Skip to content

Commit a89744f

Browse files
hassaanptargos
authored andcommittedApr 27, 2020
deps: upgrade openssl sources to 1.1.1g
This updates all sources in deps/openssl/openssl by: $ cd deps/openssl/ $ rm -rf openssl $ tar zxf ~/tmp/openssl-1.1.1g.tar.gz $ mv openssl-1.1.1g openssl $ git add --all openssl $ git commit openssl PR-URL: #32971 Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Sam Roberts <vieuxtech@gmail.com>
1 parent 39a3cc1 commit a89744f

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

48 files changed

+1842
-636
lines changed
 

‎deps/openssl/openssl/CHANGES

+21
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,27 @@
77
https://github.com/openssl/openssl/commits/ and pick the appropriate
88
release branch.
99

10+
Changes between 1.1.1f and 1.1.1g [21 Apr 2020]
11+
12+
*) Fixed segmentation fault in SSL_check_chain()
13+
Server or client applications that call the SSL_check_chain() function
14+
during or after a TLS 1.3 handshake may crash due to a NULL pointer
15+
dereference as a result of incorrect handling of the
16+
"signature_algorithms_cert" TLS extension. The crash occurs if an invalid
17+
or unrecognised signature algorithm is received from the peer. This could
18+
be exploited by a malicious peer in a Denial of Service attack.
19+
(CVE-2020-1967)
20+
[Benjamin Kaduk]
21+
22+
*) Added AES consttime code for no-asm configurations
23+
an optional constant time support for AES was added
24+
when building openssl for no-asm.
25+
Enable with: ./config no-asm -DOPENSSL_AES_CONST_TIME
26+
Disable with: ./config no-asm -DOPENSSL_NO_AES_CONST_TIME
27+
At this time this feature is by default disabled.
28+
It will be enabled by default in 3.0.
29+
[Bernd Edlinger]
30+
1031
Changes between 1.1.1e and 1.1.1f [31 Mar 2020]
1132

1233
*) Revert the change of EOF detection while reading in libssl to avoid

‎deps/openssl/openssl/INSTALL

+3-3
Original file line numberDiff line numberDiff line change
@@ -535,9 +535,9 @@
535535
conjunction with the "-DPEDANTIC" option (or the
536536
--strict-warnings option).
537537

538-
no-ui
539-
Don't build with the "UI" capability (i.e. the set of
540-
features enabling text based prompts).
538+
no-ui-console
539+
Don't build with the "UI" console method (i.e. the "UI"
540+
method that enables text based console prompts).
541541

542542
enable-unit-test
543543
Enable additional unit test APIs. This should not typically

0 commit comments

Comments
 (0)
Please sign in to comment.