openssl, branch OpenSSL_1_1_1w

Prepare for release of 1.1.1w

2023-09-11T14:08:11Z

Reviewed-by: Matt Caswell Release: yes

Copyright year updates

2023-09-11T14:07:52Z

Reviewed-by: Matt Caswell Release: yes

Add CVE-2023-4807 fix to CHANGES and NEWS

2023-09-11T08:46:57Z

Reviewed-by: Matt Caswell Reviewed-by: Hugo Landau Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/22034)

remove unused Appveyour config

2023-09-11T08:45:04Z

Reviewed-by: Hugo Landau Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/22000) (cherry picked from commit 8ac32e1e1b1a786366333acf897d332339610e6b)

Fix error handling in CMS_EncryptedData_encrypt

2023-09-11T08:22:43Z

That caused several memory leaks in case of error. Also when the CMS object that is created by CMS_EncryptedData_encrypt is not used in the normal way, but instead just deleted by CMS_ContentInfo_free some memory was lost. Fixes #21985 Reviewed-by: Dmitry Belyavskiy Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/22008)

Fix a possbile memleak in rsa_pub_encode

2023-09-09T14:37:56Z

That seems to be only an issue for RSA-PSS with parameters. Spotted by code review, so it looks like there is no test coverage for this. Reviewed-by: Tomas Mraz Reviewed-by: Hugo Landau (Merged from https://github.com/openssl/openssl/pull/22007)

Fix a possible memleak in eckey_priv_encode

2023-09-09T14:37:55Z

Additionally use OPENSSL_clear_free on the private key data in case of error. Reviewed-by: Tomas Mraz Reviewed-by: Hugo Landau (Merged from https://github.com/openssl/openssl/pull/22007)

Bump actions/checkout from 2 to 4

2023-09-05T10:20:31Z

Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 4. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v2...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] CLA: trivial Reviewed-by: Hugo Landau Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/21953) (cherry picked from commit d4231af60a8d04196b3b873c2fa8638daff36173)

Avoid clobbering non-volatile XMM registers

2023-09-02T08:29:10Z

This affects some Poly1305 assembler functions which are only used for certain CPU types. Remove those functions for Windows targets, as a simple interim solution. Fixes #21522 Reviewed-by: Tomas Mraz Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/21808) (cherry picked from commit 7b8e27bc2e02238986d89ef0ece067ec1b48e165)

Fix EVP_PKEY_asn1_copy

2023-08-16T08:54:05Z

Add the copy of the omitted ASN1 public key method and other members. Reviewed-by: Bernd Edlinger Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/21125)