BSD PortsVulnerable: version 3.0.22 is affected by 20 known vulnerabilities. See below.
security/openssl30 3.0.22 DragonFly
TLSv1.3 capable SSL and crypto library
- System
- DragonFly
- Repository
- DPorts
- Maintainer
- [email protected] (as in FreeBSD)
- License
- APACHE20
- Categories
- devel, security
- Package size
- 5613.8 KiB, 21339.0 KiB installed
Description
The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, full-featured, and Open Source toolkit implementing the Secure Sockets Layer (SSL v3) and Transport Layer Security (TLS v1, v1.1, v1.2, v1.3) protocols with full-strength cryptography world-wide. The project is managed by a worldwide community of volunteers that use the Internet to communicate, plan, and develop the OpenSSL tookit and its related documentation.
OpenSSL is based on the excellent SSLeay library developed by Eric A. Young and Tim J. Hudson. The OpenSSL toolkit is licensed under an Apache-style licence, which basically means that you are free to get and use it for commercial and non-commercial purposes subject to some simple license conditions.
In the other systems
The newest version among them is 3.0.22, as upstream numbers it.
| System | Port | Version | Vulnerabilities | Status | Maintainer | Last update |
|---|---|---|---|---|---|---|
| DragonFly | security/openssl30 | 3.0.22 newest | 20 known | - | [email protected] | - |
| FreeBSD | security/openssl30 | 3.0.22 newest | 1 known | Deprecated | [email protected] | 2026-10-04 |
| HardenedBSD | security/openssl30 | 3.0.22 newest | no data | - | [email protected] | - |
| GhostBSD | security/openssl30 | 3.0.22 newest | no data | - | [email protected] | - |
| OPNsense | security/openssl by name | 3.0.21,1 behind since 2026-09-30 | no data | - | [email protected] | - |
Version history 1
- 3.0.22
Upstream's version as each commit to the port's Makefile set it, or as this site first saw it in the system's packages; the tree's own revisions are not versions here.
Install
Binary package:
pkg install opensslFrom DPorts:
cd /usr/dports/security/openssl30 && make install cleanDependencies
No port depends on this one.
Configuration
No options to configure.
- Service scripts
- none
Message after installing
This port was created for the remainder of the lifespan of FreeBSD 14. OpenSSL 3.0 has known vulnerabilities, all users of the 3.0 port are encouraged to update to OpenSSL 3.5 from security/openssl This port was created for the remainder of the lifespan of FreeBSD 14. OpenSSL 3.0 has known vulnerabilities, all users of the 3.0 port are encouraged to update to OpenSSL 3.5 from security/openssl ===> NOTICE: This port is deprecated; you may wish to reconsider installing it: Please use security/openssl (LTS). It is scheduled to be removed on or after 2028-11-30.
Known vulnerabilities 20
- — OpenSSL -- Multiple vulnerabilities
- — OpenSSL -- Multiple vulnerabilities
- — OpenSSL -- Multiple vulnerabilities
- — OpenSSL -- Multiple vulnerabilities
- — OpenSSL -- Multiple vulnerabilities
- — OpenSSL -- multiple vulnerabilities
- — OpenSSL -- OOB memory access vulnerability
- — OpenSSL -- Multiple vulnerabilities
- — OpenSSL -- Use after free vulnerability
- — OpenSSL -- Denial of Service vulnerability
- — OpenSSL -- Unbounded memory growth with session handling in TLSv1.3
- — OpenSSL -- Multiple vulnerabilities
- — OpenSSL -- Vector register corruption on PowerPC
- — OpenSSL -- DoS in DH generation
- — OpenSSL -- potential loss of confidentiality
- — OpenSSL -- Excessive time spent checking DH q parameter value
- — OpenSSL -- Possible DoS translating ASN.1 identifiers
- — OpenSSL -- Multiple vulnerabilities
- — OpenSSL -- AES OCB fails to encrypt some bytes
- — OpenSSL -- Command injection vulnerability