| non port: security/openssl/Makefile |
Number of commits found: 336 (showing only 100 on this page) |
|
Wednesday, 8 Feb 2017
|
20:16 brnrd 
security/openssl: Enable ASM by default
- Enable ASM option
* By extension this enables AES-NI [1]
- Order OPTIONS_DEFAULT alphabetically
- Switch to using @sample [2]
- Bump PORTREVISION
PR: 216559 [2]
Reported by: dtestke [1]
Submitted by: Franco Fichtner <franco@opnsense.org> [2]
Approved by: asomers, allanjude
  |
|
Thursday, 26 Jan 2017
|
14:26 brnrd
security/openssl: Update to 1.0.2k
MFH: 2017Q1
Security: CVE-2016-7055
Security: CVE-2017-3731
Security: CVE-2017-3732
|
|
Friday, 28 Oct 2016
|
20:05 brnrd
security/openssl: Bump PORTREVISION
- Make sure ports get rebuilt
PR: 209582
Reported by: mat
|
|
Friday, 21 Oct 2016
|
12:51 mat
${RM} already has -f.
PR: 213570
Submitted by: mat
Exp-run by: antoine
Sponsored by: Absolight
|
|
Thursday, 6 Oct 2016
|
19:38 brnrd
security/openssl: Fix ldconfig issue
- OPT_USE= feature does not behave as expected
Reported by: dinoex
Differential Revision: D8166
|
|
Tuesday, 4 Oct 2016
|
18:35 brnrd
security/openssl: Mark MAKE_JOBS_UNSAFE
- Revert removal of MAKE_JOBS_UNSAFE in r423112
Reported by: D. Randolph
|
|
Sunday, 2 Oct 2016
|
11:51 brnrd
security/openssl: Modernize port
- Group options
- Migrate to <OPT>_CONFIGURE helpers
- Use CONFIGURE_ARGS not EXTRACONFIGURE
- Remove make-jobs unsafe (introduced 2009 / 0.9.8)
- Remove base SHLIBVER_BASE check (introduced 2006)
- Revert to default CPE_VERSION
- Rework MAN3 option
- Fix plist when SHARED disabled
Reviewed by: mat
Differential Revision: D8025
|
|
Monday, 26 Sep 2016
|
13:47 brnrd
security/openssl: Update to 1.0.2j
- Update to 1.0.2j
- Fixes Missing CRL sanity check (CVE-2016-7052)
Security: 337d8-83ed-11e6-bf52-b499baebfeaf
|
|
Saturday, 24 Sep 2016
|
20:23 brnrd
security/openssl: Take maintainership
|
13:15 marino
devel/openssl: change CONFLICTS to CONFLICTS_INSTALL
THere's no problem building openssl with other ports SSL libraries
installed, the conflict comes when it's time to install it.
|
06:43 dinoex
- add option ASM for OPNsense
- drop MAINTAINERSHIP caused of version naming change
|
|
Friday, 23 Sep 2016
|
12:54 brnrd
security/openssl: Update to 1.0.2i
- Update to 1.0.2i
- Move from PORTREVISION to PORTVERSION updates
- Remove patches that are included upstream
Reviewed by: mat, delphij
MFH: 2016Q3
Sponsored by: EuroBSDcon 2016 DevSummit
Differential Revision: D8006
|
|
Thursday, 15 Sep 2016
|
22:05 mat
ftp.openssl.org is being taken out.
https://mta.openssl.org/pipermail/openssl-announce/2016-September/000075.html
Sponsored by: Absolight
|
|
Monday, 12 Sep 2016
|
18:10 dinoex
- unroll for loop
Submitted by: John Marino
|
|
Sunday, 28 Aug 2016
|
16:19 dinoex
- remove options ASM and GMP
|
|
Saturday, 27 Aug 2016
|
11:00 mat
Revert the OpenSSL 1.1.0 update, it was not tested.
With hat: portmgr
Sponsored by: Absolight
|
09:59 dinoex
- update to 1.1.0
- bump SHLIBVERSION
|
|
Sunday, 14 Aug 2016
|
20:46 dinoex
- cleanup options
|
|
Wednesday, 20 Jul 2016
|
15:33 mat
Cleanup $() variables in ports Makefiles.
Mostly replace with ${}, but sometime, replace with $$() because it is
what was intended in the first place. (I think.)
Sponsored by: Absolight
|
|
Monday, 20 Jun 2016
|
19:16 dinoex
- fix possible integer overflow and application crash
Security: CVE-2016-2177
MFH: 2016Q2
|
|
Thursday, 16 Jun 2016
|
18:15 dinoex
- update warning message for new macros
|
|
Sunday, 12 Jun 2016
|
21:29 dinoex
- Fix DSA, preserve BN_FLG_CONSTTIME
Security: CVE-2016-2178
|
|
Tuesday, 3 May 2016
|
15:19 dinoex
- Security update to 1.0.2h
Security: https://www.openssl.org/news/secadv/20160503.txt
Security: CVE-2016-2105
Security: CVE-2016-2106
Security: CVE-2016-2107
Security: CVE-2016-2108
Security: CVE-2016-2109
Security: CVE-2016-2176
MFH: 2016Q2
|
|
Monday, 4 Apr 2016
|
19:09 dinoex
- remove NOPRECIOUS*
- make portlint happier
|
|
Friday, 1 Apr 2016
|
14:25 mat
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.
With hat: portmgr
Sponsored by: Absolight
|
|
Sunday, 6 Mar 2016
|
20:06 brnrd
security/libressl*: Register conflict with security/openssl-devel
- Add conflict for security/openssl-devel
- Sort conflicts alphabetically
Reviewed by: feld (mentor), koobs (mentor)
Approved by: feld (mentor)
Differential Revision: D5539
|
|
Thursday, 3 Mar 2016
|
19:00 dinoex
- extend CONFLICTS for openssl-devel
|
13:58 feld
security/openssl: Revert disabling of SSLv2 and MD2
Disabling SSLv2 without a shared library bump has a visible impact to
some applications. It is unclear at this time if disabling MD2 could
cause the same issues, but both are being reverted at the moment to be
safe.
PR: 195796
|
|
Wednesday, 2 Mar 2016
|
22:31 feld
security/openssl: Disable SSLv2 and MD2
SSLv2 is being disabled due to DROWN.
MD2 is being disabled as it should not have been enabled by default.
This was disabled by upstream back in 2009.
PR: 195796
Approved by: delphij, eadler
Security: CVE-2009-2409
Security: CVE-2016-0800
|
|
Tuesday, 1 Mar 2016
|
16:40 dinoex
- Security update to 1.0.2g
Security: https://www.openssl.org/news/secadv/20160301.txt
Security: CVE-2016-0800
Security: CVE-2016-0705
Security: CVE-2016-0798
Security: CVE-2016-0797
Security: CVE-2016-0799
Security: CVE-2016-0702
Security: CVE-2016-0703
Security: CVE-2016-0704
|
|
Saturday, 13 Feb 2016
|
09:48 dinoex
- mark options ASM broken on sparc64
PR: 204527
|
|
Thursday, 28 Jan 2016
|
17:35 dinoex
- add new manpages
Submitted by: olli hauer
|
15:09 dinoex
- Security update:
- add LICENSE_FILE
MFH: 2016Q1
Security: CVE-2015-3197
Security: CVE-2016-0701
|
|
Wednesday, 13 Jan 2016
|
17:29 brnrd
security/openssl: Fix No-SSLv3 option
- This change adds `no-ssl3-method` to config args
- Bump portrevision
Testing with security/openssl buillt with SSL3 option disabled [1]
revealed that the openssl binary and the libraries still support SSLv3
connections and methods. With the added no-ssl3-method argument passed
to the config script, the binary no longer supports the -ssl3 option
and ports requiring SSLv3 methods fail on undefined references to
methods.
PR: 203693 [1]
Reviewed by: koobs (mentor), feld (mentor, ports-secteam), dinoex (maintainer)
Approved by: koobs (mentor), feld (mentor, ports-secteam
MFH: 2016Q1
Differential Revision: D4924
|
|
Saturday, 5 Dec 2015
|
09:41 delphij
Update to 1.0.2e.
Security: CVE-2015-3193
Security: CVE-2015-3194
Security: CVE-2015-3195
Security: CVE-2015-3196
Security: CVE-2015-1794
MFH: 2015Q4
Approved by: so
|
|
Saturday, 21 Nov 2015
|
18:36 dinoex
- use post-install-DOCS-on
- cleanup text in IGNORE
|
|
Saturday, 5 Sep 2015
|
13:17 dinoex
- new OPTION MAN3
PR: 201459
|
|
Thursday, 9 Jul 2015
|
20:54 dinoex
- Security update to 1.0.2d
Security: http://openssl.org/news/secadv_20150709.txt
|
|
Friday, 12 Jun 2015
|
16:47 dinoex
- update to 1.0.2c
|
|
Thursday, 11 Jun 2015
|
21:37 zi
- Update to 1.0.2b
- Partially pacify portlint
With hat: ports-secteam
Security: 8305e215-1080-11e5-8ba2-000c2980a9f3
|
|
Thursday, 14 May 2015
|
10:15 mat
MASTER_SITES cleanup.
- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.
While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.
Also, replace some EXTRACT_SUFX occurences with USES=tar:*.
Checked by: make fetch-urlall-list
With hat: portmgr
Sponsored by: Absolight
|
|
Saturday, 25 Apr 2015
|
09:36 dinoex
- patchfiles for option PADLOCK renamed again
PR: 199444
|
|
Sunday, 12 Apr 2015
|
17:28 dinoex
- disable option ASM by default
- bump PORTREVISION
PR: 196756
|
|
Wednesday, 25 Mar 2015
|
08:30 marino
security category: Remove $PTHREAD_LIBS
approved by: PTHREAD blanket
|
|
Saturday, 21 Mar 2015
|
10:53 dinoex
- Security update to 1.0.2a
- termios.h now default
- fix patches
- fix manpage generation
- option ZLIB removed from default
- restore padlock support
- restore RFC-5705
- restore patch history
- restore build on older FreeBSD
- restore soname
Security: https://www.openssl.org/news/secadv_20150319.txt
Security: CVE-2015-0291
Security: CVE-2015-0204
Security: CVE-2015-0290
Security: CVE-2015-0207
Security: CVE-2015-0286
Security: CVE-2015-0208
Security: CVE-2015-0287
Security: CVE-2015-0289
Security: CVE-2015-0292
Security: CVE-2015-0293
Security: CVE-2015-1787
Security: CVE-2015-0285
Security: CVE-2015-0209
Security: CVE-2015-0288
|
|
Thursday, 19 Mar 2015
|
21:55 dinoex
- mark BROKEN options
|
20:23 delphij
Update to 1.0.1m to fix multiple vulnerabilities.
With hat: so
|
|
Friday, 16 Jan 2015
|
09:17 dinoex
- update to 1.0.1l
- fix option PADLOCK
|
|
Friday, 9 Jan 2015
|
00:02 delphij
Update to 1.01k.
With hat: ports-secteam
Security: vuxml 4e536c14-9791-11e4-977d-d050992ecde8
Security: CVE-2014-3569
Security: CVE-2014-3570
Security: CVE-2014-3571
Security: CVE-2014-3572
Security: CVE-2014-8275
Security: CVE-2015-0204
Security: CVE-2015-0205
Security: CVE-2015-0206
|
|
Sunday, 23 Nov 2014
|
10:34 dinoex
- new option TLSEXPCIPHERS
PR: 195270
Submitted by: yuri@rawbw.com
- options ordered by function
- extends descriptions
|
|
Wednesday, 15 Oct 2014
|
18:34 delphij
Update to 1.01j.
With hat: ports-secteam
Security: vuxml 03175e62-5494-11e4-9cc1-bc5ff4fb5e7b
Security: CVE-2014-3513
Security: CVE-2014-3566
Security: CVE-2014-3567
Security: CVE-2014-3568
|
|
Thursday, 14 Aug 2014
|
16:25 dinoex
- remove workaround for amd64
|
|
Monday, 11 Aug 2014
|
04:27 dinoex
- new options SSL2 SSL3
Suggested by: Velcro Leaf
|
|
Wednesday, 6 Aug 2014
|
23:37 delphij
Update to 1.01i.
With hat: ports-secteam
Security: vuxml 8aff07eb-1dbd-11e4-b6ba-3c970e169bc2
Security: CVE-2014-3505
Security: CVE-2014-3506
Security: CVE-2014-3507
Security: CVE-2014-3508
Security: CVE-2014-3509
Security: CVE-2014-3510
Security: CVE-2014-3511
Security: CVE-2014-3512
Security: CVE-2014-5139
|
|
Tuesday, 15 Jul 2014
|
16:57 adamw
Add DOCS to OPTIONS_DEFINE to ports that check for PORT_OPTIONS:MDOCS.
|
|
Sunday, 13 Jul 2014
|
20:47 dinoex
- add CONFLICTS because of libressl
|
|
Thursday, 10 Jul 2014
|
10:27 des
Include the final letter in the CPE version field.
|
|
Thursday, 3 Jul 2014
|
16:49 dinoex
- allow OPENSSLDIR be changed in /etc/make.conf or Makefile.local
|
|
Thursday, 5 Jun 2014
|
12:54 delphij
Update to 1.0.1h.
Approved by: so (ports-security@ blanket)
Security: 5ac53801-ec2e-11e3-9cf3-3c970e169bc2
|
|
Wednesday, 4 Jun 2014
|
16:54 des
Add CPE information.
With hat: ports-secteam
|
|
Saturday, 3 May 2014
|
16:36 dinoex
- Security patch
Security: CVE-2014-0198
Security: http://seclists.org/oss-sec/2014/q2/232
Security:
https://rt.openssl.org/Ticket/Display.html?user=guest&pass=guest&id=3321
Obtained from: OpenBSD
|
|
Sunday, 13 Apr 2014
|
08:40 dinoex
- fix a 4 year old "use-after-free" problem
https://rt.openssl.org/Ticket/Display.html?id=2167&user=guest&pass=guest
http://www.tedunangst.com/flak/post/analysis-of-openssl-freelist-reuse
http://ftp.openbsd.org/pub/OpenBSD/patches/5.4/common/008_openssl.patch
Obtained from: OpenBSD
|
|
Monday, 7 Apr 2014
|
21:46 bdrewery
- Update to 1.0.1g
Changes:
- Fix for CVE-2014-0160
- Add TLS padding extension workaround for broken servers.
- Fix for CVE-2014-0076
Security: CVE-2014-0160
Security: CVE-2014-0076
Security: https://www.openssl.org/news/secadv_20140407.txt
With hat: portmgr
MFH: 2014Q2
|
|
Sunday, 30 Mar 2014
|
19:37 dinoex
- add missing LIB_DEPENDS for forbidden option GMP
|
|
Friday, 28 Mar 2014
|
18:23 dinoex
- reset GREP_OPTIONS
PR: 188030
|
|
Tuesday, 4 Mar 2014
|
06:51 dinoex
- remove broken MANPREFIX
|
|
Sunday, 2 Mar 2014
|
13:13 dinoex
- error out early if users trying to break their base system
PR: 187076
|
|
Friday, 14 Feb 2014
|
14:34 dinoex
- use STAGEDIR
PR: 186753
Submitted by: Takefu
|
|
Wednesday, 8 Jan 2014
|
20:52 dinoex
- fix option PADLOCK
Submitted by: Renato Botelho
|
07:12 dinoex
- better fix for perl5.18
Submitted by: Jung-uk Kim
- clean up
|
|
Tuesday, 7 Jan 2014
|
20:40 dinoex
- Security update to openssl-1.0.1f
- remove broken patches
- new fix for perl5.18
- fix option GMP
Security: http://www.openssl.org/news/vulnerabilities.html
Security: CVE-2013-4353
Security: CVE-2013-6449
Security: CVE-2013-6450
Security: 5aaa257e-772d-11e3-a65a-3c970e169bc2
|
|
Saturday, 21 Sep 2013
|
09:45 dinoex
- fix build with perl 5.16
Submitted by: Takefu
|
|
Friday, 20 Sep 2013
|
22:55 bapt
Add NO_STAGE all over the place in preparation for the staging support (cat:
security)
|
|
Monday, 16 Sep 2013
|
16:45 bapt
Convert to new perl framework
Convert USE_GMAKE to USES
|
|
Monday, 9 Sep 2013
|
18:22 dinoex
- drop depedency to makedepend
Submitted by: Darren Pilgrim
|
|
Monday, 18 Mar 2013
|
06:20 dinoex
- fix wording of option
Submitted by: Warren Block
|
|
Tuesday, 5 Mar 2013
|
20:47 dinoex
- updated patches for options PADLOCK
|
|
Sunday, 3 Mar 2013
|
22:37 dinoex
- fix build with manpages
|
|
Monday, 25 Feb 2013
|
06:07 dinoex
- fix broken symlink in manpage
Submitted by: Warren Block
|
|
Wednesday, 13 Feb 2013
|
20:23 dinoex
- update to 1.0.1e
|
|
Sunday, 10 Feb 2013
|
16:20 dinoex
- fix paddding in TLS1.1 and DTLS on amd64
|
|
Wednesday, 6 Feb 2013
|
20:13 dinoex
- Security update to 1.0.1d
Security: CVE-2012-2686
Security: CVE-2013-0166
Security: CVE-2013-0169
Security: http://www.openssl.org/news/secadv_20120510.txt
|
|
Sunday, 3 Feb 2013
|
06:36 dinoex
- fix option PADLOCK
PR: 175622
Submitted by: Mathieu Simon
|
|
Tuesday, 29 Jan 2013
|
18:46 dinoex
- enable optimized NIST ECC on 64-bit little-endian machines
PR: 175663
Submitted by: bf
|
05:34 dinoex
- make the pkg-message respect PREFIX
PR: 175663
Submitted by: bf
|
|
Monday, 28 Jan 2013
|
18:07 dinoex
- mark option PADLOCK as BROKEN
PR: 175622
|
|
Saturday, 26 Jan 2013
|
16:34 dinoex
- cleanup header
|
|
Sunday, 29 Jul 2012
|
08:36 dinoex
- pass no-thread if threads are disabled
|
08:10 dinoex
- fix option THREADS
- bump PORTREVISION
PR: 170231
Submitted by: Kubilay Kocak
|
|
Saturday, 30 Jun 2012
|
11:33 dinoex
- update descripitions
PR: 169464
Submitted by: CyberRax
- shorter desc for options
|
|
Tuesday, 26 Jun 2012
|
03:41 dinoex
- fix options ZLIP and ASM
Reported by: jkim
|
|
Friday, 15 Jun 2012
|
21:07 dinoex
- use OPTIONS_DEFINE
- add VIA padlock support
PR: 164795
Submitted by: Stefan Krüger
|
|
Sunday, 13 May 2012
|
07:35 dinoex
- Security update to 1.0.1c
Security: http://openssl.org/news/secadv_20120510.txt
|
|
Friday, 20 Apr 2012
|
11:13 dinoex
- Security Update to 1.0.0a
Security: http://www.openssl.org/news/secadv_20120419.txt
Security:
http://lists.grok.org.uk/pipermail/full-disclosure/2012-April/086585.html
Security: CVE-2012-2110
|
|
Wednesday, 11 Apr 2012
|
21:06 dinoex
- update to 1.0.1
|
|
Thursday, 15 Mar 2012
|
06:15 dinoex
- drop DTLS bugfixes, now included upstream
- drop SCTP, will be in 1.0.1
- Security update to 1.0.0h
Security: http://www.openssl.org/news/secadv_20120312.txt
Security: CVE-2012-0884
PR: 166064
Approved by: portmgr (miwi)
Feature safe: yes
|
|
Wednesday, 22 Feb 2012
|
05:15 dinoex
- tamper SHLIB_VERSION_NUMBER in opensslv.h
This allows some qt apps to dynamicly load openssl
|
|
Thursday, 19 Jan 2012
|
19:25 dinoex
- Security update to 1.0.0g
Security: http://www.openssl.org/news/secadv_20120118.txt
|
|
Wednesday, 11 Jan 2012
|
05:44 dinoex
- Build with obsolte MD2 hash by default
- Security Update to 1.0.0f
Security: http://openssl.org/news/secadv_20120104.txt
Security: CVE-2011-4108
Security: CVE-2011-4109
Security: CVE-2011-4576
Security: CVE-2011-4577
Security: CVE-2011-4619
Security: CVE-2012-0027
Submitted by: Tim Zingelman
|
|
Tuesday, 22 Nov 2011
|
06:50 dinoex
- make portlint happier
- update patches
PR: 161379
Feature safe: yes
|
Number of commits found: 336 (showing only 100 on this page) |
As an Amazon Associate I earn from qualifying purchases.