openssl, branch OpenSSL_1_1_1t

Prepare for 1.1.1t release

2023-02-07T13:37:05Z

Reviewed-by: Tomas Mraz Release: yes

Update copyright year

2023-02-07T11:55:04Z

Reviewed-by: Tomas Mraz Release: yes

Add CHANGES and NEWS entries for the 1.1.1t release

2023-02-03T10:22:47Z

Reviewed-by: Paul Dale Reviewed-by: Hugo Landau

CVE-2023-0286: Fix GENERAL_NAME_cmp for x400Address (1.1.1)

2023-02-03T10:22:47Z

Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz

Check CMS failure during BIO setup with -stream is handled correctly

2023-02-03T10:22:47Z

Test for the issue fixed in the previous commit Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz

Fix a UAF resulting from a bug in BIO_new_NDEF

2023-02-03T10:22:47Z

If the aux->asn1_cb() call fails in BIO_new_NDEF then the "out" BIO will be part of an invalid BIO chain. This causes a "use after free" when the BIO is eventually freed. Based on an original patch by Viktor Dukhovni and an idea from Theo Buehler. Thanks to Octavio Galland for reporting this issue. Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz

Add a test for CVE-2022-4450

2023-02-03T10:22:47Z

Call PEM_read_bio_ex() and expect a failure. There should be no dangling ptrs and therefore there should be no double free if we free the ptrs on error. Reviewed-by: Paul Dale Reviewed-by: Hugo Landau

Avoid dangling ptrs in header and data params for PEM_read_bio_ex

2023-02-03T10:22:47Z

In the event of a failure in PEM_read_bio_ex() we free the buffers we allocated for the header and data buffers. However we were not clearing the ptrs stored in *header and *data. Since, on success, the caller is responsible for freeing these ptrs this can potentially lead to a double free if the caller frees them even on failure. Thanks to Dawei Wang for reporting this issue. Based on a proposed patch by Kurt Roeckx. CVE-2022-4450 Reviewed-by: Paul Dale Reviewed-by: Hugo Landau

Fix Timing Oracle in RSA decryption

2023-02-03T10:22:47Z

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. Patch written by Dmitry Belyavsky and Hubert Kario CVE-2022-4304 Reviewed-by: Dmitry Belyavskiy Reviewed-by: Tomas Mraz

Use $config{build_file} instead of $target{build_file}

2023-02-03T10:13:01Z

If the user specifies an alternative build file than the default, this alternative is recorded in $config{build_file}, not $target{build_file}. Therefore, the former should be used, leaving the latter as a mere default. This is a bug. Reviewed-by: Hugo Landau Reviewed-by: Matthias St. Pierre (Merged from https://github.com/openssl/openssl/pull/20174)