mirror of
https://github.com/opnsense/src.git
synced 2026-05-25 02:35:01 -04:00
cc43f991ab
This release incorporates the following bug fixes and mitigations: - Fixed possible denial of service in X.509 name checks ([CVE-2024-6119]) - Fixed possible buffer overread in SSL_select_next_proto() ([CVE-2024-5535]) Release notes can be found at: https://openssl-library.org/news/openssl-3.0-notes/index.html Co-authored-by: gordon MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D46602 Merge commit '108164cf95d9594884c2dcccba2691335e6f221b' (cherry picked from commit a7148ab39c03abd4d1a84997c70bf96f15dd2a09) Update config/build info for OpenSSL 3.0.15 This is a companion commit to the OpenSSL 3.0.15 update. `opensslv.h` was regenerated via the following process: ``` cd crypto/openssl ./config git reset --hard gmake include/openssl/opensslv.h ``` `Makefile.inc` has been updated to match. MFC after: 1 week MFC with: a7148ab39c03abd4d1a84997c70bf96f15dd2a09 Differential Revision: https://reviews.freebsd.org/D46603 (cherry picked from commit cc717b574d7faa2e0b2de1a985076286cef74187) sys/crypto/openssl: update powerpc* ASM This change updates the crypto powerpc* ASM via the prescribed process documented in `crypto/openssl/FREEBSD-upgrade`. This change syncs the ASM with 3.0.15's generated ASM. MFC after: 1 week MFC with: a7148ab39c03abd4d1a84997c70bf96f15dd2a09 MFC with: cc717b574d7faa2e0b2de1a985076286cef74187 Differential Revision: https://reviews.freebsd.org/D46604 (cherry picked from commit 77864b545b0aaa91bc78b1156c477825007a6233)
22 lines
540 B
Makefile
22 lines
540 B
Makefile
|
|
.include <bsd.own.mk>
|
|
|
|
# OpenSSL version used for manual page generation
|
|
OPENSSL_VER= 3.0.15
|
|
OPENSSL_DATE= 2024-09-03
|
|
|
|
LCRYPTO_SRC= ${SRCTOP}/crypto/openssl
|
|
LCRYPTO_DOC= ${LCRYPTO_SRC}/doc
|
|
|
|
CFLAGS+= -I${LCRYPTO_SRC}
|
|
CFLAGS+= -I${LCRYPTO_SRC}/include
|
|
CFLAGS+= -I${LCRYPTO_SRC}/providers/common/include
|
|
CFLAGS+= -I${LCRYPTO_SRC}/providers/implementations/include
|
|
|
|
.include "Makefile.common"
|
|
|
|
.for pcfile in ${PCFILES}
|
|
${pcfile}: ${pcfile}.in
|
|
sed -e 's,@openssl_ver@,${OPENSSL_VER},g' ${.ALLSRC} > ${.TARGET}
|
|
.endfor
|
|
CLEANFILES+= ${PCFILES}
|