Skip to content

Commit

Permalink
update openssl to 1.1.1g containing
Browse files Browse the repository at this point in the history
Changes between 1.1.1f and 1.1.1g [21 Apr 2020]

  *) Fixed segmentation fault in SSL_check_chain()
     Server or client applications that call the SSL_check_chain() function
     during or after a TLS 1.3 handshake may crash due to a NULL pointer
     dereference as a result of incorrect handling of the
     "signature_algorithms_cert" TLS extension. The crash occurs if an invalid
     or unrecognised signature algorithm is received from the peer. This could
     be exploited by a malicious peer in a Denial of Service attack.
     (CVE-2020-1967)
     [Benjamin Kaduk]

  *) Added AES consttime code for no-asm configurations
     an optional constant time support for AES was added
     when building openssl for no-asm.
     Enable with: ./config no-asm -DOPENSSL_AES_CONST_TIME
     Disable with: ./config no-asm -DOPENSSL_NO_AES_CONST_TIME
     At this time this feature is by default disabled.
     It will be enabled by default in 3.0.
     [Bernd Edlinger]
  • Loading branch information
chcg committed Apr 23, 2020
1 parent 6805074 commit cd3c802
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions build_3rdparty.py
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,8 @@
DEPENDENT_LIBS = {
'openssl': {
'order' : 1,
'url' : 'https://www.openssl.org/source/openssl-1.1.1f.tar.gz',
'sha1' : '238e001ea1fbf19ede43e36209c37c1a636bb51f',
'url' : 'https://www.openssl.org/source/openssl-1.1.1g.tar.gz',
'sha1' : 'b213a293f2127ec3e323fb3cfc0c9807664fd997',
'target': {
'mingw-w64': {
'result': ['include/openssl/ssl.h', 'lib/libssl.a', 'lib/libcrypto.a'],
Expand Down

0 comments on commit cd3c802

Please sign in to comment.