what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 26 - 50 of 122

Files

OpenSSL Toolkit 1.1.1i

Posted Dec 8, 2020

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Fixed NULL pointer deref in the GENERAL_NAME_cmp function. Added support for Apple Silicon M1 Macs with the darwin64-arm64-cc target. A client-side call was changed. In 1.1.1h, an expired trusted (root) certificate was not anymore rejected when validating a certificate path. This check is restored in 1.1.1i.

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2020-1971

SHA-256 | e8be6a35fe41d10603c3cc635e93289ed00bf34b79671a3a4de64fcee00d5242

Download | Favorite | View

OpenSSL Toolkit 1.1.1h

Posted Sep 22, 2020

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Certificates with explicit curve parameters are now disallowed in verification chains if the X509_V_FLAG_X509_STRICT flag is used. A few other updates as well.

tags | tool, encryption, protocol

systems | unix

SHA-256 | 5c9ca8774bd7b03e5784f26ae9e9e6d749c9da2438545077e6b3d755a06595d9

Download | Favorite | View

OpenSSL Toolkit 1.1.1g

Posted Apr 21, 2020

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Fixed segmentation fault in SSL_check_chain().

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2020-1967

SHA-256 | ddb04774f1e32f0c49751e21b67216ac87852ceb056b75209af2443400636d46

Download | Favorite | View

OpenSSL Toolkit 1.1.1f

Posted Mar 31, 2020

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Reverted the change of EOF detection while reading in libssl to avoid regressions in applications depending on the current way of reporting the EOF. Revised BN_generate_prime_ex to not avoid factors 3..17863 in p-1 when primes for RSA keys are computed.

tags | tool, encryption, protocol

systems | unix

SHA-256 | 186c6bfe6ecfba7a5b48c47f8a1673d0f3b0e5ba2e25602dd23b629975da3f35

Download | Favorite | View

OpenSSL Toolkit 1.1.1e

Posted Mar 18, 2020

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: It now properly detects EOF while reading in libssl. Fixed SSL_get_servername() behaviour. Various other updates and bug fixes.

tags | tool, encryption, protocol

systems | unix

SHA-256 | 694f61ac11cb51c9bf73f54e771ff6022b0327a43bbdfa1b2f19de1662a6dcbe

Download | Favorite | View

OpenSSL Toolkit 1.1.1d

Posted Sep 11, 2019

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Fixed a fork protection issue. Added a bypass mitigation. Various other updates.

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2019-1547, CVE-2019-1549, CVE-2019-1552, CVE-2019-1563

SHA-256 | 1e3a91bc1f9dfce01af26026f856e064eab4c8ee0a8f457b5ae30b40b8b711f2

Download | Favorite | View

OpenSSL Toolkit 1.1.1c

Posted May 28, 2019

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Added build tests for C++. Enabled SHA3 pre-hashing for ECDSA and DSA. Various other updates.

tags | tool, encryption, protocol

systems | unix

SHA-256 | f6fb3079ad15076154eda9413fed42877d668e7069d9b87396d0804fdb3f4c90

Download | Favorite | View

OpenSSL Toolkit 1.1.1b

Posted Feb 28, 2019

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Added SCA hardening for modular field inversion in EC_GROUP through a new dedicated field_inv() pointer in EC_METHOD. Changed the info callback signals for the start and end of a post-handshake message exchange in TLSv1.3. Various other updates.

tags | tool, encryption, protocol

systems | unix

SHA-256 | 5c557b023230413dfb0756f3137a13e6d726838ccd1430888ad15bfb2b43ea4b

Download | Favorite | View

OpenSSL Toolkit 1.1.1a

Posted Nov 21, 2018

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Fixed a timing vulnerability in DSA signature generation and another in ECDSA signature generation. Added EVP_PKEY_ECDH_KDF_X9_63 and ecdh_KDF_X9_63() as replacements for the EVP_PKEY_ECDH_KDF_X9_62 KDF type and ECDH_KDF_X9_62(). Various other updates.

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2018-0734, CVE-2018-0735

SHA-256 | fc20130f8b7cbd2fb918b2f14e2f429e109c31ddd0fb38fc5d71d9ffed3f9f41

Download | Favorite | View

OpenSSL Toolkit 1.1.1

Posted Sep 11, 2018

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Added a new ClientHello callback. Added SM2 base algorithm support. Various other updates.

tags | tool, encryption, protocol

systems | unix

SHA-256 | 2836875a0f89c03d0fdf483941512613a50cfb421d6fd94b9f41d7279d586a3d

Download | Favorite | View

OpenSSL Toolkit 1.1.0i

Posted Aug 17, 2018

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Addressed a client denial of service due to a large DH parameter addressed. Cache timing vulnerability fixed. Various other updates and fixes.

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2018-0732, CVE-2018-0737

SHA-256 | ebbfc844a8c8cc0ea5dc10b86c9ce97f401837f3fa08c17b2cdadc118253cf99

Download | Favorite | View

OpenSSL Toolkit 1.1.0h

Posted Mar 29, 2018

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Addressed an issue where constructed ASN.1 types with a recursive definition could exceed the stack. Also address was an incorrect CRYPTO_memcmp on HP-UX PA-RISC amongst other issues.

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2018-0733, CVE-2018-0739

SHA-256 | 5835626cde9e99656585fc7aaa2302a73a7e1340bf8c14fd635a62c66802a517

Download | Favorite | View

OpenSSL Toolkit 1.0.2o

Posted Mar 29, 2018

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Addressed an issue where constructed ASN.1 types with a recursive definition could exceed the stack.

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2018-0739

SHA-256 | ec3f5c9714ba0fd45cb4e087301eb1336c317e0d20b575a125050470e8089e4d

Download | Favorite | View

OpenSSL Toolkit 1.0.2n

Posted Dec 9, 2017

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Read/write after SSL object in error state addressed. rsaz_1024_mul_avx2 overflow bug on x86_64 addressed. Various other issues address.

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2017-3737, CVE-2017-3738

SHA-256 | 370babb75f278c39e0c50e8c4e7493bc0f18db6867478341a832a982fd15a8fe

Download | Favorite | View

OpenSSL Toolkit 1.0.2m

Posted Nov 4, 2017

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: bn_sqrx8x_internal carry bug on x86_64 was addressed. A malformed X.509 IPAddressFamily out-of-bounds read was addressed.

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2017-3735, CVE-2017-3736

SHA-256 | 8c6ff15ec6b319b50788f42c7abc2890c08ba5a1cdcd3810eb9092deada37b0f

Download | Favorite | View

OpenSSL Toolkit 1.0.2l

Posted May 27, 2017

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Very minor update.

tags | tool, encryption, protocol

systems | unix

SHA-256 | ce07195b659e75f4e1db43552860070061f156a98bb37b672b101ba6e3ddf30c

Download | Favorite | View

OpenSSL Toolkit 1.0.2k

Posted Jan 26, 2017

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Bug fixes for an out-of-bounds read, a carry propagating bug, and multiple other issues.

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2016-7055, CVE-2017-3731, CVE-2017-3732

SHA-256 | 6b3977c61f2aedf0f96367dcfb5c6e578cf37e7b8d913b4ecb6643c3cb88d8c0

Download | Favorite | View

OpenSSL Toolkit 1.0.2j

Posted Sep 26, 2016

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0 but was omitted from OpenSSL 1.0.2i. As a result any attempt to use CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2016-7052

SHA-256 | e7aff292be21c259c6af26469c7a9b3ba26e9abaaffd325e3dccc9785256c431

Download | Favorite | View

OpenSSL Toolkit 1.0.2i

Posted Sep 22, 2016

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: A large amount of security issues have been addressed.

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2016-2177, CVE-2016-2178, CVE-2016-2179, CVE-2016-2180, CVE-2016-2181, CVE-2016-2182, CVE-2016-2183, CVE-2016-6302, CVE-2016-6303, CVE-2016-6304, CVE-2016-6306

SHA-256 | 9287487d11c9545b6efb287cdb70535d4e9b284dd10d51441d9b9963d000de6f

Download | Favorite | View

OpenSSL Toolkit 1.0.2h

Posted May 3, 2016

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Fixes to prevent padding oracle in AES-NI CBC MAC check. Fixed various overflows and other security issues.

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2013-0169, CVE-2016-2105, CVE-2016-2106, CVE-2016-2107, CVE-2016-2109, CVE-2016-2176

SHA-256 | 1d4007e53aad94a5b2002fe045ee7bb0b3d98f1a47f8b2bc851dcd1c74332919

Download | Favorite | View

OpenSSL Toolkit 1.0.2g

Posted Mar 1, 2016

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Disabled weak ciphers in SSLv3 and up in default builds of OpenSSL. Disabled SSLv2 default build, default negotiation and weak ciphers. Fixed a double-free in DSA code. Various other security issues addressed.

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2016-0702, CVE-2016-0705, CVE-2016-0797, CVE-2016-0798, CVE-2016-0799

SHA-256 | b784b1b3907ce39abf4098702dade6365522a253ad1552e267a9a0e89594aa33

Download | Favorite | View

OpenSSL Toolkit 1.0.2f

Posted Jan 29, 2016

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Multiple bug fixes.

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2016-0701

SHA-256 | 932b4ee4def2b434f85435d9e3e19ca8ba99ce9a065a61524b429a9d5e9b2e9c

Download | Favorite | View

OpenSSL Toolkit 1.0.2e

Posted Dec 3, 2015

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Fix applied to BN_mod_exp which may produce incorrect results on x86_64. Also addressed was a certificate verify crash with missing PSS parameter, an X509_ATTRIBUTE memory leak, and various other issues.

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2015-3193, CVE-2015-3194, CVE-2015-3195

SHA-256 | eee11def03647aa2267434a779608af6fca645023c9a194ddb82f14426835537

Download | Favorite | View

OpenSSL Toolkit 1.0.2d

Posted Jul 9, 2015

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Addressed certificate forgery vulnerability.

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2015-1793

SHA-256 | 671c36487785628a703374c652ad2cebea45fa920ae5681515df25d9f2c9a8c8

Download | Favorite | View

OpenSSL Toolkit 1.0.2c

Posted Jun 15, 2015

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Fix HMAC ABI incompatibility. The previous version introduced an ABI incompatibility in the handling of HMAC. The previous ABI has now been restored.

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2015-1788, CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792

SHA-256 | 0038ba37f35a6367c58f17a7a7f687953ef8ce4f9684bbdec63e62515ed36a83

Download | Favorite | View