2022-06-21 20:48:39 by Jonathan Perkin | Files touched by this commit (3) |
Log message:
openssl: Update to 1.1.1p.
Approved during freeze by gdt@, tested on SmartOS and macOS.
Major changes between OpenSSL 1.1.1o and OpenSSL 1.1.1p [21 Jun 2022]
o Fixed additional bugs in the c_rehash script which was not properly
sanitising shell metacharacters to prevent command injection
(CVE-2022-2068)
|
2022-05-10 07:43:50 by Thomas Klausner | Files touched by this commit (2) | |
Log message:
openssl: update to 1.1.1o.
Major changes between OpenSSL 1.1.1n and OpenSSL 1.1.1o [3 May 2022]
o Fixed a bug in the c_rehash script which was not properly sanitising
shell metacharacters to prevent command injection (CVE-2022-1292)
|
2022-03-15 19:20:02 by Thomas Klausner | Files touched by this commit (3) | |
Log message:
openssl: update to 1.1.1n.
Major changes between OpenSSL 1.1.1m and OpenSSL 1.1.1n [15 Mar 2022]
o Fixed a bug in the BN_mod_sqrt() function that can cause it to loop
forever for non-prime moduli ([CVE-2022-0778])
|
2022-02-28 13:25:10 by Thomas Klausner | Files touched by this commit (5) | |
Log message:
openssl: update to 1.1.1m.
Changes between 1.1.1l and 1.1.1m [14 Dec 2021]
*) Avoid loading of a dynamic engine twice.
*) Fixed building on Debian with kfreebsd kernels
*) Prioritise DANE TLSA issuer certs over peer certs
*) Fixed random API for MacOS prior to 10.12
|
2022-01-11 14:54:01 by Amitai Schleier | Files touched by this commit (3) |
Log message:
Apply upstream c023d98dcf2ba1cc30f545ae54d0e037e80a8794:
Darwin platform allows to build on releases before Yosemite/ios 8.
Fixes build on Snow Leopard. Still builds on Monterey.
|
2022-01-11 12:10:40 by Amitai Schleier | Files touched by this commit (3) |
Log message:
Omit "-MT $@" from generated make rules, as it breaks SunPro builds and
"-o $@" is already sufficient.
Also for SunPro, set OPENSSL_HOST.SunOS-x86_64=solaris64-x86_64-cc
(that's cc, not gcc) to avoid this error linking libcrypto.so:
cc: Warning: Option --libgcc passed to ld, if ld is invoked,
ignored otherwise
cc: No valid input files specified, no output generated
"make package" succeeds on:
- Solaris 11 with "Studio 12.6 Sun C 5.15"
- Tribblix m25.1 with pkgsrc gcc7
- CentOS 7 with pkgsrc gcc7
- FreeBSD 13 with system clang
- OpenBSD 7.0 with system clang
- NetBSD 9.2 and -current with system gcc
- CentOS 8 with system gcc
- Debian 11, 10, 9 with system gcc
- Devuan 4 with system gcc
- Ubuntu 21, 18, 16, 14 with system gcc
- Void with system gcc
- Gentoo with system gcc
|
2021-10-26 13:18:07 by Nia Alarie | Files touched by this commit (605) |
Log message:
security: Replace RMD160 checksums with BLAKE2s checksums
All checksums have been double-checked against existing RMD160 and
SHA512 hashes
Unfetchable distfiles (fetched conditionally?):
./security/cyrus-sasl/distinfo \
cyrus-sasl-dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d.patch.v2
|
2021-10-07 16:54:50 by Nia Alarie | Files touched by this commit (606) |
Log message:
security: Remove SHA1 hashes for distfiles
|
2021-07-19 01:11:08 by David A. Holland | Files touched by this commit (1) |
Log message:
PR 55733 Joern Clausen: use GNU m4 with security/openssl on Solaris.
Seems that Solaris's m4 overflows internal limits.
|
2021-07-10 17:40:52 by Jonathan Perkin | Files touched by this commit (1) |
Log message:
openssl: Stop passing CFLAGS/LDFLAGS to configure.
If this ever worked it only did by accident. Specifying, for example,
"-arch arm64" as used on macOS is enough to break its custom configure
script that assumes all arguments start with "-".
The flags seem to propogate through the environment normally.
|