CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

security/boringssl0.20261020.0

Fork of OpenSSL

Maintainer
osa@FreeBSD.org
Packages
boringssl 0.20261020.0
Upstream
up to date
CPE
google:boringssl from the port
WWW
https://boringssl.googlesource.com/boringssl/
Links
cgit · VuXML

Unaddressed (1) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2018-124404.72018-06-15BoringSSL through 2018-06-14 allows a memory-cache side-channel attack on DSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a DSA key, th…

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (275)

Sergey A. Osokin (osa) · 0.0.0.0.2022.01.10.01
security/boringssl: update to the recent commit
ab70346b91
Sergey A. Osokin (osa) · 0.0.0.0.2022.01.07.01_1
security/boringssl: set SONAME for the ssl library

Bump PORTREVISION.

Found by:	pluknet
b36e8b67dd
Sergey A. Osokin (osa) · 0.0.0.0.2022.01.07.01
security/boringssl: update to the recent commit
d14db763f9
Sergey A. Osokin (osa) · 0.0.0.0.2022.01.05.01_1
security/boringssl: set SONAME for the library

Bump PORTREVISION.

Found by:	 pluknet
44966089b6
Sergey A. Osokin (osa) · 0.0.0.0.2022.01.05.01
security/boringssl: update to the recent commit

The following commit [1], enables SHA-512 ARM acceleration when
available, so the patch-crypto_cpu_aarch64_linux.c needs to be
reviewed and updated.

References:
[1] https://boringssl.googlesource.com/boringssl/+/1e15682f1a4bb64c48b84884976a2b5c4201e878%5E%21/#F5
494cfc7c54
Sergey A. Osokin (osa) · 0.0.0.0.2021.12.21.01_3
security/boringssl: take maintainership
b8d60a503f
Sergey A. Osokin (osa) · 0.0.0.0.2021.12.21.01_3
security/boringssl: update CONFLICTS

Suggested by:	ashish
8b2e795d0e
Sergey A. Osokin (osa) · 0.0.0.0.2021.12.21.01_2
security/boringssl: remove backup files
e8cc50a109
Sergey A. Osokin (osa) · 0.0.0.0.2021.12.21.01_1
security/boringssl: update pkg-plist, bump PORTREVISION
121c1e821b
Sergey A. Osokin (osa) · 0.0.0.0.2021.12.21.01
security/boringssl: update to the recent commit.

Based on patches submitted by:	Ashish SHUKLA <ashish@FreeBSD.org>
76941a47e6
Bernhard Froehlich (decke) · 0.0.0.0.2020.04.29.01_1
security/boringssl: Add CPE information

Approved by:	portmgr (blanket)
6f56e15d87
Adriaan de Groot (adridg) · 0.0.0.0.2020.04.29.01_1
security/boringssl: fix plist

One missing header file. Bump PORTREVISION for including that one.
af0696db78
Mathieu Arnold (mat) · 0.0.0.0.2020.04.29.01
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 0.0.0.0.2020.04.29.01
Remove # $FreeBSD$ from Makefiles.
305f148f48
Steve Wills (swills) · 0.0.0.0.2020.04.29.01
www/boringssl: drop maintainership since I no longer use this
7e2b09b067
Sergey A. Osokin (osa) · 0.0.0.0.2020.04.29.01
Update to the 2020.04.29.01.

Approved by:	swills (maintainer)
fb0339c311
Steve Wills (swills) · 0.0.0.0.2019.12.02.01
security/boringssl: update to new snapshot [1]

While here, fix build on aarch64 [2]

PR:		242388 [2]
Submitted by:	mikael.urankar@gmail.com [2]
e1c3052144
Tobias Kortkamp (tobik) · 0.0.0.0.2018.10.30.01
Convert all Go ports to USES=go

This allows for port testing with lang/go-devel via GO_PORT, setting
up the Go build environment in a single place, and is step one in
simplifying Go ports that often define too complicated do-build
targets themselves.

USES=go gains new arguments 'run' to add lang/go to RUN_DEPENDS and
'no_targets' for ports with composite builds that call 'go' themselves
and do not need the do-build/do-install targets of USES=go.

PR:		238849
Submitted by:	dg@syrec.org (also D20745)
Reviewed by:	mat, tobik
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D20746
3726f94254
Tobias C. Berner (tcberner) · 0.0.0.0.2018.10.30.01
Change cmake default behaviour to outsource.

Ports that build out of source now simply can use "USES=cmake"
instead of "USES=cmake:outsource". Ports that fail to build
out of source now need to specify "USES=cmake:insource".

I tried to only set insource where explictely needed.

PR:		232038
Exp-run by:	antoine
707c6bf295
Steve Wills (swills) · 0.0.0.0.2018.10.30.01
security/boringssl: update to new snapshot
a483109820
Steve Wills (swills) · 0.0.0.0.2018.01.10.01
security/boringssl: update to new snapshot
f5f4861525
Steve Wills (swills) · 0.0.0.0.2017.12.07.01
security/boringssl: update to new snapshot
32ade00185
Steve Wills (swills) · 0.0.0.0.2017.10.13.01
security/boringssl: update to new snapshot
02112658f7
Steve Wills (swills) · 0.0.0.0.2017.06.28.01
Fix test

Reported by:	mat
dd148e538f
Steve Wills (swills) · 0.0.0.0.2017.06.28.01
security/boringssl: create port

Fork of OpenSSL that is designed to meet Google's needs

WWW: https://github.com/google/boringssl
801f06b11e