BSD Ports

security/openssl 3.6.5 NetBSD

Secure Socket Layer and cryptographic library

System
NetBSD
Repository
pkgsrc
Maintainer
[email protected]
Last update
Commit
9c7acd2707
License
openssl
Categories
security
Package size
5631.7 KiB, 32433.6 KiB installed

Description

The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, full-featured, and Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well as a full-strength general purpose cryptography library. The project is managed by a worldwide community of volunteers that use the Internet to communicate, plan, and develop the OpenSSL toolkit and its related documentation.

This package contains major version 3 of OpenSSL.

In the other systems

SystemPortVersion
NetBSDsecurity/openssl3.6.5
FreeBSDsecurity/openssl3.5.9,1
DragonFlysecurity/openssl3.0.16,1
MidnightBSDsecurity/openssl3.5.9

Install

Binary package:

pkgin install openssl

From pkgsrc:

cd /usr/pkgsrc/security/openssl && make install clean

Dependencies

Commit history 4

DateCommitCreditsLog message
9c7acd2707 gutteridge openssl: minor spelling, grammar, style tweaks in comments
45a5775e98 adam openssl: updated to 3.6.5
OpenSSL 3.6.5 is a security patch release. The most severe CVE fixed in this release is High. This release incorporates the following bug fixes and mitigations: Fixed DTLS retransmissions of handshake messages from a stale buffer offset. (CVE-2026-84782) Fixed excessive memory allocation in relative CRLDP processing. (CVE-2026-35189) Fixed QUIC unvalidated amplification credit may be over-accounted. (CVE-2026-35191) Fixed potential CPU DoS via O(n^2) fragment reassembly in QUIC. (CVE-2026-42772) Fixed a timing side-channel in scalar multiplication for mon-NIST EC curves. (CVE-2026-54872) Fixed QUIC STREAM fragment metadata DoS. (CVE-2026-54873) Fixed non-constant-time SM2 scalar multiplication on ARM64 and RISC-V. (CVE-2026-54875) …
87c2e26620 wiz openssl: fix pkg-config rpath
For some reason there are two copies? and only one was fixed by pkgsrc, but the other one was installed. Fixes PR 60643. Bump PKGREVISION.
ab6d42c466 adam openssl: updated to 3.6.4
OpenSSL 3.6.4 is a security patch release. The most severe CVE fixed in this release is Moderate. This release incorporates the following bug fixes and mitigations: Fixed QUIC server being able to trigger double free when processing INITIAL packet. (CVE-2026-18798) Fixed heap buffer overflow in CMS key unwrapping. (CVE-2026-63072) Fixed invalid pointer dereference in CMP server via crafted protectionAlg. (CVE-2026-63076) Fixed unbounded memory growth in QUIC server incoming channel queue. (CVE-2026-14456) Fixed RPK server signature algorithm selection being able to dereference a missing certificate. (CVE-2026-14457) Fixed excessive memory use buffering DTLS records for a future epoch. (CVE-2026-54874) Fixed client-side memory leak in OCSP response checking. (CVE-2026-54876) …