CVS commit: pkgsrc/security/openssl

["Jonathan Perkin" <jperkin%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   jperkin
Date:           Tue Jun 21 18:48:39 UTC 2022

Modified Files:
        pkgsrc/security/openssl: Makefile PLIST distinfo

Log Message:
openssl: Update to 1.1.1p.

Approved during freeze by gdt@, tested on SmartOS and macOS.

Major changes between OpenSSL 1.1.1o and OpenSSL 1.1.1p [21 Jun 2022]

    o Fixed additional bugs in the c_rehash script which was not properly
      sanitising shell metacharacters to prevent command injection
      (CVE-2022-2068)


To generate a diff of this commit:
cvs rdiff -u -r1.280 -r1.281 pkgsrc/security/openssl/Makefile
cvs rdiff -u -r1.11 -r1.12 pkgsrc/security/openssl/PLIST
cvs rdiff -u -r1.159 -r1.160 pkgsrc/security/openssl/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/openssl/Makefile
diff -u pkgsrc/security/openssl/Makefile:1.280 pkgsrc/security/openssl/Makefile:1.281
--- pkgsrc/security/openssl/Makefile:1.280      Tue May 10 05:43:50 2022
+++ pkgsrc/security/openssl/Makefile    Tue Jun 21 18:48:39 2022
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile,v 1.280 2022/05/10 05:43:50 wiz Exp $
+# $NetBSD: Makefile,v 1.281 2022/06/21 18:48:39 jperkin Exp $
 
 # Remember to upload-distfiles when updating OpenSSL -- otherwise it
 # is not possible for users who have bootstrapped without OpenSSL
 # to install it and enable HTTPS fetching.
-DISTNAME=      openssl-1.1.1o
+DISTNAME=      openssl-1.1.1p
 CATEGORIES=    security
 MASTER_SITES=  https://www.openssl.org/source/
 

Index: pkgsrc/security/openssl/PLIST
diff -u pkgsrc/security/openssl/PLIST:1.11 pkgsrc/security/openssl/PLIST:1.12
--- pkgsrc/security/openssl/PLIST:1.11  Tue Mar 15 18:20:02 2022
+++ pkgsrc/security/openssl/PLIST       Tue Jun 21 18:48:39 2022
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.11 2022/03/15 18:20:02 wiz Exp $
+@comment $NetBSD: PLIST,v 1.12 2022/06/21 18:48:39 jperkin Exp $
 bin/c_rehash
 bin/openssl
 include/openssl/aes.h
@@ -2576,9 +2576,11 @@ man/man3/SSL_CTX_flush_sessions.3
 man/man3/SSL_CTX_free.3
 man/man3/SSL_CTX_generate_session_ticket_fn.3
 man/man3/SSL_CTX_get0_CA_list.3
+man/man3/SSL_CTX_get0_chain_cert_store.3
 man/man3/SSL_CTX_get0_chain_certs.3
 man/man3/SSL_CTX_get0_param.3
 man/man3/SSL_CTX_get0_security_ex_data.3
+man/man3/SSL_CTX_get0_verify_cert_store.3
 man/man3/SSL_CTX_get_cert_store.3
 man/man3/SSL_CTX_get_ciphers.3
 man/man3/SSL_CTX_get_client_CA_list.3
@@ -2834,6 +2836,7 @@ man/man3/SSL_free.3
 man/man3/SSL_free_buffers.3
 man/man3/SSL_get0_CA_list.3
 man/man3/SSL_get0_alpn_selected.3
+man/man3/SSL_get0_chain_cert_store.3
 man/man3/SSL_get0_chain_certs.3
 man/man3/SSL_get0_dane_authority.3
 man/man3/SSL_get0_dane_tlsa.3
@@ -2845,6 +2848,7 @@ man/man3/SSL_get0_peername.3
 man/man3/SSL_get0_security_ex_data.3
 man/man3/SSL_get0_session.3
 man/man3/SSL_get0_verified_chain.3
+man/man3/SSL_get0_verify_cert_store.3
 man/man3/SSL_get1_curves.3
 man/man3/SSL_get1_groups.3
 man/man3/SSL_get1_session.3

Index: pkgsrc/security/openssl/distinfo
diff -u pkgsrc/security/openssl/distinfo:1.159 pkgsrc/security/openssl/distinfo:1.160
--- pkgsrc/security/openssl/distinfo:1.159      Tue May 10 05:43:50 2022
+++ pkgsrc/security/openssl/distinfo    Tue Jun 21 18:48:39 2022
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.159 2022/05/10 05:43:50 wiz Exp $
+$NetBSD: distinfo,v 1.160 2022/06/21 18:48:39 jperkin Exp $
 
-BLAKE2s (openssl-1.1.1o.tar.gz) = 1cce7975b7c39641707fa142214c6b22255b42151ef6e4da49eeacf1dc9466cc
-SHA512 (openssl-1.1.1o.tar.gz) = 75b2f1499cb4640229eb6cd35d85cbff2e19db17b959ac4d04b60f1b395b73567f9003521452a0fcfeea9b31b26de0a7bccf476ecf9caae02298f3647cfb7e23
-Size (openssl-1.1.1o.tar.gz) = 9856386 bytes
+BLAKE2s (openssl-1.1.1p.tar.gz) = 9fe91a85ba0ee64d8225c80fa6fd5bf6294a3aae051a9681798aeb1520c6d1f8
+SHA512 (openssl-1.1.1p.tar.gz) = 203470b1cd37bdbfabfec5ef37fc97c991d9943f070c988316f6396b09dae7cea16ac884bd8646dbf7dd1ed40ebde6bdfa5700beee2d714d07c97cc70b4e48d9
+Size (openssl-1.1.1p.tar.gz) = 9860217 bytes
 SHA1 (patch-Configurations_shared-info.pl) = 0e835f6e343b5d05ef9a0e6ef2a195201262d15c
 SHA1 (patch-Configurations_unix-Makefile.tmpl) = 3f47dd453381485aeb6c37dc53f932428fdcef50
 SHA1 (patch-Configure) = 479f1bc826f7721f6b44d6b5a6cf460432924bf2