/doc/man3/X509_LOOKUP_meth_new.pod

View Options

crypto/openssl/doc/man3/X509_STORE_new.pod

View Options

crypto/openssl/doc/man3/X509_dup.pod

View Options

crypto/openssl/doc/man3/X509_new.pod

View Options

crypto/openssl/doc/man3/d2i_X509.pod

View Options

crypto/openssl/doc/man7/EVP_KEYEXCH-DH.pod

View Options

crypto/openssl/doc/man7/EVP_PKEY-DH.pod

View Options

crypto/openssl/doc/man7/ossl_store.pod

View Options

crypto/openssl/fuzz/bignum.c

View Options

crypto/openssl/include/crypto/aes_platform.h

View Options

crypto/openssl/include/crypto/bn.h

View Options

crypto/openssl/include/openssl/tls1.h

View Options

crypto/openssl/providers/fips-sources.checksums

View Options

crypto/openssl/providers/fips.checksum

View Options

crypto/openssl/providers/implementations/encode_decode/decode_der2key.c

View Options

crypto/openssl/providers/implementations/rands/drbg.c

View Options

crypto/openssl/ssl/bio_ssl.c

View Options

crypto/openssl/ssl/ssl_lib.c

View Options

crypto/openssl/ssl/ssl_sess.c

View Options

crypto/openssl/ssl/statem/extensions.c

View Options

crypto/openssl/ssl/statem/extensions_clnt.c

View Options

crypto/openssl/ssl/statem/extensions_srvr.c

View Options

crypto/openssl/ssl/statem/statem_lib.c

View Options

crypto/openssl/ssl/t1_lib.c

View Options

crypto/openssl/test/build.info

View Options

crypto/openssl/test/crltest.c

View Options

crypto/openssl/test/endecode_test.c

View Options

crypto/openssl/test/evp_byname_test.c

View Options

crypto/openssl/test/evp_extra_test.c

View Options

crypto/openssl/test/helpers/handshake.c

View Options

crypto/openssl/test/hexstr_test.c

View Options

crypto/openssl/test/prov_config_test.c

View Options

crypto/openssl/test/provider_fallback_test.c

View Options

crypto/openssl/test/provider_internal_test.c

View Options

crypto/openssl/test/provider_test.c

View Options

crypto/openssl/test/recipes/03-test_fipsinstall.t

View Options

crypto/openssl/test/recipes/04-test_conf.t

View Options

crypto/openssl/test/recipes/04-test_conf_data/oversized_line.cnf

View Options

crypto/openssl/test/recipes/04-test_conf_data/oversized_line.txt

View Options

crypto/openssl/test/recipes/25-test_eai_data.t

View Options

crypto/openssl/test/recipes/30-test_evp_byname.t

View Options

crypto/openssl/test/recipes/30-test_evp_data/evppkey_dsa.txt

View Options

crypto/openssl/test/recipes/30-test_evp_data/evppkey_ecdsa.txt

View Options

crypto/openssl/test/recipes/30-test_evp_data/evppkey_rsa_common.txt

View Options

crypto/openssl/test/recipes/70-test_npn.t

View Options

crypto/openssl/test/ssl-tests/08-npn.cnf

View Options

crypto/openssl/test/ssl-tests/08-npn.cnf.in

View Options

crypto/openssl/test/ssl-tests/09-alpn.cnf

View Options

crypto/openssl/test/ssl-tests/09-alpn.cnf.in

View Options

crypto/openssl/test/sslapitest.c

View Options

crypto/openssl/util/check-format-commit.sh

View Options

crypto/openssl/util/check-format-test-negatives.c

View Options

crypto/openssl/util/check-format.pl

View Options

crypto/openssl/util/perl/OpenSSL/Test/Utils.pm

View Options

crypto/openssl/util/perl/TLSProxy/Message.pm

View Options

crypto/openssl/util/perl/TLSProxy/NextProto.pm

View Options

crypto/openssl/util/perl/TLSProxy/Proxy.pm