Date: Sat, 3 Feb 2024 01:24:36 +0100 From: "Herbert J. Skuhra" <herbert@gojira.at> To: Cy Schubert <cy@freebsd.org> Cc: src-committers@freebsd.org, dev-commits-src-all@freebsd.org, dev-commits-src-main@freebsd.org Subject: Re: git: e0c4386e7e71 - main - OpenSSL: Vendor import of OpenSSL 3.0.13 Message-ID: <Zb2HxB-tva3xy-cT@mail.bsd4all.net> In-Reply-To: <202402022122.412LM8E8088467@gitrepo.freebsd.org> References: <202402022122.412LM8E8088467@gitrepo.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Feb 02, 2024 at 09:22:08PM +0000, Cy Schubert wrote: > The branch main has been updated by cy: > > URL: https://cgit.FreeBSD.org/src/commit/?id=e0c4386e7e71d93b0edc0c8fa156263fc4a8b0b6 > > commit e0c4386e7e71d93b0edc0c8fa156263fc4a8b0b6 > Merge: fbae308319b7 9dd13e84fa8e > Author: Cy Schubert <cy@FreeBSD.org> > AuthorDate: 2024-02-02 21:10:22 +0000 > Commit: Cy Schubert <cy@FreeBSD.org> > CommitDate: 2024-02-02 21:21:36 +0000 > > OpenSSL: Vendor import of OpenSSL 3.0.13 > > * Fixed PKCS12 Decoding crashes ([CVE-2024-0727]) > * Fixed Excessive time spent checking invalid RSA public keys > ([CVE-2023-6237]) > * Fixed POLY1305 MAC implementation corrupting vector registers on > PowerPC CPUs which support PowerISA 2.07 ([CVE-2023-6129]) > * Fix excessive time spent in DH check / generation with large Q > parameter value ([CVE-2023-5678]) > > Release notes can be found at > https://www.openssl.org/news/openssl-3.0-notes.html. > > Approved by: emaste > MFC after: 3 days > > Merge commit '9dd13e84fa8eca8f3462bd55485aa3da8c37f54a' crypto/openssl/include/openssl/opensslv.h was not updated: % openssl version OpenSSL 3.0.12 24 Oct 2023 (Library: OpenSSL 3.0.12 24 Oct 2023 -- Herbert
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Zb2HxB-tva3xy-cT>