1
0
mirror of https://git.openwrt.org/openwrt/openwrt.git synced 2024-10-18 13:29:16 +02:00
openwrt/package
John Audia bac2f1bed6 openssl: update to 3.0.14
Major changes between OpenSSL 3.0.13 and OpenSSL 3.0.14 [04-Jun-2024]

* Fixed potential use after free after SSL_free_buffers() is called.
  [CVE-2024-4741]
* Fixed checking excessively long DSA keys or parameters may be very slow.
  [CVE-2024-4603]
* Fixed an issue where some non-default TLS server configurations can cause
  unbounded memory growth when processing TLSv1.3 sessions. An attacker may
  exploit certain server configurations to trigger unbounded memory growth that
  would lead to a Denial of Service.  [CVE-2024-2511]
* New atexit configuration switch, which controls whether the OPENSSL_cleanup
  is registered when libcrypto is unloaded. This can be used on platforms
  where using atexit() from shared libraries causes crashes on exit

Signed-off-by: John Audia <therealgraysky@proton.me>

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
2024-06-08 23:29:31 +02:00
..
base-files Revert "base-files: Ignore exit code of uci.sh inclusion" 2024-06-08 12:57:18 +02:00
boot kexec-tools: fix multiple compile errors 2024-06-08 14:08:38 +02:00
devel
firmware
kernel kernel: ltq-vdsl-vr9: fix compilation with linux 6.6 2024-06-08 23:25:35 +02:00
libs openssl: update to 3.0.14 2024-06-08 23:29:31 +02:00
network
system
utils
Makefile