CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

security/boringssl0.20261020.0

Fork of OpenSSL

1
unaddressed
0
VuXML only, still affected
0
fixed
Maintainer
osa@FreeBSD.org
Packages
boringssl 0.20261020.0
Upstream
up to date
CPE
google:boringssl from the port
WWW
https://boringssl.googlesource.com/boringssl/
Links
cgit · VuXML

Unaddressed (1) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2018-124404.7published 2018-06-15

BoringSSL through 2018-06-14 allows a memory-cache side-channel attack on DSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a DSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (275)

Sergey A. Osokin (osa) · 0.20261020.0
security/boringssl: update to the recent snapshot release

Sponsored by:	tipi.work
7a5578a464
Dag-Erling Smørgrav (des) · 0.20260929.0_2
various: Bump Go ports for Go 1.26.10 / 1.27.3
d81b7ba3c3
Dag-Erling Smørgrav (des) · 0.20260929.0_1
various: Bump Go ports
031fc6bfbf
Sergey A. Osokin (osa) · 0.20260929.0
security/boringssl: update to the recent snapshot

Sponsored by:	tipi.work
a4c2396f9f
Adam Weinberger (adamw) · 0.20260813.0_2
many: Bump go ports for 1.26.8 and 1.27.1
dd0905142a
Dag-Erling Smørgrav (des) · 0.20260813.0_1
various: Bump go ports for go-1.25.14 / 1.26.7
4867821cd6
Sergey A. Osokin (osa) · 0.20260813.0
security/boringssl: update to the recent snapshot release

Reported by:	portscout!

Sponsored by:	tipi.work
f7a8773121
Dag-Erling Smørgrav (des) · 0.20260803.0_1
various: Bump go ports for go-1.25.13 / 1.26.6
6d39dcf04e
Dag-Erling Smørgrav (des) · 0.20260803.0
security/boringssl: Drop Go version pin

There is no reason to pin this to Go 1.25; in fact, according to its own
documentation, it requires Go 1.26.
69e8c30357
Sergey A. Osokin (osa) · 0.20260803.0
security/boringssl: update to the recent snapshot release

Sponsored by:	tipi.work
5120489212
Sergey A. Osokin (osa) · 0.20260730.0
security/boringssl: update to the recent snapshot release

ChangeLog:	https://github.com/google/boringssl/compare/0.20260728.0...0.20260730.0

Sponsored by:	tipi.work
62a603d4d1
Sergey A. Osokin (osa) · 0.20260728.0
security/boringssl: update to the recent snapshot release

ChangeLog:	https://github.com/google/boringssl/compare/0.20260713.0...0.20260728.0

Sponsored by:	tipi.work
43d7bbf768
Sergey A. Osokin (osa) · 0.20260713.0
security/boringssl: update to the recent snapshot release

Sponsored by:	tipi.work
b615c1d279
Dag-Erling Smørgrav (des) · 0.20260616.0_2
various: Bump go ports for go-1.25.12 / 1.26.5
4ea3547132
Sergey A. Osokin (osa) · 0.20260616.0_1
security/boringssl: update CONFLICTS

Bump PORTREVISION.

Sponsored by:	tipi.work
581fecb2a6
Sergey A. Osokin (osa) · 0.20260616.0
security/boringssl: update to the recent snapshot release

Sponsored by:	tipi.work
f6d92209a3
Dag-Erling Smørgrav (des) · 0.20260601.0_1
various: Bump go ports for go-1.25.11 / go-1.26.4
dd8dc2a59d
Sergey A. Osokin (osa) · 0.20260601.0
security/boringssl: update to the recent snapshot

The update fixes a running test suite issue.

Sponsored by:	tipi.work
f51161adfd
Sergey A. Osokin (osa) · 0.20260508.0
security/boringssl: update: 0.20260413.0 -> 0.20260508.0

Sponsored by:	tipi.work
7f01fac143
Adam Weinberger (adamw) · 0.20260413.0_1
various: Bump ports for Go 1.25.10
4e243a83f8
Sergey A. Osokin (osa) · 0.20260413.0
security/boringssl: update to the recent snapshot

Sponsored by:	tipi.work
520524bc73
Dag-Erling Smørgrav (des) · 0.20260327.0_1
various: Bump go ports for go-1.25.9 / 1.26.2
7507e72a84
Sergey A. Osokin (osa) · 0.20260327.0
security/boringssl: update to the recent snapshot

Sponsored by:	tipi.work
b1d03d5334
Adam Weinberger (adamw) · 0.20260211.0_2
various: Bump ports for Go 1.25.8
a8d318da7c
Sergey A. Osokin (osa) · 0.20260211.0_1
security/boringssl: fix build on arm64 by applying a vendor's fix

Bump PORTREVISION.

Reported by:	pkg-fallout
Tested by:	fluffy

Sponsored by:	tipi.work
b26ea95fed
Sergey A. Osokin (osa) · 0.20260211.0
security/boringssl: update to the recent snapshot release
66cf5b7d73
Adam Weinberger (adamw) · 0.20260204.0_1
various: Bump ports for Go default 1.24->1.25
97685c1886
Sergey A. Osokin (osa) · 0.20260204.0
security/boringssl: update to the recent snapshot

Sponsored by:	tipi.work
36632bcabd
Adam Weinberger (adamw) · 0.20251124.0_3
various: Bump Go ports for 1.24.13
529df949a5
Adam Weinberger (adamw) · 0.20251124.0_2
various: Bump Go ports for 1.24.12
013f2d30b0
Dag-Erling Smørgrav (des) · 0.20251124.0_1
many: Unpin Go ports

Unpin Go ports that I missed the first time around because the version
number was not the first argument.

Fixes:		75d873b56a74 ("many: Unpin Go ports")
3d901a5fec
Adam Weinberger (adamw) · 0.20251124.0_1
various: Bump Go ports for 1.24.11
b24429e3ed
Sergey A. Osokin (osa) · 0.20251124.0
security/boringssl: update to the recent snapshot
055ffa740c
Sergey A. Osokin (osa) · 0.20251110.0
security/boringssl: update to the recent snapshot - 0.20251110.0

Sponsored by:	tipi.work
3ee7aaac19
Adam Weinberger (adamw) · 0.20251002.0_1
various: Bump Go ports for 1.24.10
0dfced16fb
Sergey A. Osokin (osa) · 0.20251002.0
security/boringssl: update to the recent snapshot

Sponsored by:	tipi.work
0e53957070
Adam Weinberger (adamw) · 0.20250818.0_3
various: Bump go ports for go-1.24.9
90f976619b
Adam Weinberger (adamw) · 0.20250818.0_2
many: Bump dependent ports after go124 update
2e7587aaf8
Adam Weinberger (adamw) · 0.20250818.0_1
many: Bump go ports for go-1.24.7
31a5a229a7
Sergey A. Osokin (osa) · 0.20250818.0
security/boringssl: update CONFLICTS with recently added openssl36
ddcc649fe3
Sergey A. Osokin (osa) · 0.20250818.0
security/boringssl: update to the recent snaphost-release
35408a8567
Sergey A. Osokin (osa) · 0.20250807.0_1
security/boringssl: update CONFLICTS after openssl31* removal

Bump PORTREVISION.
b7403f2af1
Sergey A. Osokin (osa) · 0.20250807.0
security/boringssl: update to the recent release (+)

Reduce the dots and zeros in the version.

BoringSSL usage typically follows a "live at head" model.  However,
last year the project started publishing "interim" releases.

So, let's follow the vendor's releases and naming conventions.
a30b80bf79
Adam Weinberger (adamw) · 0.0.0.0.2025.07.01.01_2
go ports: Bump for 1.24.6
53610681ea
Adam Weinberger (adamw) · 0.0.0.0.2025.07.01.01_1
many: Bump PORTREVISION for go-1.24.5 update
275975297b
Sergey A. Osokin (osa) · 0.0.0.0.2025.07.01.01
security/boringssl: update to the recent snapshot
0b65c87d1f
Sergey A. Osokin (osa) · 0.0.0.0.2025.06.25.01
security/boringssl: update to the recent snapshot
43fb75a312
Sergey A. Osokin (osa) · 0.0.0.0.2025.06.05.01
security/boringssl: update to the recent snapshot
2c84f45fbd
Adam Weinberger (adamw) · 0.0.0.0.2025.06.02.01_1
various: Bump PORTREVISION after go124-1.24.4 update
94be418de3
Sergey A. Osokin (osa) · 0.0.0.0.2025.06.02.01
security/boringssl: update to the recent snapshot
15b66c9159
page 1 of 6older →oldest »