mirror of
https://github.com/opnsense/src.git
synced 2026-05-28 04:12:45 -04:00
This release incorporates the following bug fixes and mitigations: - Fixed possible denial of service in X.509 name checks ([CVE-2024-6119]) - Fixed possible buffer overread in SSL_select_next_proto() ([CVE-2024-5535]) Release notes can be found at: https://openssl-library.org/news/openssl-3.0-notes/index.html Co-authored-by: gordon MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D46602 Merge commit '108164cf95d9594884c2dcccba2691335e6f221b' (cherry picked from commit a7148ab39c03abd4d1a84997c70bf96f15dd2a09) Update config/build info for OpenSSL 3.0.15 This is a companion commit to the OpenSSL 3.0.15 update. `opensslv.h` was regenerated via the following process: ``` cd crypto/openssl ./config git reset --hard gmake include/openssl/opensslv.h ``` `Makefile.inc` has been updated to match. MFC after: 1 week MFC with: a7148ab39c03abd4d1a84997c70bf96f15dd2a09 Differential Revision: https://reviews.freebsd.org/D46603 (cherry picked from commit cc717b574d7faa2e0b2de1a985076286cef74187) sys/crypto/openssl: update powerpc* ASM This change updates the crypto powerpc* ASM via the prescribed process documented in `crypto/openssl/FREEBSD-upgrade`. This change syncs the ASM with 3.0.15's generated ASM. MFC after: 1 week MFC with: a7148ab39c03abd4d1a84997c70bf96f15dd2a09 MFC with: cc717b574d7faa2e0b2de1a985076286cef74187 Differential Revision: https://reviews.freebsd.org/D46604 (cherry picked from commit 77864b545b0aaa91bc78b1156c477825007a6233) |
||
|---|---|---|
| .. | ||
| 01-simple.cnf | ||
| 01-simple.cnf.in | ||
| 02-protocol-version.cnf | ||
| 02-protocol-version.cnf.in | ||
| 03-custom_verify.cnf | ||
| 03-custom_verify.cnf.in | ||
| 04-client_auth.cnf | ||
| 04-client_auth.cnf.in | ||
| 05-sni.cnf | ||
| 05-sni.cnf.in | ||
| 06-sni-ticket.cnf | ||
| 06-sni-ticket.cnf.in | ||
| 07-dtls-protocol-version.cnf | ||
| 07-dtls-protocol-version.cnf.in | ||
| 08-npn.cnf | ||
| 08-npn.cnf.in | ||
| 09-alpn.cnf | ||
| 09-alpn.cnf.in | ||
| 10-resumption.cnf | ||
| 10-resumption.cnf.in | ||
| 11-dtls_resumption.cnf | ||
| 11-dtls_resumption.cnf.in | ||
| 12-ct.cnf | ||
| 12-ct.cnf.in | ||
| 13-fragmentation.cnf | ||
| 13-fragmentation.cnf.in | ||
| 14-curves.cnf | ||
| 14-curves.cnf.in | ||
| 15-certstatus.cnf | ||
| 15-certstatus.cnf.in | ||
| 16-dtls-certstatus.cnf | ||
| 16-dtls-certstatus.cnf.in | ||
| 17-renegotiate.cnf | ||
| 17-renegotiate.cnf.in | ||
| 18-dtls-renegotiate.cnf | ||
| 18-dtls-renegotiate.cnf.in | ||
| 19-mac-then-encrypt.cnf | ||
| 19-mac-then-encrypt.cnf.in | ||
| 20-cert-select.cnf | ||
| 20-cert-select.cnf.in | ||
| 21-key-update.cnf | ||
| 21-key-update.cnf.in | ||
| 22-compression.cnf | ||
| 22-compression.cnf.in | ||
| 23-srp.cnf | ||
| 23-srp.cnf.in | ||
| 24-padding.cnf | ||
| 24-padding.cnf.in | ||
| 25-cipher.cnf | ||
| 25-cipher.cnf.in | ||
| 26-tls13_client_auth.cnf | ||
| 26-tls13_client_auth.cnf.in | ||
| 27-ticket-appdata.cnf | ||
| 27-ticket-appdata.cnf.in | ||
| 28-seclevel.cnf | ||
| 28-seclevel.cnf.in | ||
| 29-dtls-sctp-label-bug.cnf | ||
| 29-dtls-sctp-label-bug.cnf.in | ||
| 30-extended-master-secret.cnf | ||
| 30-extended-master-secret.cnf.in | ||
| protocol_version.pm | ||
| ssltests_base.pm | ||