[openssl] OpenSSL_1_1_1l create

Matt Caswell matt at openssl.org
Tue Aug 24 13:50:06 UTC 2021


The annotated tag OpenSSL_1_1_1l has been created
        at  6e9c3540b2dc39e6bdda9444c79ecaa4d6baa312 (tag)
   tagging  fb047ebc87b18bdc4cf9ddee9ee1f5ed93e56aff (commit)
  replaces  OpenSSL_1_1_1k
 tagged by  Matt Caswell
        on  Tue Aug 24 14:38:47 2021 +0100

- Log -----------------------------------------------------------------
OpenSSL 1.1.1l release tag
-----BEGIN PGP SIGNATURE-----

iQFFBAABCAAvFiEEhlersmDwVrHlGQg52cTSbQ5gRJEFAmEk9mcRHG1hdHRAb3Bl
bnNzbC5vcmcACgkQ2cTSbQ5gRJGEvgf+OV98uls31C2slBrooNPmlpYtiUS663wo
KcJ5jifnYDoBudYicsFPT1CjuRuX4tSk4A685+inbq+1DFdTmHcFLw2Dd6ki4el8
Z/dQCp9eDX3Z+gdb5hs4j/FMfwEqnjuj8dCk8/ib1XVqb9f2gA5XJE49NoZtSksk
VZkSKC9MKnA7IGbd3ov6LaPZuygk6T5R+wvWeiz+USd9UzUPG874QvHpyH4R2Hl2
4TTwNH1QQuc5kuam8yTFMAWMs4ZhTUm1GpEMzZ3T/yB7iLuD5LUoEQJSRhklFvgh
IGfs9dOhXbNmYj2duKmJ4JOvRI/slQeP96+sRgrTgOH6e9Md1BbIEA==
=HL6/
-----END PGP SIGNATURE-----

Alex Yursha (1):
      Print correct error message in utils/mkdir-p.pl

Benjamin Kaduk (4):
      Improve RFC 8446 PSK key exchange mode compliance
      make update
      Don't send key_share for PSK-only key exchange
      Update expected results for tls13kexmodes tests

Billy Brumley (1):
      [doc/man3] documentation: BN_cmp manpage updates

Christian Heimes (1):
      Inherit hostflags verify params even without hosts

Daiki Ueno (2):
      BIO_lookup_ex: use AI_ADDRCONFIG only if explicit host name is given
      apps: Use the first detected address family if IPv6 is not available

Dave Coombs (1):
      crl2pkcs7 shouldn't include empty optional sets

David Benjamin (1):
      Fix use of uninitialized memory in test_rsa_oaep

David CARLIER (1):
      apple getentropy removal

David Carlier (1):
      BIO_listen: disable setting ipv6_v6only on OpenBSD as it is a read only data and true

Dmitry Belyavskiy (5):
      Use OCSP-specific error code for clarity
      Avoid sending alerts after shutdown
      Try to parse private key as PKCS#8 first, fallback afterwards
      Testing private keys with extra attributes
      Cleanup the peer point formats on regotiation

Dr. David von Oheimb (1):
      ee-self-signed.pem: Restore original version, adding -attime to 25-test_verify.t

Fred Hornsey (1):
      Support for Android NDK r22

Hubert Kario (1):
      man: s_server: fix typo in -alpn option description

Ingo Franzki (2):
      s390x: AES OFB/CFB: Maintain running IV from cipher context
      Test EVP Cipher updating the context's IV

Ingo Schwarze (1):
      Fix a read buffer overrun in X509_aux_print().

Jean-Philippe Boivin (1):
      Properly restore XMM registers in ChaCha20's AVX-512(VL) assembly

Lars Immisch (1):
      Use getauxval on Android with API level > 18

Matt Caswell (24):
      Prepare for 1.1.1l-dev
      Only call dtls1_start_timer() once
      Fix s_server PSK handling
      Avoid "excessive message size" for session tickets
      Don't reset the packet pointer in ssl3_setup_read_buffer
      Disallow SSL_key_update() if there are writes pending
      Fix some minor record layer issues
      Fix i2v_GENERAL_NAME to not assume NUL terminated strings
      Fix POLICYINFO printing to not assume NUL terminated strings
      Fix printing of PROXY_CERT_INFO_EXTENSION to not assume NUL terminated strings
      Fix the name constraints code to not assume NUL terminated strings
      Fix test code to not assume NUL terminated strings
      Fix append_ia5 function to not assume NUL terminated strings
      Fix NETSCAPE_SPKI_print function to not assume NUL terminated strings
      Fix EC_GROUP_new_from_ecparameters to check the base length
      Allow fuzz builds to detect string overruns
      Fix the error handling in i2v_AUTHORITY_KEYID
      Correctly calculate the length of SM2 plaintext given the ciphertext
      Extend tests for SM2 decryption
      Check the plaintext buffer is large enough when decrypting SM2
      Updates to CHANGES and NEWS for the new release
      Update copyright year
      Run make update
      Prepare for 1.1.1l release

Mohamed Akram (1):
      doc: fix enc -z option documentation

Nan Xiao (5):
      Fix BIO_new_ssl_connect() to not leak memory
      Fix typo in BIO_push.pod
      Remove unnecessary BIO_do_handshake()s
      Fix potential double free in sslapitest.c
      Fix typos in x509.pod

Niclas Rosenvik (1):
      Some compilers define __STDC_VERSION__ in c++

Nicola Tuveri (12):
      [github-ci] Sync ci.yml workflow with master
      [github-ci] Import windows.yml workflow from master
      [github-ci] Import cross-compiles.yml workflow from master
      [github-ci] Import run-checker workflows from master
      [github-ci] Import run-checker daily workflow from master
      [github-ci][cross-compiles.yml] Disable sparcv9
      [github-ci][ci.yml] Disable krb5 external tests
      [github-ci][ci.yml] Disable pyca external tests
      [github-ci][run-checker-ci.yml] Disable no-tls1_3 tests
      [github-ci][ci.yml] Disable memory sanitizer build
      [github-ci][run-checker-merge.yml] Disable ubsan build
      Revert "[github-ci][cross-compiles.yml] Disable sparcv9"

Oliver Mihatsch (1):
      Fix memory leak in i2d_ASN1_bio_stream

Patrick Steuer (2):
      s390x: cipher must set EVP_CIPH_ALWAYS_CALL_INIT flag
      Test EVP_CipherInit sequences and resets

Pauli (9):
      srp: fix double free,
      ts: fix double free on error path.
      engine: fix double free on error path.
      bn: procduce correct sign for result of BN_mod()
      ssl: do not choose auto DH groups that are weaker than the security level
      test: add test for auto DH security level meets the minimum
      pkcs12: check for zero length digest to avoid division by zero
      [github-ci] Add comment about our approach to GitHub Actions CI
      sparc: fix cross compile build

Richard Levitte (9):
      Don't remove $(TARFILE) when cleaning
      ASN1: Ensure that d2i_ASN1_OBJECT() frees the strings on ASN1_OBJECT reuse
      Clean away remaining Travis related files
      TEST: Check that i2d refuses to encode non-optional items with no content
      ASN.1: Refuse to encode to DER if non-optional items are missing
      Fix test/asn1_encode_test.c to not use ASN1_FBOOLEAN
      Fix test/asn1_encode_test.c to handle encoding/decoding failure
      make update (adds a new function code)
      Avoid empty lines in nmake rule bodies

Shane Lontis (2):
      Test that we don't have a memory leak in d2i_ASN1_OBJECT.
      s_client.pod: Fix grammar in NOTES section.

Theo Buehler (2):
      Avoid division by zero in hybrid point encoding
      Test oct2point for hybrid point encoding of (0, y)

Todd Short (3):
      Handle set_alpn_protos inputs better.
      Call SSLfatal when the generate_ticket_cb returns 0
      Fix potential double-free

Tomas Mraz (10):
      Test that EVP_PKEY_cmp() returns 1 when comparing a key to itself
      Correct the return value on match and mismatch for MAC pkeys
      Put init_ec_point_formats() inside #ifndef OPENSSL_NO_EC
      doc: Mention the update of der data pointers in d2i/i2d
      DSA/RSA_print(): Fix potential memory leak
      Revert "make update (adds a new function code)"
      Revert "Fix test/asn1_encode_test.c to handle encoding/decoding failure"
      Revert "Fix test/asn1_encode_test.c to not use ASN1_FBOOLEAN"
      Revert "ASN.1: Refuse to encode to DER if non-optional items are missing"
      Revert "TEST: Check that i2d refuses to encode non-optional items with no content"

Trev Larock (1):
      Modify ssl_handshake_hash to call SSLfatal

bonniegong (2):
      check i2d_ASN1_TYPE return value
      Check the return value of ASN1_STRING_length

luyahan (1):
      Add riscv64 target

yunh (1):
      enable getauxval on android 10

-----------------------------------------------------------------------


More information about the openssl-commits mailing list