From nobody Thu Jan 11 12:28:29 2024 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4T9kV61Jlwz55c2D; Thu, 11 Jan 2024 12:28:30 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4T9kV60ZcGz43bq; Thu, 11 Jan 2024 12:28:30 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1704976110; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=ZAzSp5F6iN9thvouYWwHrD0dAhlUVfpGJ7GLC8QQRn4=; b=aMHDYYGPr5NUsBNgGpCSrok898h9Ja08Z49m96rWdtorI/7W0dG8tw9PzGqeamaxrlkpcT wiFTv/WHvP6H1fCMkAp94qcmZjmNgjcCCYLmd3nGa3LoT42QW9Q4mh+171Rhb+8Y9pIs8T s7105GDcqRE6Xrq5/oKaOxLdkwsaN2kl8kk6fHiCtkRrm8vMDnEjHk7BdBuYVVFm1H0s3j KszG5xKkrTgGSSIkpsQ+C8/CLyhH2yLzE/y70fvIvYDCbWnneSNXZHFSn9ZlsyGU2nfnEy ymBMOdwzPfyBTt1sfLyKqLJFw6rj0eaktjYgpPTOJgPHskbk/yhc73cxcA0Y0Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1704976110; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=ZAzSp5F6iN9thvouYWwHrD0dAhlUVfpGJ7GLC8QQRn4=; b=pGR7jK1aEPjYU+0GrDAoLeQetfEA05KFrG90gLxAmj+jdTEsuFOcSA0mslN/G9q9NQubZj C+bp3XyiPVOyeNGePRVOmeYvEU1CRzLKyNAHgwKSkYSuPncgOdjWzRShrZalYqMkJHJOrt lFfr4Fr69wnrqP+J1asEpwyR3VY3tuMYXrT+YRUMmlPV9xO4ceXmOqxZo+yN9lEo+YZmlJ W4f+vh65vFEwlXdIHrjk6Rb6UFUY2YbHQNNGJdogvgONFBlAg/j++4kdGk1k/vpLm89B3V agMVsMlVIs55GLfbF2LpkxVaH+iK52SxyGnakRjuqmx59hyrauD7X+KHmgN0Sw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1704976110; a=rsa-sha256; cv=none; b=I+qWcc6YpCw6aSNpKs5k+mNbAfeYmjGuYfwPL2n2F1HDYbBVopfygIYV6hqQYyHAKPUxt2 5zS0Ba7FPnnjvgMzvPdfnuTwVPYt2qY8XceFZ8P2yA4O1tD2fo+5tKo4NHqpgZpuJjLzo4 5gmxlw9L6V76KgXv0rW4/93vpslqtiLAof5FjIk1UhEzxFNqMMyxSI/M30DMI+FJ7DhdGX sCNsTqCF4vBpGXFrewZQp/eMOMbViin+5RbT8DnhVcahZwqL3IF2HUf6Q7WUHNSn5ea8Hl QWdskiJ1c0ZzvxXYKlmZ8B0wGblCLHAPCgycZKi0ISwFG6QeFf7NjLhIhSjK6A== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4T9kV56NY7zJSb; Thu, 11 Jan 2024 12:28:29 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.17.1/8.17.1) with ESMTP id 40BCSTet002171; Thu, 11 Jan 2024 12:28:29 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.17.1/8.17.1/Submit) id 40BCST3Z002169; Thu, 11 Jan 2024 12:28:29 GMT (envelope-from git) Date: Thu, 11 Jan 2024 12:28:29 GMT Message-Id: <202401111228.40BCST3Z002169@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Bernard Spil Subject: git: a15fd2712ca2 - main - security/vuxml: Document OpenSSL ppc vulnerability List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-main@freebsd.org X-BeenThere: dev-commits-ports-main@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: brnrd X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: a15fd2712ca26bece4c1a47c9bfb8d130d274c51 Auto-Submitted: auto-generated The branch main has been updated by brnrd: URL: https://cgit.FreeBSD.org/ports/commit/?id=a15fd2712ca26bece4c1a47c9bfb8d130d274c51 commit a15fd2712ca26bece4c1a47c9bfb8d130d274c51 Author: Bernard Spil AuthorDate: 2024-01-11 12:28:25 +0000 Commit: Bernard Spil CommitDate: 2024-01-11 12:28:25 +0000 security/vuxml: Document OpenSSL ppc vulnerability --- security/vuxml/vuln/2024.xml | 44 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 44 insertions(+) diff --git a/security/vuxml/vuln/2024.xml b/security/vuxml/vuln/2024.xml index 72157d2e7aa7..24acb9530581 100644 --- a/security/vuxml/vuln/2024.xml +++ b/security/vuxml/vuln/2024.xml @@ -1,3 +1,47 @@ + + OpenSSL -- Vector register corruption on PowerPC + + + openssl + 3.0.12_2,1 + + + openssl-quictls + 3.0.12_2 + + + openssl31 + 3.1.4_2 + + + openssl31-quictls + 3.1.4_2 + + + openssl32 + 3.2.0_1 + + + + +

SO-AND-SO reports:

+
+

The POLY1305 MAC (message authentication code) implementation + contains a bug that might corrupt the internal state of applications running + on PowerPC CPU based platforms if the CPU provides vector instructions.

+
+ + + + CVE-2023-6129 + https://www.openssl.org/news/secadv/20240109.txt + + + 2024-01-09 + 2024-01-11 + + + chromium -- security fix