CVS commit: pkgsrc/security/openssl

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Tue Mar 15 18:20:02 UTC 2022

Modified Files:
        pkgsrc/security/openssl: Makefile PLIST distinfo

Log Message:
openssl: update to 1.1.1n.

  Major changes between OpenSSL 1.1.1m and OpenSSL 1.1.1n [15 Mar 2022]

      o Fixed a bug in the BN_mod_sqrt() function that can cause it to loop
        forever for non-prime moduli ([CVE-2022-0778])


To generate a diff of this commit:
cvs rdiff -u -r1.278 -r1.279 pkgsrc/security/openssl/Makefile
cvs rdiff -u -r1.10 -r1.11 pkgsrc/security/openssl/PLIST
cvs rdiff -u -r1.157 -r1.158 pkgsrc/security/openssl/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/openssl/Makefile
diff -u pkgsrc/security/openssl/Makefile:1.278 pkgsrc/security/openssl/Makefile:1.279
--- pkgsrc/security/openssl/Makefile:1.278      Mon Feb 28 12:25:09 2022
+++ pkgsrc/security/openssl/Makefile    Tue Mar 15 18:20:02 2022
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile,v 1.278 2022/02/28 12:25:09 wiz Exp $
+# $NetBSD: Makefile,v 1.279 2022/03/15 18:20:02 wiz Exp $
 
 # Remember to upload-distfiles when updating OpenSSL -- otherwise it
 # is not possible for users who have bootstrapped without OpenSSL
 # to install it and enable HTTPS fetching.
-DISTNAME=      openssl-1.1.1m
+DISTNAME=      openssl-1.1.1n
 CATEGORIES=    security
 MASTER_SITES=  https://www.openssl.org/source/
 

Index: pkgsrc/security/openssl/PLIST
diff -u pkgsrc/security/openssl/PLIST:1.10 pkgsrc/security/openssl/PLIST:1.11
--- pkgsrc/security/openssl/PLIST:1.10  Mon Feb 28 12:25:09 2022
+++ pkgsrc/security/openssl/PLIST       Tue Mar 15 18:20:02 2022
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.10 2022/02/28 12:25:09 wiz Exp $
+@comment $NetBSD: PLIST,v 1.11 2022/03/15 18:20:02 wiz Exp $
 bin/c_rehash
 bin/openssl
 include/openssl/aes.h
@@ -595,6 +595,7 @@ man/man3/BN_mod_mul.3
 man/man3/BN_mod_mul_montgomery.3
 man/man3/BN_mod_mul_reciprocal.3
 man/man3/BN_mod_sqr.3
+man/man3/BN_mod_sqrt.3
 man/man3/BN_mod_sub.3
 man/man3/BN_mod_word.3
 man/man3/BN_mpi2bn.3
@@ -3415,6 +3416,7 @@ man/man3/X509_STORE_CTX_init.3
 man/man3/X509_STORE_CTX_lookup_certs_fn.3
 man/man3/X509_STORE_CTX_lookup_crls_fn.3
 man/man3/X509_STORE_CTX_new.3
+man/man3/X509_STORE_CTX_purpose_inherit.3
 man/man3/X509_STORE_CTX_set0_crls.3
 man/man3/X509_STORE_CTX_set0_param.3
 man/man3/X509_STORE_CTX_set0_trusted_stack.3
@@ -3426,6 +3428,8 @@ man/man3/X509_STORE_CTX_set_default.3
 man/man3/X509_STORE_CTX_set_error.3
 man/man3/X509_STORE_CTX_set_error_depth.3
 man/man3/X509_STORE_CTX_set_ex_data.3
+man/man3/X509_STORE_CTX_set_purpose.3
+man/man3/X509_STORE_CTX_set_trust.3
 man/man3/X509_STORE_CTX_set_verify.3
 man/man3/X509_STORE_CTX_set_verify_cb.3
 man/man3/X509_STORE_CTX_verify_cb.3

Index: pkgsrc/security/openssl/distinfo
diff -u pkgsrc/security/openssl/distinfo:1.157 pkgsrc/security/openssl/distinfo:1.158
--- pkgsrc/security/openssl/distinfo:1.157      Mon Feb 28 12:25:09 2022
+++ pkgsrc/security/openssl/distinfo    Tue Mar 15 18:20:02 2022
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.157 2022/02/28 12:25:09 wiz Exp $
+$NetBSD: distinfo,v 1.158 2022/03/15 18:20:02 wiz Exp $
 
-BLAKE2s (openssl-1.1.1m.tar.gz) = 4fbc0401eb9e3b8100c82b736e86cade3bf0ff9f0ed7c3fc96c99fb3b9f32485
-SHA512 (openssl-1.1.1m.tar.gz) = ba0ef99b321546c13385966e4a607734df38b96f6ed45c4c67063a5f8d1482986855279797a6920d9f86c2ec31ce3e104dcc62c37328caacdd78aec59aa66156
-Size (openssl-1.1.1m.tar.gz) = 9847315 bytes
+BLAKE2s (openssl-1.1.1n.tar.gz) = c79ef07f2bc65bbe60f22989154ebf64d0e996566149edaa04485372034804a8
+SHA512 (openssl-1.1.1n.tar.gz) = 1937796736613dcf4105a54e42ecb61f95a1cea74677156f9459aea0f2c95159359e766089632bf364ee6b0d28d661eb9957bce8fecc9d2436378d8d79e8d0a4
+Size (openssl-1.1.1n.tar.gz) = 9850712 bytes
 SHA1 (patch-Configurations_shared-info.pl) = 0e835f6e343b5d05ef9a0e6ef2a195201262d15c
 SHA1 (patch-Configurations_unix-Makefile.tmpl) = 3f47dd453381485aeb6c37dc53f932428fdcef50
 SHA1 (patch-Configure) = 479f1bc826f7721f6b44d6b5a6cf460432924bf2