Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump openssl to 3.2.3 #13623

Merged
merged 1 commit into from
Sep 17, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .requirements
Original file line number Diff line number Diff line change
Expand Up @@ -4,8 +4,8 @@ OPENRESTY=1.25.3.2
OPENRESTY_SHA256=2d564022b06e33b45f7e5cfaf1e5dc571d38d61803af9fa2754dfff353c28d9c
LUAROCKS=3.11.1
LUAROCKS_SHA256=c3fb3d960dffb2b2fe9de7e3cb004dc4d0b34bb3d342578af84f84325c669102
OPENSSL=3.2.1
OPENSSL_SHA256=83c7329fe52c850677d75e5d0b0ca245309b97e8ecbcfdc1dfdc4ab9fac35b39
OPENSSL=3.2.3
OPENSSL_SHA256=52b5f1c6b8022bc5868c308c54fb77705e702d6c6f4594f99a0df216acf46239
PCRE=10.44
PCRE_SHA256=86b9cb0aa3bcb7994faa88018292bc704cdbb708e785f7c74352ff6ea7d3175b
ADA=2.9.2
Expand Down
7 changes: 0 additions & 7 deletions build/openresty/openssl/openssl_repositories.bzl
Original file line number Diff line number Diff line change
Expand Up @@ -6,12 +6,6 @@ load("@kong_bindings//:variables.bzl", "KONG_VAR")

def openssl_repositories():
version = KONG_VAR["OPENSSL"]

openssl_verion_uri = version
if version.startswith("3"):
nowNick marked this conversation as resolved.
Show resolved Hide resolved
# for 3.x only use the first two digits
openssl_verion_uri = ".".join(version.split(".")[:2])

maybe(
http_archive,
name = "openssl",
Expand All @@ -20,6 +14,5 @@ def openssl_repositories():
strip_prefix = "openssl-" + version,
urls = [
"https://github.com/openssl/openssl/releases/download/openssl-" + version + "/openssl-" + version + ".tar.gz",
"https://openssl.org/source/old/3.1/openssl-" + version + ".tar.gz",
],
)
2 changes: 2 additions & 0 deletions changelog/unreleased/kong/bump_openssl.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,2 @@
message: "Bumped OpenSSL to 3.2.3, to fix unbounded memory growth with session handling in TLSv1.3 and other CVEs"
type: dependency
3 changes: 1 addition & 2 deletions scripts/explain_manifest/fixtures/amazonlinux-2-amd64.txt
Original file line number Diff line number Diff line change
Expand Up @@ -206,7 +206,7 @@
- lua-resty-lmdb
- ngx_brotli
- ngx_wasmx_module
OpenSSL : OpenSSL 3.2.1 30 Jan 2024
OpenSSL : OpenSSL 3.2.3 3 Sep 2024
DWARF : True
DWARF - ngx_http_request_t related DWARF DIEs: True

Expand All @@ -218,4 +218,3 @@
- libdl.so.2
- libc.so.6
- ld-linux-x86-64.so.2

Original file line number Diff line number Diff line change
Expand Up @@ -195,7 +195,7 @@
- lua-resty-lmdb
- ngx_brotli
- ngx_wasmx_module
OpenSSL : OpenSSL 3.2.1 30 Jan 2024
OpenSSL : OpenSSL 3.2.3 3 Sep 2024
DWARF : True
DWARF - ngx_http_request_t related DWARF DIEs: True

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -202,7 +202,7 @@
- lua-resty-events
- lua-resty-lmdb
- ngx_wasmx_module
OpenSSL : OpenSSL 3.2.1 30 Jan 2024
OpenSSL : OpenSSL 3.2.3 3 Sep 2024
DWARF : True
DWARF - ngx_http_request_t related DWARF DIEs: True

Expand Down
2 changes: 1 addition & 1 deletion scripts/explain_manifest/fixtures/debian-11-amd64.txt
Original file line number Diff line number Diff line change
Expand Up @@ -196,7 +196,7 @@
- lua-resty-lmdb
- ngx_brotli
- ngx_wasmx_module
OpenSSL : OpenSSL 3.2.1 30 Jan 2024
OpenSSL : OpenSSL 3.2.3 3 Sep 2024
DWARF : True
DWARF - ngx_http_request_t related DWARF DIEs: True

Expand Down
2 changes: 1 addition & 1 deletion scripts/explain_manifest/fixtures/debian-12-amd64.txt
Original file line number Diff line number Diff line change
Expand Up @@ -185,7 +185,7 @@
- lua-resty-lmdb
- ngx_brotli
- ngx_wasmx_module
OpenSSL : OpenSSL 3.2.1 30 Jan 2024
OpenSSL : OpenSSL 3.2.3 3 Sep 2024
DWARF : True
DWARF - ngx_http_request_t related DWARF DIEs: True

Expand Down
2 changes: 1 addition & 1 deletion scripts/explain_manifest/fixtures/el8-amd64.txt
Original file line number Diff line number Diff line change
Expand Up @@ -206,7 +206,7 @@
- lua-resty-lmdb
- ngx_brotli
- ngx_wasmx_module
OpenSSL : OpenSSL 3.2.1 30 Jan 2024
OpenSSL : OpenSSL 3.2.3 3 Sep 2024
DWARF : True
DWARF - ngx_http_request_t related DWARF DIEs: True

Expand Down
2 changes: 1 addition & 1 deletion scripts/explain_manifest/fixtures/el9-amd64.txt
Original file line number Diff line number Diff line change
Expand Up @@ -195,7 +195,7 @@
- lua-resty-lmdb
- ngx_brotli
- ngx_wasmx_module
OpenSSL : OpenSSL 3.2.1 30 Jan 2024
OpenSSL : OpenSSL 3.2.3 3 Sep 2024
DWARF : True
DWARF - ngx_http_request_t related DWARF DIEs: True

Expand Down
2 changes: 1 addition & 1 deletion scripts/explain_manifest/fixtures/el9-arm64.txt
Original file line number Diff line number Diff line change
Expand Up @@ -202,7 +202,7 @@
- lua-resty-events
- lua-resty-lmdb
- ngx_wasmx_module
OpenSSL : OpenSSL 3.2.1 30 Jan 2024
OpenSSL : OpenSSL 3.2.3 3 Sep 2024
DWARF : True
DWARF - ngx_http_request_t related DWARF DIEs: True

Expand Down
2 changes: 1 addition & 1 deletion scripts/explain_manifest/fixtures/ubuntu-20.04-amd64.txt
Original file line number Diff line number Diff line change
Expand Up @@ -200,7 +200,7 @@
- lua-resty-lmdb
- ngx_brotli
- ngx_wasmx_module
OpenSSL : OpenSSL 3.2.1 30 Jan 2024
OpenSSL : OpenSSL 3.2.3 3 Sep 2024
DWARF : True
DWARF - ngx_http_request_t related DWARF DIEs: True

Expand Down
2 changes: 1 addition & 1 deletion scripts/explain_manifest/fixtures/ubuntu-22.04-amd64.txt
Original file line number Diff line number Diff line change
Expand Up @@ -189,7 +189,7 @@
- lua-resty-lmdb
- ngx_brotli
- ngx_wasmx_module
OpenSSL : OpenSSL 3.2.1 30 Jan 2024
OpenSSL : OpenSSL 3.2.3 3 Sep 2024
DWARF : True
DWARF - ngx_http_request_t related DWARF DIEs: True

Expand Down
2 changes: 1 addition & 1 deletion scripts/explain_manifest/fixtures/ubuntu-22.04-arm64.txt
Original file line number Diff line number Diff line change
Expand Up @@ -190,7 +190,7 @@
- lua-resty-lmdb
- ngx_brotli
- ngx_wasmx_module
OpenSSL : OpenSSL 3.2.1 30 Jan 2024
OpenSSL : OpenSSL 3.2.3 3 Sep 2024
DWARF : True
DWARF - ngx_http_request_t related DWARF DIEs: True

Expand Down
Loading