Add CXXFLAGS_ports-gcc = -fdelete-null-pointer-checks to these ports which
needs it. qtgrpc needs it because it uses protobuf and abseil-cpp.
qtdeclarative is yet another C++ monster that needs it because of traits.
OK rsadowski@ tb@
Update to openssl 3.6.1
This fixes a gazillion of CVEs. Far too many to name and list and most of
which can be safely ignored by everyone except those who make their living
off CVE busywork. Unless you use CMS AuthEnvelopedData you're good. If you
don't use PKCS#12 either you're in excellent position to ignore all this.
Update to openssl 3.5.5
This fixes a gazillion of CVEs. Far too many to name and list and most of
which can be safely ignored by everyone except those who make their living
off CVE busywork. Unless you use CMS AuthEnvelopedData you're good. If you
don't use PKCS#12 either you're in excellent position to ignore all this.
Avoid type confusion in the timestamp response parsing
A malformed v2 signing cert can lead to a type confusion, and the result
is a read from an invalid memory address or NULL, so a crash. Unlike for
OpenSSL, v1 signing certs aren't affected since miod fixed this in '14.
Reported by Luigino Camastra, fix by Bob Beck, via OpenSSL, CVE 2025-69420.
ok jsing
Avoid type confusion in PKCS#12 parsing
A type confusion can lead to a 1-byte read at address 0x00-0xff, so a
crash.
Reported by Luigino Camastra, fix by Bob Beck, via OpenSSL, CVE 2025-22795
ok jsing
Add NULL pointer check to PKCS12_item_decrypt_d2i()
Avoids a NULL pointer dereference triggerable by a malformed PCKS#12 file.
From Luigino Camastra via OpenSSL (CVE-2025-69421)
ok jsing
