openssl/NEWS, branch OpenSSL_1_1_1v

Prepare for release of 1.1.1v

2023-08-01T13:51:35Z

Reviewed-by: Tomas Mraz Release: yes

Add CHANGES/NEWS for CVE-2023-3817

2023-07-31T13:30:37Z

Reviewed-by: Paul Dale Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/21551)

Update CHANGES/NEWS for CVE-2023-3446

2023-07-19T09:24:06Z

Reviewed-by: Paul Dale Reviewed-by: Tom Cosgrove Reviewed-by: Bernd Edlinger Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/21452)

Prepare for 1.1.1v

2023-05-30T12:43:18Z

Reviewed-by: Richard Levitte Release: yes

Prepare for release of 1.1.1u

2023-05-30T12:42:39Z

Reviewed-by: Richard Levitte Release: yes

Restrict the size of OBJECT IDENTIFIERs that OBJ_obj2txt will translate

2023-05-29T13:37:30Z

OBJ_obj2txt() would translate any size OBJECT IDENTIFIER to canonical numeric text form. For gigantic sub-identifiers, this would take a very long time, the time complexity being O(n^2) where n is the size of that sub-identifier. To mitigate this, a restriction on the size that OBJ_obj2txt() will translate to canonical numeric text form is added, based on RFC 2578 (STD 58), which says this: > 3.5. OBJECT IDENTIFIER values > > An OBJECT IDENTIFIER value is an ordered list of non-negative numbers. > For the SMIv2, each number in the list is referred to as a sub-identifier, > there are at most 128 sub-identifiers in a value, and each sub-identifier > has a maximum value of 2^32-1 (4294967295 decimal). Fixes otc/security#96 Fixes CVE-2023-2650 Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz

Fix documentation of X509_VERIFY_PARAM_add0_policy()

2023-03-28T12:13:38Z

The function was incorrectly documented as enabling policy checking. Fixes: CVE-2023-0466 Reviewed-by: Matt Caswell Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/20564)

Updated CHANGES and NEWS for CVE-2023-0465

2023-03-28T12:09:38Z

Also updated the entries for CVE-2023-0464 Related-to: CVE-2023-0465 Reviewed-by: Hugo Landau Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/20588)

Prepare for 1.1.1u-dev

2023-02-07T13:37:22Z

Reviewed-by: Tomas Mraz Release: yes

Prepare for 1.1.1t release

2023-02-07T13:37:05Z

Reviewed-by: Tomas Mraz Release: yes