openssl 发行版 - Gitee.com

openssl-3.3.2

2024-09-25 20:08

## 更新内容
* Prepare for release of 3.3.2
* make update
* Copyright year updates
* Add CVE-2024-5535 to CHANGES and NEWS
* Updated CHANGES and NEWS for CVE-2024-6119 fix
* Avoid type errors in EAI-related name check logic.
* endecode_test.c: Fix !fips v3.0.0 check
* exporters for pkg-config: align with the changes for CMake
* endecode_test.c: Avoid running the SM2 tests with 3.0.0 FIPS provider
* Check for excess data in CertificateVerify
* doc: Document properties param for Argon2 KDF
* Fix decoder error on SM2 private key
* fix: for exporters to work for build config, there may be two include dirs
* fix: exporters/cmake/OpenSSLConfig.cmake.in to work for build config
* FIPS: Change fips tests to use SHA2 for corruption test.
* Fix error handling in OBJ_add_object
* apps: add missing entry to tls extension label list
* Fix '--strict-warnings' build breakage
* test/provider_test.c: Add OSSL_PROVIDER_unload() to avoid memory leak
* test/provider_fallback_test.c: Add OSSL_PROVIDER_unload() to avoid memory leak
* Link to the place where signature options are defined
* Explicitly include e_os.h for close()
* test: add a default greeting to avoid printing a null pointer.
* RAND_write_file(): Avoid potential file descriptor leak
* Fix unpredictible refcount handling of d2i functions
* Extend test case for reused PEM_ASN1_read_bio
* apps/cms.c, apps/smime.c: Fix -crlfeol help messages
* Fix SSL_CTX_set1_groups documentation on preference orders
* Update krb5 to latest master to pick up CVE fixes
* test: add FIPS provider version checks for 3.4 compatibility
* limit bignums to 128 bytes
* Update BN_add.pod documentation so it is consistent with header declarations
* rsa_pss_compute_saltlen(): Avoid integer overflows and check MD and RSA sizes
* do_print_ex(): Avoid possible integer overflow
* Fix typos found by codespell in openssl-3.3 doc
* Use parent directory instead of index.html
* Update links in CONTRIBUTING.md
* Fix some small typos
* Do not implicitly start connection with SSL_handle_events() or SSL_poll()
* Return infinity time from SSL_get_event_timeout when the connection is…
* Do not falsely start the connection through SSL_pending()/_has_pending()
* fix: util/mkinstallvars.pl mistreated LDLIBS on Unix (and Windows)
* Free fetched digest in show_digests
* evp_get_digest/cipherbyname_ex(): Try to fetch if not found
* Avoid leaking *ba_ret on reconnections
* Update X509V3_get_d2i.pod returned pointer needs to be freed
* i2d_name_canon(): Check overflow in len accumulation
* gitignore: add .DS_Store
* Allow short reads in asn1_d2i_read_bio()
* Improve clarity and readability of password input documentation

**完整的更新日志**: https://gitee.com/Snowdreams01/openssl/compare/openssl-3.0.14...openssl-3.3.2

最后提交信息为： Prepare for release of 3.3.2