openssl

Go to file

openeuler-ci-bot 1b43d89956

!254 fix CVE-2023-3817

From: @spinet 
Reviewed-by: @hzero1996, @zhujianwei001 
Signed-off-by: @zhujianwei001

2023-08-08 12:00:40 +00:00

Add-an-SSL_dup-test.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Add-test-for-CVE-2020-1967.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

AES-CTR-DRGB-do-not-leak-timing-information.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Allow-NULL-arg-to-OSSL_STORE_close.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Avoid-errors-with-a-priori-inapplicable-protocol-bou.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Avoid-memory-leak-of-parent-on-allocation-failure-fo.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Avoid-potential-doublefree-on-dh-object-assigned-to-.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Avoid-potential-overflow-to-the-sign-bit-when-shifti.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Avoid-segfault-in-SSL_export_keying_material-if-ther.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

backport-Add-a-test-for-CVE-2023-3446.patch

fix CVE-2023-3446

2023-07-22 16:13:04 +08:00

Backport-ct_test.c-Update-the-epoch-time.patch

fix expiring-certificates test case

2023-01-06 17:52:13 +08:00

backport-CVE-2022-4304-Fix-Timing-Oracle-in-RSA-decryption.patch

fix cves

2023-02-09 16:27:15 +08:00

backport-CVE-2022-4450-Avoid-dangling-ptrs-in-header-and-data-params-for-PE.patch

fix cves

2023-02-09 16:27:15 +08:00

backport-CVE-2023-0215-Check-CMS-failure-during-BIO-setup-with-stream-is-ha.patch

fix cves

2023-02-09 16:27:15 +08:00

backport-CVE-2023-0215-Fix-a-UAF-resulting-from-a-bug-in-BIO_new_NDEF.patch

fix cves

2023-02-09 16:27:15 +08:00

backport-CVE-2023-0286-Fix-GENERAL_NAME_cmp-for-x400Address-1.patch

fix cves

2023-02-09 16:27:15 +08:00

backport-CVE-2023-2650-Restrict-the-size-of-OBJECT-IDENTIFIERs-that-OBJ_obj.patch

fix CVE-2023-2650

2023-06-12 15:13:47 +08:00

backport-CVE-2023-3446-Fix-DH_check-excessive-time-with-over-sized-modulus.patch

fix CVE-2023-3446

2023-07-22 16:13:04 +08:00

backport-CVE-2023-3817-testcase.patch

fix CVE-2023-3817

2023-07-28 01:08:37 +08:00

backport-CVE-2023-3817.patch

fix CVE-2023-3817

2023-07-28 01:08:37 +08:00

backport-Ensure-that-EXFLAG_INVALID_POLICY-is-checked-even-in.patch

fix some cves

2023-04-04 18:32:39 +08:00

backport-Fix-documentation-of-X509_VERIFY_PARAM_add0_policy.patch

fix some cves

2023-04-04 18:32:39 +08:00

backport-test-add-test-cases-for-the-policy-resource-overuse.patch

fix some cves

2023-04-04 18:32:39 +08:00

Backport-Update-expired-SCT-certificates.patch

fix expiring-certificates test case

2023-01-06 17:52:13 +08:00

backport-Update-further-expiring-certificates-that-affect-tes.patch

fix CVE-2023-3446

2023-07-22 16:13:04 +08:00

backport-x509-excessive-resource-use-verifying-policy-constra.patch

fix some cves

2023-04-04 18:32:39 +08:00

BIO_do_accept-correct-error-return-value.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

bio-printf-Avoid-using-rounding-errors-in-range-chec.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

BN-harden-BN_copy-against-leaks-from-memory-accesses.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

bugfix-Don-t-Overflow-when-printing-Thawte-Strong-Extranet-.patch

bugfix Overflow when printing Thawte Strong Extranet

2021-09-24 12:17:48 +08:00

Cast-the-unsigned-char-to-unsigned-int-before-shifti.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

CMS_get0_signers-description.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Correct-alignment-calculation-in-ssl3_setup_write.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Correctly-handle-the-return-value-from-EVP_Cipher-in.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Coverity-Fixes.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

crypto-poly1305-asm-fix-armv8-pointer-authentication.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

CVE-2020-1967.patch

update openssl-1.1.1d to openssl-1.1.1f and fix CVE-2020-1967

2020-05-12 16:17:14 +08:00

CVE-2020-1971-0001-DirectoryString-is-a-CHOICE-type-and-therefore-uses-.patch

CVE-2020-1971

2021-01-19 17:10:24 +08:00

CVE-2020-1971-0002-Correctly-compare-EdiPartyName-in-GENERAL_NAME_cmp.patch

CVE-2020-1971

2021-01-19 17:10:24 +08:00

CVE-2020-1971-0003-Check-that-multi-strings-CHOICE-types-don-t-use-impl.patch

CVE-2020-1971

2021-01-19 17:10:24 +08:00

CVE-2020-1971-0004-Complain-if-we-are-attempting-to-encode-with-an-inva.patch

CVE-2020-1971

2021-01-19 17:10:24 +08:00

CVE-2020-1971-0005-Add-a-test-for-GENERAL_NAME_cmp.patch

CVE-2020-1971

2021-01-19 17:10:24 +08:00

CVE-2020-1971-0006-Add-a-test-for-encoding-decoding-using-an-invalid-AS.patch

CVE-2020-1971

2021-01-19 17:10:24 +08:00

CVE-2021-3449.patch

fix CVE-2021-3449

2021-04-07 16:15:10 +08:00

CVE-2021-3711-0001-Check-the-plaintext-buffer-is-large-enough-when-decr.patch

fix CVE-2021-3711 and CVE-2021-3712

2021-08-30 19:50:23 +08:00

CVE-2021-3711-0002-Correctly-calculate-the-length-of-SM2-plaintext-give.patch

fix CVE-2021-3711 and CVE-2021-3712

2021-08-30 19:50:23 +08:00

CVE-2021-3711-0003-Extend-tests-for-SM2-decryption.patch

fix CVE-2021-3711 and CVE-2021-3712

2021-08-30 19:50:23 +08:00

CVE-2021-3712-0001-Fix-a-read-buffer-overrun-in-X509_aux_print.patch

fix CVE-2021-3711 and CVE-2021-3712

2021-08-30 19:50:23 +08:00

CVE-2021-3712-0002-Fix-EC_GROUP_new_from_ecparameters-to-check-the-base.patch

fix CVE-2021-3711 and CVE-2021-3712

2021-08-30 19:50:23 +08:00

CVE-2021-4160.patch

fix CVE-2021-4160

2022-02-28 14:35:12 +08:00

CVE-2021-23840.patch

fix CVE-2021-23840 and CVE-2021-23841

2021-03-11 10:01:26 +08:00

CVE-2021-23841.patch

fix CVE-2021-23840 and CVE-2021-23841

2021-03-11 10:01:26 +08:00

CVE-2022-0778-Add-a-negative-testcase-for-BN_mod_sqrt.patch

fix the CVE-2022-0778

2022-03-21 21:09:28 +08:00

CVE-2022-0778-Fix-possible-infinite-loop-in-BN_mod_sqrt.patch

fix the CVE-2022-0778

2022-03-21 21:09:28 +08:00

CVE-2022-1292.patch

fix the cve-2022-1292

2022-05-16 21:43:29 +08:00

CVE-2022-2068-Fix-file-operations-in-c_rehash.patch

fix CVE-2022-2068

2022-07-01 09:18:59 +08:00

CVE-2022-2097-Fix-AES-OCB-encrypt-decrypt-for-x86-AES-NI.patch

modify

2022-07-14 10:01:33 +08:00

Do-not-allow-dropping-Extended-Master-Secret-extensi.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

doc-Fix-documentation-of-EVP_EncryptUpdate.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

doc-man3-fix-types-taken-by-HMAC-HMAC_Update.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Don-t-attempt-to-duplicate-the-BIO-state-in-SSL_dup.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

EC-Constify-internal-EC_KEY-pointer-usage.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

EC-harden-EC_KEY-against-leaks-from-memory-accesses.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Ensure-ECDSA_size-always-returns-0.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Ensure-that-SSL_dup-copies-the-min-max-protocol-vers.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Ensure-we-never-use-a-partially-initialised-CMAC_CTX.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

EVP_EncryptInit.pod-fix-example.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

EVP-allow-empty-strings-to-EVP_Decode-functions.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

fix-a-docs-typo.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Fix-AES-CTR_DRBG-on-1.1.1.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Fix-AES-GCM-bug-on-aarch64-BigEndian.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Fix-crash-in-early-data-send-with-out-of-band-PSK-us.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Fix-d2i_PrivateKey-to-work-as-documented.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Fix-err-checking-and-mem-leaks-of-BIO_set_conn_port-.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Fix-issue-1418-by-moving-check-of-KU_KEY_CERT_SIGN-a.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Fix-memory-leaks-in-conf_def.c.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Fix-PEM_write_bio_PrivateKey_traditional-to-not-outp.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Fix-PEM-certificate-loading-that-sometimes-fails.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Fix-rsa8192.pem.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Fix-the-error-handling-in-EC_POINTs_mul.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

fix-the-test-case-failure.patch

fix the test case failure

2023-06-12 11:09:06 +08:00

Fix-type-cast-in-SSL_CTX_set1_groups-macro.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Fix-use-after-free-in-BIO_C_SET_SSL-callback.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Fix-wrong-return-value-check-of-mmap-function.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

fixed-swapped-parameters-descriptions-for-x509.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Free-pre_proc_exts-in-SSL_free.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

fuzz-asn1.c-Add-missing-include.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

i2b_PVK_bio-don-t-set-PEM_R_BIO_WRITE_FAILURE-in-cas.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Integer-overflow-in-ASN1_STRING_set.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Make-BIO_do_connect-and-friends-handle-multiple-IP-a.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Makefile.certificate

Package init

2019-09-30 11:10:53 -04:00

openssl-1.1.1-build.patch

delete unused files

2020-01-10 15:44:32 +08:00

openssl-1.1.1-fips.patch

update openssl-1.1.1d to openssl-1.1.1f and fix CVE-2020-1967

2020-05-12 16:17:14 +08:00

openssl-1.1.1f.tar.gz

update openssl-1.1.1d to openssl-1.1.1f and fix CVE-2020-1967

2020-05-12 16:17:14 +08:00

openssl.spec

fix CVE-2023-3817

2023-07-28 01:08:37 +08:00

Pass-an-EVP_PKEY-for-SSL_SECOP_TMP_DH-in-the-securit.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Prevent-use-after-free-of-global_engine_lock.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Replace-BUF_strdup-call-by-OPENSSL_strdup-adding-fai.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Revert-the-check-for-NaN-in-f-format.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

sslapitest-Add-test-for-premature-call-of-SSL_export.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Support-keys-with-RSA_METHOD_FLAG_NO_CHECK-with-OCSP.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

t1_trce-Fix-remaining-places-where-the-24-bit-shift-.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Test-TLSv1.3-out-of-band-PSK-with-all-5-ciphersuites.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Update-EVP_EncodeInit.pod.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Use-size-of-target-buffer-for-allocation.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

Verification-zero-length-content-in-S-MIME-format.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00

x509_vfy.c-Improve-key-usage-checks-in-internal_veri.patch

backport some bugfix patches from OpenSSL community and reset the release

2021-02-09 18:51:54 +08:00