Path to this page:
./
security/openssl,
Secure Socket Layer and cryptographic library
Branch: CURRENT,
Version: 3.1.5,
Package name: openssl-3.1.5,
Maintainer: pkgsrc-usersThe OpenSSL Project is a collaborative effort to develop a
robust, commercial-grade, full-featured, and Open Source
toolkit implementing the Secure Sockets Layer (SSL v2/v3)
and Transport Layer Security (TLS v1) protocols as well as
a full-strength general purpose cryptography library. The
project is managed by a worldwide community of volunteers
that use the Internet to communicate, plan, and develop the
OpenSSL toolkit and its related documentation.
This package contains major version 3 of OpenSSL.
MESSAGE.SunOS [+/-]===========================================================================
$NetBSD: MESSAGE.SunOS,v 1.1 2011/01/20 16:25:21 tez Exp $
openssl may dump core on SunOS due to a bug in the Solaris linker which
erroneously pads .init segment with zeros [instead of nops]. Since the
bug is triggered at initialization, it can be seen with a simple test like
'openssl version'.
Some versions of gcc already contain a workaround, and the linker may be
fixed in some release. If you see the problem, there are details and a
fix for gcc at http://www.openssl.org/~appro/values.c which solves the
problem.
See also http://gnats.netbsd.org/43939
===========================================================================
Required to build:[
pkgtools/cwrappers]
Package options: threads
Master sites:
Filesize: 15296.41 KB
Version history: (Expand)
- (2024-02-03) Updated to version: openssl-3.1.5
- (2023-10-25) Updated to version: openssl-3.1.4
- (2023-09-16) Updated to version: openssl-1.1.1w
- (2023-05-30) Updated to version: openssl-1.1.1u
- (2023-03-23) Updated to version: openssl-1.1.1tnb1
- (2023-02-09) Updated to version: openssl-1.1.1t
CVS history: (Expand)
2024-02-03 19:21:26 by Adam Ciarcinski | Files touched by this commit (3) | |
Log message:
openssl: updated to 3.1.5
Changes between 3.1.4 and 3.1.5 [30 Jan 2024]
* A file in PKCS12 format can contain certificates and keys and may come from
an untrusted source. The PKCS12 specification allows certain fields to be
NULL, but OpenSSL did not correctly check for this case. A fix has been
applied to prevent a NULL pointer dereference that results in OpenSSL
crashing. If an application processes PKCS12 files from an untrusted source
using the OpenSSL APIs then that application will be vulnerable to this
issue prior to this fix.
OpenSSL APIs that were vulnerable to this are: PKCS12_parse(),
PKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()
and PKCS12_newpass().
We have also fixed a similar issue in SMIME_write_PKCS7(). However since this
function is related to writing data we do not consider it security
significant.
([CVE-2024-0727])
|
2024-01-13 21:07:34 by Taylor R Campbell | Files touched by this commit (24) |
Log message:
*/builtin.mk: Use ${_CROSS_DESTDIR:U} for build-time file checks.
These are questions about the target system, whose files at
build-time are all relative to ${_CROSS_DESTDIR} if it is defined,
i.e., if USE_CROSS_COMPILE is set to yes.
No change to native builds because ${_CROSS_DESTDIR:U} is empty in
them. (Possible minor change by adding :Q to ${H_FOO} in command
lines, but if this makes a difference it likely fixes problems.)
|
2023-12-27 16:55:58 by S.P.Zeidler | Files touched by this commit (2) |
Log message:
openssl: fix configure for NetBSD/i386
|
2023-12-27 15:41:31 by Amitai Schleier | Files touched by this commit (1) |
Log message:
openssl: on NetBSD arches without atomic 64-bit ops, use builtin fallbacks.
Fixes these errors on NetBSD/macppc (and presumably the other listed platforms):
ld: ./libcrypto.so: undefined reference to `__atomic_load_8'
ld: ./libcrypto.so: undefined reference to `__atomic_fetch_or_8'
ld: ./libcrypto.so: undefined reference to `__atomic_is_lock_free'
(suggested by riastradh@)
|
2023-11-05 20:37:20 by Nia Alarie | Files touched by this commit (1) |
Log message:
openssl: Fix building on Mac OS X Tiger.
|
2023-10-27 20:30:12 by Jonathan Perkin | Files touched by this commit (4) |
Log message:
openssl: Various install fixes and improvements.
|
2023-10-25 00:11:51 by Thomas Klausner | Files touched by this commit (2298) |
Log message:
*: bump for openssl 3
|
2023-10-24 23:30:35 by Thomas Klausner | Files touched by this commit (8) | |
Log message:
openssl: update to 3.1.4
This is the latest version of the currently newest supported branch.
The 1.1.x branch was de-supported in September.
Based on wip/openssl3 by gdt, tnn, and myself.
|