Development October 2022

development@lists.ipfire.org

13 participants
36 discussions

IPFire Blog Error 500
by Adolf Belka 18 Oct '22

18 Oct '22

Hi Michael and Peter, FYI, in case you haven't noticed it yet, the IPFire Blog site is giving an Error 500 oops, something went wrong message. Regards, Adolf. -- Sent from my laptop

2 1

Heads up: Various Linux Kernel WiFi security issues (RCE/DOS) disclosed
by Peter Müller 17 Oct '22

17 Oct '22

Hello development folks, in case you have not noticed already, there are reports on a series of memory-related security vulnerabilities in Linux' WiFi component, some with RCE potential, others "just" allowing an adversary in WiFi proximity to DoS the system. Please find more information here: https://www.openwall.com/lists/oss-security/2022/10/13/5 IPFire is vulnerable to all of these except for CVE-2022-42722, which requires a P2P device to be set up on the victim system as a precondition for successful exploitation. Patches are available (so is PoC exploit code), and have been merged into Linux 5.15.74, released earlier today: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.74 As for ready-to-use exploits, I have not seen anything arriving on exploit DB & friends, but I guess that is a matter of time. Given the vulnerabilities' characteristics, however, exploitation will likely be more of a wardiving style. While there is no reason to panic, I would like to ship these fixes rather soon. Briefly discussed this with Michael on the phone yesterday, and we both agree not to update the kernel that is currently in Core Update 171 (which is anticipated to be released next week). However, I was thinking about cherry-picking the relevant (14) commits from kernel 5.15.74, which would greatly buy us time for Core Update 172, have our users protected, and is less likely to cause collateral damage than shipping vanilla 5.15.74. Should there be no vetoes on this until Tuesday morning, I would go for this option. As always, any comments/critics/questions are greatly appreciated. All the best, Peter Müller

2 1

[PATCH] strongSwan: Update to 5.9.8
by Peter Müller 17 Oct '22

17 Oct '22

Please refer to https://github.com/strongswan/strongswan/releases/tag/5.9.8 for the release announcement of this version. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- config/rootfiles/common/strongswan | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/common/strongswan b/config/rootfiles/common/strongswan index dd0fd233a..22adf24b4 100644 --- a/config/rootfiles/common/strongswan +++ b/config/rootfiles/common/strongswan @@ -70,7 +70,6 @@ etc/strongswan.d/charon/xauth-generic.conf etc/strongswan.d/charon/xauth-noauth.conf etc/strongswan.d/charon/xcbc.conf etc/strongswan.d/pki.conf -etc/strongswan.d/scepclient.conf etc/strongswan.d/starter.conf etc/strongswan.d/swanctl.conf #etc/swanctl @@ -170,7 +169,6 @@ usr/lib/ipsec/plugins/libstrongswan-xcbc.so #usr/libexec/ipsec usr/libexec/ipsec/_updown usr/libexec/ipsec/charon -usr/libexec/ipsec/scepclient usr/libexec/ipsec/starter usr/libexec/ipsec/stroke usr/libexec/ipsec/xfrmi @@ -178,6 +176,8 @@ usr/sbin/ipsec usr/sbin/swanctl #usr/share/man/man1/pki---acert.1 #usr/share/man/man1/pki---dn.1 +#usr/share/man/man1/pki---est.1 +#usr/share/man/man1/pki---estca.1 #usr/share/man/man1/pki---gen.1 #usr/share/man/man1/pki---issue.1 #usr/share/man/man1/pki---keyid.1 @@ -185,6 +185,8 @@ usr/sbin/swanctl #usr/share/man/man1/pki---print.1 #usr/share/man/man1/pki---pub.1 #usr/share/man/man1/pki---req.1 +#usr/share/man/man1/pki---scep.1 +#usr/share/man/man1/pki---scepca.1 #usr/share/man/man1/pki---self.1 #usr/share/man/man1/pki---signcrl.1 #usr/share/man/man1/pki---verify.1 @@ -194,7 +196,6 @@ usr/sbin/swanctl #usr/share/man/man5/strongswan.conf.5 #usr/share/man/man5/swanctl.conf.5 #usr/share/man/man8/ipsec.8 -#usr/share/man/man8/scepclient.8 #usr/share/man/man8/swanctl.8 #usr/share/strongswan #usr/share/strongswan/templates @@ -260,6 +261,5 @@ usr/sbin/swanctl #usr/share/strongswan/templates/config/strongswan.d/charon-logging.conf #usr/share/strongswan/templates/config/strongswan.d/charon.conf #usr/share/strongswan/templates/config/strongswan.d/pki.conf -#usr/share/strongswan/templates/config/strongswan.d/scepclient.conf #usr/share/strongswan/templates/config/strongswan.d/starter.conf #usr/share/strongswan/templates/config/strongswan.d/swanctl.conf -- 2.35.3

2 1

[PATCH] libloc: Update to 0.9.15
by Peter Müller 17 Oct '22

17 Oct '22

Please refer to https://lists.ipfire.org/pipermail/location/2022-September/000579.html for the release announcement of this version. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/libloc | 18 +++++++--- ...oc-0.9.15-Makefile-reset-Python-path.patch | 22 ++++++++++++ ...nerating-file-names-for-ipset-output.patch | 36 +++++++++++++++++++ 3 files changed, 71 insertions(+), 5 deletions(-) create mode 100644 src/patches/libloc-0.9.15-Makefile-reset-Python-path.patch create mode 100644 src/patches/libloc-0.9.15-export-Fix-generating-file-names-for-ipset-output.patch diff --git a/lfs/libloc b/lfs/libloc index 8fea42315..579982f11 100644 --- a/lfs/libloc +++ b/lfs/libloc @@ -24,8 +24,8 @@ include Config -VER = 0.9.13 -DB_DATE = 2022-08-04 +VER = 0.9.15 +DB_DATE = 2022-10-15 THISAPP = libloc-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -43,8 +43,8 @@ objects = $(DL_FILE) \ $(DL_FILE) = https://source.ipfire.org/releases/libloc/$(DL_FILE) location-$(DB_DATE).db.xz = https://location.ipfire.org/databases/1/archive/location-$(DB_DATE).db.xz -$(DL_FILE)_BLAKE2 = 5fccd6f0564899499939c63af8975f20b1f7d5267a8cf6c15e14ab377b9d5c008ae5e154c804ac6a1106471aaeebac97dc4ebe6b70fc1e59f416fe2cc02c52a7 -location-$(DB_DATE).db.xz_BLAKE2 = 11b6e9735c911f3dd548fc1759f72ae983eacbe6262f211a4a0080b5b13e3d9704d5080dc9ed0cee289b9ca2643d2adbf266d8a8a25f39129318c3e370a7c9a9 +$(DL_FILE)_BLAKE2 = f3db0fc75ac930805f0df2892b00ffb8f31123a5f28a8cade78f8f1614c0cd806ea365810c5192720d067531b199c342a2c6039f3cd5370c4c9efeded4e31857 +location-$(DB_DATE).db.xz_BLAKE2 = b34b554923a8291ea60ec34c98609da1d71aab66bc1aa2f973ea2e6fd14b6f750559d1e9365df4dd3f707a8dce373aba5f79381c61a4953f272b3557be88af2c install : $(TARGET) @@ -77,12 +77,20 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar xvf $(DIR_DL)/$(DL_FILE) + + # https://lists.ipfire.org/pipermail/location/2022-October/000596.html + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/libloc-0.9.15-Makefile-reset-Python-path.patch + + # https://bugzilla.ipfire.org/show_bug.cgi?id=12944 + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/libloc-0.9.15-export-Fix-generating-file-names-for-ipset-output.patch + cd $(DIR_APP) && ./autogen.sh cd $(DIR_APP) && ./configure \ --prefix=/usr \ --sysconfdir=/etc \ --localstatedir=/var \ - --disable-man-pages + --disable-man-pages \ + --with-database-path=/var/lib/location/database.db cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install diff --git a/src/patches/libloc-0.9.15-Makefile-reset-Python-path.patch b/src/patches/libloc-0.9.15-Makefile-reset-Python-path.patch new file mode 100644 index 000000000..2d2a99887 --- /dev/null +++ b/src/patches/libloc-0.9.15-Makefile-reset-Python-path.patch @@ -0,0 +1,22 @@ +commit bed4777fc99494854335a90c5a6e7fc2e30edf4d +Author: Michael Tremer <michael.tremer(a)ipfire.org> +Date: Sat Oct 1 11:56:31 2022 +0000 + + Makefile: Reset Python path + + Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> + +diff --git a/Makefile.am b/Makefile.am +index 81bd992..ec737d0 100644 +--- a/Makefile.am ++++ b/Makefile.am +@@ -56,8 +56,7 @@ databasedir = $(localstatedir)/lib/location + pkgconfigdir = $(libdir)/pkgconfig + + # Overwrite Python path +-#pkgpythondir = $(pythondir)/location +-pkgpythondir = /usr/lib/python3/dist-packages/location ++pkgpythondir = $(pythondir)/location + + %: %.in Makefile + $(SED_PROCESS) diff --git a/src/patches/libloc-0.9.15-export-Fix-generating-file-names-for-ipset-output.patch b/src/patches/libloc-0.9.15-export-Fix-generating-file-names-for-ipset-output.patch new file mode 100644 index 000000000..19fe42f12 --- /dev/null +++ b/src/patches/libloc-0.9.15-export-Fix-generating-file-names-for-ipset-output.patch @@ -0,0 +1,36 @@ +commit cd214f295797e5cc8dbc296753924863b33ab8bd +Author: Michael Tremer <michael.tremer(a)ipfire.org> +Date: Tue Oct 4 08:47:03 2022 +0000 + + export: Fix generating file names for ipset output + + The tag that is being used in the filename was set after creating the + filename. The order has now been fixed and the export works fine for me. + + Fixes: #12944 + Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> + +diff --git a/src/python/location/export.py b/src/python/location/export.py +index f5ed37f..3f58498 100644 +--- a/src/python/location/export.py ++++ b/src/python/location/export.py +@@ -48,6 +48,9 @@ class OutputWriter(object): + self.family = family + self.directory = directory + ++ # Tag ++ self.tag = self._make_tag() ++ + # Open output file + if f: + self.f = f +@@ -58,9 +61,6 @@ class OutputWriter(object): + else: + self.f = io.StringIO() + +- # Tag +- self.tag = self._make_tag() +- + # Call any custom initialization + self.init() + -- 2.35.3

2 1

[PATCH] tzdata: Update to 2022e
by Peter Müller 17 Oct '22

17 Oct '22

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- config/rootfiles/common/tzdata | 3 +++ lfs/tzdata | 6 +++--- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/tzdata b/config/rootfiles/common/tzdata index f6903a057..b64e19681 100644 --- a/config/rootfiles/common/tzdata +++ b/config/rootfiles/common/tzdata @@ -465,6 +465,7 @@ usr/share/zoneinfo #usr/share/zoneinfo/Europe/Kaliningrad #usr/share/zoneinfo/Europe/Kiev #usr/share/zoneinfo/Europe/Kirov +#usr/share/zoneinfo/Europe/Kyiv #usr/share/zoneinfo/Europe/Lisbon #usr/share/zoneinfo/Europe/Ljubljana #usr/share/zoneinfo/Europe/London @@ -1082,6 +1083,7 @@ usr/share/zoneinfo #usr/share/zoneinfo/posix/Europe/Kaliningrad #usr/share/zoneinfo/posix/Europe/Kiev #usr/share/zoneinfo/posix/Europe/Kirov +#usr/share/zoneinfo/posix/Europe/Kyiv #usr/share/zoneinfo/posix/Europe/Lisbon #usr/share/zoneinfo/posix/Europe/Ljubljana #usr/share/zoneinfo/posix/Europe/London @@ -1699,6 +1701,7 @@ usr/share/zoneinfo #usr/share/zoneinfo/right/Europe/Kaliningrad #usr/share/zoneinfo/right/Europe/Kiev #usr/share/zoneinfo/right/Europe/Kirov +#usr/share/zoneinfo/right/Europe/Kyiv #usr/share/zoneinfo/right/Europe/Lisbon #usr/share/zoneinfo/right/Europe/Ljubljana #usr/share/zoneinfo/right/Europe/London diff --git a/lfs/tzdata b/lfs/tzdata index 34e7b9fd1..26500bba2 100644 --- a/lfs/tzdata +++ b/lfs/tzdata @@ -24,7 +24,7 @@ include Config -VER = 2022a +VER = 2022e TZDATA_VER = $(VER) TZCODE_VER = $(VER) @@ -45,8 +45,8 @@ objects = tzdata$(TZDATA_VER).tar.gz tzcode$(TZCODE_VER).tar.gz tzdata$(TZDATA_VER).tar.gz = $(DL_FROM)/tzdata$(TZDATA_VER).tar.gz tzcode$(TZCODE_VER).tar.gz = $(DL_FROM)/tzcode$(TZCODE_VER).tar.gz -tzdata$(TZDATA_VER).tar.gz_BLAKE2 = 0af5b785a6f5d871b017237ad58d3d9bedd0de38cf18ac51b32cd8df9811215af7af913d8cd3966de695ce65df3f49f52e239196e93b953094763814cc56ecd0 -tzcode$(TZCODE_VER).tar.gz_BLAKE2 = f9b3bb5eedc51896c2a1dd77fe8118518c8a1f35152325fa6c4163e11dd34aeb0c88b16b17a27ad022feb2f6818996ec0e40e06a7e1edd454187f586c3739070 +tzdata$(TZDATA_VER).tar.gz_BLAKE2 = 0c1aa99ac8c8f1a7a10602132da1e61921053ff7ed87449be73c45d23440457f28a2abe4dffd9775c4764e294dd9f92d15d3d401caf07a9d6d046fa27c4148f2 +tzcode$(TZCODE_VER).tar.gz_BLAKE2 = 874dca6d7f347276a87a055853617c8943b3b297fd89c80a3e8d6318c81df15af88f8c58bc05d5088359c30aba0d496089df4835f888c3f76cb0ecf6cd231d3a install : $(TARGET) -- 2.35.3

2 1

[PATCH] OpenSSH: Update to 9.1p1
by Peter Müller 17 Oct '22

17 Oct '22

Please refer to https://www.openssh.com/releasenotes.html#9.1 for the release announcement of this version. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/openssh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/openssh b/lfs/openssh index 302ae6041..452676b70 100644 --- a/lfs/openssh +++ b/lfs/openssh @@ -24,7 +24,7 @@ include Config -VER = 9.0p1 +VER = 9.1p1 THISAPP = openssh-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 49724a400951964d659d136908657940f79e150056728cc4dadf8ff8652a832f7fd46eebb47b15085e57fca4b00c77d1ec4dd1b056ea2bbcee89f54a121ed5e2 +$(DL_FILE)_BLAKE2 = 287b6b1cc4858b27af88f4a4674670afff1fb5b99461892083393c53ef3747c5a0fcd90cba95d2c27465a919e00f7f42732c93af4f306665ba0393bbb7a534f5 install : $(TARGET) -- 2.35.3

2 1

[PATCH] unbound: Update to 1.17.0
by Matthias Fischer 17 Oct '22

17 Oct '22

For details see: https://nlnetlabs.nl/projects/unbound/download/#unbound-1-17-0 "Features Merge #753: ACL per interface. (New interface-* configuration options). Merge #760: PROXYv2 downstream support. (New proxy-protocol-port configuration option). Bug Fixes Fix #728: alloc_reg_obtain() core dump. Stop double alloc_reg_release when serviced_create fails. Fix edns subnet so that scope 0 answers only match sourcemask 0 queries for answers from cache if from a query with sourcemask 0. Fix unittest for edns subnet change. Merge #730 from luisdallos: Fix startup failure on Windows 8.1 due to unsupported IPV6_USER_MTU socket option being set. Fix ratelimit inconsistency, for ip-ratelimits the value is the amount allowed, like for ratelimits. Fix #734 [FR] enable unbound-checkconf to detect more (basic) errors. Fix to log accept error ENFILE and EMFILE errno, but slowly, once per 10 seconds. Also log accept failures when no slow down is used. Fix to avoid process wide fcntl calls mixed with nonblocking operations after a blocked write. Patch from Vadim Fedorenko that adds MSG_DONTWAIT to receive operations, so that instruction reordering does not cause mistakenly blocking socket operations. Fix to wait for blocked write on UDP sockets, with a timeout if it takes too long the packet is dropped. Fix for wait for udp send to stop when packet is successfully sent. Fix #741: systemd socket activation fails on IPv6. Fix to update config tests to fix checking if nonblocking sockets work on OpenBSD. Slow down log frequency of write wait failures. Fix to set out of file descriptor warning to operational verbosity. Fix to log a verbose message at operational notice level if a thread is not responding, to stats requests. It is logged with thread identifiers. Remove include that was there for debug purposes. Fix to check pthread_t size after pthread has been detected. Convert tdir tests to use the new skip_test functionality. Remove unused testcode/mini_tpkg.sh file. Better output for skipped tdir tests. Fix doxygen warning in respip.h. Fix to remove erroneous TC flag from TCP upstream. Fix test tdir skip report printout. Fix windows compile, the identifier interface is defined in headers. Fix to close errno block in comm_point_tcp_handle_read outside of ifdef. Fix static analysis report to remove dead code from the rpz_callback_from_iterator_module function. Fix to clean up after the acl_interface unit test. Merge #764: Leniency for target discovery when under load (for NRDelegation changes). Use DEBUG_TDIR from environment in mini_tdir.sh for debugging. Fix string comparison in mini_tdir.sh. Make ede.tdir test more predictable by using static data. Fix checkconf test for dnscrypt and proxy port. Fix dnscrypt compile for proxy protocol code changes. Fix to stop responses with TC flag from resulting in partial responses. It retries to fetch the data elsewhere, or fails the query and in depth fix removes the TC flag from the cached item. Fix proxy length debug output printout typecasts. Fix to stop possible loops in the tcp reuse code (write_wait list and tcp_wait list). Based on analysis and patch from Prad Seniappan and Karthik Umashankar. Fix PROXYv2 header read for TCP connections when no proxied addresses are provided." Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/rootfiles/common/unbound | 2 +- lfs/unbound | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbound index 7af787f29..26ce13c3f 100644 --- a/config/rootfiles/common/unbound +++ b/config/rootfiles/common/unbound @@ -11,7 +11,7 @@ etc/unbound/unbound.conf #usr/lib/libunbound.la #usr/lib/libunbound.so usr/lib/libunbound.so.8 -usr/lib/libunbound.so.8.1.19 +usr/lib/libunbound.so.8.1.20 #usr/lib/pkgconfig/libunbound.pc usr/sbin/unbound usr/sbin/unbound-anchor diff --git a/lfs/unbound b/lfs/unbound index 636fe8bf9..3852c2e6a 100644 --- a/lfs/unbound +++ b/lfs/unbound @@ -24,7 +24,7 @@ include Config -VER = 1.16.3 +VER = 1.17.0 THISAPP = unbound-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = b97deade78ab903363e06ff9d71b9895c754378ec276bb17556de62c48a88af5fbabd26f97fb47313d1e631fe75dee245aa38fbf42a865ac3e764882a1124a51 +$(DL_FILE)_BLAKE2 = 611c1b96ff84e6dd8f7a592135cc17f416cd810d0f35d27c8cedd56af069badd8dca112cc5927a1fe50ec3335c377b6bd6fc4e1a6d63a332a90d676e3c23dcef install : $(TARGET) -- 2.34.1

2 1

[PATCH] openssl: Update to version 1.1.1r
by Adolf Belka 14 Oct '22

14 Oct '22

- Update version from 1.1.1q to 1.1.1r - Update of rootfile not required - Changelog Changes between 1.1.1q and 1.1.1r [11 Oct 2022] *) Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT bn_ops flag. This was causing heap corruption on that platform. *) Fixed a strict aliasing problem in bn_nist. Clang-14 optimisation was causing incorrect results in some cases as a result. *) Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to report correct results in some cases *) Fixed a regression introduced in 1.1.1o for re-signing certificates with different key sizes *) Added the loongarch64 target *) Fixed a DRBG seed propagation thread safety issue *) Fixed a memory leak in tls13_generate_secret *) Fixed reported performance degradation on aarch64. Restored the implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit lane assignment in CTR mode") for 64bit targets only, since it is reportedly 2-17% slower and the silicon errata only affects 32bit targets. The new algorithm is still used for 32 bit targets. *) Added a missing header for memcmp that caused compilation failure on some platforms Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/openssl | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/openssl b/lfs/openssl index 28a92a6b3..cb249b30c 100644 --- a/lfs/openssl +++ b/lfs/openssl @@ -24,7 +24,7 @@ include Config -VER = 1.1.1q +VER = 1.1.1r THISAPP = openssl-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -74,7 +74,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = fc8fd6a62dc291d0bda328a051e253175fb04442cc4b8f45d67c3a5027748a0fc5fb372d0483bc9024ae0bff119c4fac8f1e982a182612427696d6d09f5935f5 +$(DL_FILE)_BLAKE2 = ae1f56718d6a9400e9670f1ad1db2bc15bfbefc4fb114c7920c95a193285984d46cb28fe8dfbfa732f7755fb7810b51412f6e23a592d5769af9925026aa912d9 install : $(TARGET) -- 2.38.0

2 1

abuseipdb IP Blocklist
by Chris Multari 12 Oct '22

12 Oct '22

IPFire Devs - The IP Blocklist feature has been absolutely great. Has been any consideration given to adding something like the abuseipdb.com blocklist? The list does require an API key and will return a different amount of IPs depending on your subscription level/account config, but bad actors are picked up quickly. Thanks! Chris

2 2

Fwd: OpenSSL version 1.1.1r published
by Michael Tremer 12 Oct '22

12 Oct '22

Who is up for taking this one? > Begin forwarded message: > > From: Matt Caswell <matt(a)openssl.org> > Subject: OpenSSL version 1.1.1r published > Date: 11 October 2022 at 15:38:08 BST > To: openssl-project(a)openssl.org, openssl-users(a)openssl.org, openssl-announce(a)openssl.org > Reply-To: openssl-users(a)openssl.org, openssl(a)openssl.org > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > > OpenSSL version 1.1.1r released > =============================== > > OpenSSL - The Open Source toolkit for SSL/TLS > https://www.openssl.org/ > > The OpenSSL project team is pleased to announce the release of > version 1.1.1r of our open source toolkit for SSL/TLS. For details > of changes and known issues see the release notes at: > > https://www.openssl.org/news/openssl-1.1.1-notes.html > > OpenSSL 1.1.1r is available for download via HTTP and FTP from the > following master locations (you can find the various FTP mirrors under > https://www.openssl.org/source/mirror.html): > > * https://www.openssl.org/source/ > * ftp://ftp.openssl.org/source/ > > The distribution file name is: > > o openssl-1.1.1r.tar.gz > Size: 9868506 > SHA1 checksum: 1a7d07ebc91a4e834be3db861453a79b0fe8d259 > SHA256 checksum: e389352ae3d5ae4d38597bf8a54f1dcb6fb3c8b50f4fe58a94bb1bf7f85d82a0 > > The checksums were calculated using the following commands: > > openssl sha1 openssl-1.1.1r.tar.gz > openssl sha256 openssl-1.1.1r.tar.gz > > Yours, > > The OpenSSL Project Team. > > -----BEGIN PGP SIGNATURE----- > > iQEzBAEBCAAdFiEEhlersmDwVrHlGQg52cTSbQ5gRJEFAmNFZYwACgkQ2cTSbQ5g > RJGuSgf9FDZQeKdowwxbXRamGvcoQflKsRypla/nMBOEyWpR6zS2HnbYtlcNxlfg > 2+cilT/KRK5BQ/egMcCqXJ8bpQRcdbh9NixUdN3z9qhedp4NTwK51X12s1EdUZOp > 4LCn31IDRYvYqY55ufvgLz6g8EC3eZADM9Ph8H/rawyGN8ieM8SVrzSxd/4RNcov > iVqX4ECejMRW1/s3iZmkBhMDUw6HDUc/8Wbbq1Dychr65L8l3r7k58MSN1b/ZUyQ > u8Vsjt3UZoJ9WE5uP604j+LNCiU9kODWGrMuCl2ElSyLIPqU4iH1b/ckHxThfYGG > fi7r97ZvDrFvX7f2PLYODtwTqvSzrQ== > =p2qv > -----END PGP SIGNATURE-----

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development October 2022