CVS commit: pkgsrc/security/openssl

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sat Feb 20 08:53:23 UTC 2021

Modified Files:
        pkgsrc/security/openssl: Makefile PLIST distinfo

Log Message:
openssl: update to 1.1.1j.

  Major changes between OpenSSL 1.1.1i and OpenSSL 1.1.1j [16 Feb 2021]

      o Fixed a NULL pointer deref in the X509_issuer_and_serial_hash()
        function (CVE-2021-23841)
      o Fixed the RSA_padding_check_SSLv23() function and the RSA_SSLV23_PADDING
        padding mode to correctly check for rollback attacks
      o Fixed an overflow in the EVP_CipherUpdate, EVP_EncryptUpdate and
        EVP_DecryptUpdate functions (CVE-2021-23840)
      o Fixed SRP_Calc_client_key so that it runs in constant time


To generate a diff of this commit:
cvs rdiff -u -r1.267 -r1.268 pkgsrc/security/openssl/Makefile
cvs rdiff -u -r1.7 -r1.8 pkgsrc/security/openssl/PLIST
cvs rdiff -u -r1.147 -r1.148 pkgsrc/security/openssl/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/openssl/Makefile
diff -u pkgsrc/security/openssl/Makefile:1.267 pkgsrc/security/openssl/Makefile:1.268
--- pkgsrc/security/openssl/Makefile:1.267      Mon Jan 25 20:26:43 2021
+++ pkgsrc/security/openssl/Makefile    Sat Feb 20 08:53:23 2021
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.267 2021/01/25 20:26:43 schmonz Exp $
+# $NetBSD: Makefile,v 1.268 2021/02/20 08:53:23 wiz Exp $
 
-DISTNAME=      openssl-1.1.1i
+DISTNAME=      openssl-1.1.1j
 CATEGORIES=    security
 MASTER_SITES=  https://www.openssl.org/source/
 

Index: pkgsrc/security/openssl/PLIST
diff -u pkgsrc/security/openssl/PLIST:1.7 pkgsrc/security/openssl/PLIST:1.8
--- pkgsrc/security/openssl/PLIST:1.7   Wed Sep 30 09:25:30 2020
+++ pkgsrc/security/openssl/PLIST       Sat Feb 20 08:53:23 2021
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.7 2020/09/30 09:25:30 wiz Exp $
+@comment $NetBSD: PLIST,v 1.8 2021/02/20 08:53:23 wiz Exp $
 bin/c_rehash
 bin/openssl
 include/openssl/aes.h
@@ -803,6 +803,7 @@ man/man3/DH_check_params_ex.3
 man/man3/DH_check_pub_key_ex.3
 man/man3/DH_clear_flags.3
 man/man3/DH_compute_key.3
+man/man3/DH_compute_key_padded.3
 man/man3/DH_free.3
 man/man3/DH_generate_key.3
 man/man3/DH_generate_parameters.3
@@ -1917,6 +1918,7 @@ man/man3/OCSP_REQUEST_free.3
 man/man3/OCSP_REQUEST_new.3
 man/man3/OCSP_REQ_CTX_add1_header.3
 man/man3/OCSP_REQ_CTX_free.3
+man/man3/OCSP_REQ_CTX_i2d.3
 man/man3/OCSP_REQ_CTX_set1_req.3
 man/man3/OCSP_RESPBYTES_free.3
 man/man3/OCSP_RESPBYTES_new.3

Index: pkgsrc/security/openssl/distinfo
diff -u pkgsrc/security/openssl/distinfo:1.147 pkgsrc/security/openssl/distinfo:1.148
--- pkgsrc/security/openssl/distinfo:1.147      Tue Dec  8 18:54:17 2020
+++ pkgsrc/security/openssl/distinfo    Sat Feb 20 08:53:23 2021
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.147 2020/12/08 18:54:17 wiz Exp $
+$NetBSD: distinfo,v 1.148 2021/02/20 08:53:23 wiz Exp $
 
-SHA1 (openssl-1.1.1i.tar.gz) = eb684ba4ed31fe2c48062aead75233ecd36882a6
-RMD160 (openssl-1.1.1i.tar.gz) = 95a45fa7c2240dde179e8f8028f998bfa5177cc3
-SHA512 (openssl-1.1.1i.tar.gz) = fe12e0ab9e1688f24dd862ac633d0ab703b499c0f34b53c3560aa0d3879d81d647aa0678ed517dda5efb2711f669fcb1a1e0e24f6eac2efc2cf4eae6b62014d8
-Size (openssl-1.1.1i.tar.gz) = 9808346 bytes
+SHA1 (openssl-1.1.1j.tar.gz) = 04c340b086828eecff9df06dceff196790bb9268
+RMD160 (openssl-1.1.1j.tar.gz) = b88dd6c2f1587a2cf9e5670f697343808dc80ea6
+SHA512 (openssl-1.1.1j.tar.gz) = 51e44995663b5258b0018bdc1e2b0e7e8e0cce111138ca1f80514456af920fce4e409a411ce117c0f3eb9190ac3e47c53a43f39b06acd35b7494e2bec4a607d5
+Size (openssl-1.1.1j.tar.gz) = 9823161 bytes
 SHA1 (patch-Configurations_shared-info.pl) = 0e835f6e343b5d05ef9a0e6ef2a195201262d15c
 SHA1 (patch-Configurations_unix-Makefile.tmpl) = cf6b46c6e10e84100beb468bbe6f85c5e62cbe7a
 SHA1 (patch-Configure) = 479f1bc826f7721f6b44d6b5a6cf460432924bf2