From bb7135530511d687f6c508a00aa7199b042d3972 Mon Sep 17 00:00:00 2001 From: Huiyue Xu Date: Tue, 30 Jan 2024 21:23:58 +0800 Subject: [PATCH] Prepare for release of 1.1.1wb Changes between 1.1.1wa and 1.1.1wb [30 Jan 2023] *) Add NULL checks where ContentInfo data can be NULL Fix CVE-2024-0727 Signed-off-by: Huiyue Xu --- CHANGES | 6 ++++++ NEWS | 4 ++++ README | 2 +- include/openssl/opensslv.h | 4 ++-- 4 files changed, 13 insertions(+), 3 deletions(-) diff --git a/CHANGES b/CHANGES index cfacdac307..e3e9d0a857 100644 --- a/CHANGES +++ b/CHANGES @@ -7,6 +7,12 @@ https://github.com/openssl/openssl/commits/ and pick the appropriate release branch. + Changes between 1.1.1wa and 1.1.1wb [30 Jan 2023] + + *) Add NULL checks where ContentInfo data can be NULL + + Fix CVE-2024-0727 + Changes between 1.1.1w and 1.1.1wa [16 Nov 2023] *) Make DH_check_pub_key() and DH_generate_key() safer yet diff --git a/NEWS b/NEWS index 3af54bfed6..4085102281 100644 --- a/NEWS +++ b/NEWS @@ -5,6 +5,10 @@ This file gives a brief overview of the major changes between each OpenSSL release. For more details please read the CHANGES file. + Major changes between OpenSSL 1.1.1w and OpenSSL 1.1.1wb [30 Jan 2024] + + o Add NULL checks where ContentInfo data can be NULL (CVE-2024-0727) + Major changes between OpenSSL 1.1.1w and OpenSSL 1.1.1wa [16 Nov 2023] o Make DH_check_pub_key() and DH_generate_key() safer yet (CVE-2023-5678) diff --git a/README b/README index d205a93f6d..403b909737 100644 --- a/README +++ b/README @@ -1,5 +1,5 @@ - OpenSSL 1.1.1wa + OpenSSL 1.1.1wb 30 Jan 2024 Copyright (c) 1998-2023 The OpenSSL Project Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson diff --git a/include/openssl/opensslv.h b/include/openssl/opensslv.h index e9fcf7e249..06adccdeba 100644 --- a/include/openssl/opensslv.h +++ b/include/openssl/opensslv.h @@ -39,8 +39,8 @@ extern "C" { * (Prior to 0.9.5a beta1, a different scheme was used: MMNNFFRBB for * major minor fix final patch/beta) */ -# define OPENSSL_VERSION_NUMBER 0x10101810L -# define OPENSSL_VERSION_TEXT "OpenSSL 1.1.1wa 16 Nov 2023" +# define OPENSSL_VERSION_NUMBER 0x1010182fL +# define OPENSSL_VERSION_TEXT "OpenSSL 1.1.1wb 30 Jan 2024" /*- * The macros below are to be used for shared library (.so, .dll, ...) -- Gitee