<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="34">
<package pkgid="9fe58a9f598819220860c85255ba99bcc5d0edc92e09a4eb1bbff9e5f57139e2ccd1d0a1b3faeb759f3a5847cf59c93d983b10dcd2f8aaf7d6c37d69aa78e63a" name="crypto-policies" arch="noarch">
  <version epoch="0" ver="20251128.19878fe" rel="49.1"/>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1706875200">- Update to version 20231108.adb5572b:
  * Print matches in syntax deprecation warnings
  * Restore support for scoped ssh_etm directives
  * fips-mode-setup: Fix usage with --no-bootcfg
  * turn ssh_etm into an etm@SSH tri-state
  * fips-mode-setup: increase chroot-friendliness
  * bind: fix a typo that led to duplication of ECDSAPxxxSHAxxx
  * pylintrc: use-implicit-booleaness-not-comparison-to-*</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1707220800">- Update to version 20240201.9f501f3:
  * .gitlab-ci.yml: install sequoia-policy-config
  * java: disable ChaCha20-Poly1305 where applicable
  * fips-mode-setup: make sure ostree is detected in chroot
  * fips-finish-install: make sure ostree is detected in chroot
  * TEST-PQ: enable X25519-KYBER768 / P384-KYBER768 for openssl
  * TEST-PQ: add a no-op subpolicy
  * update-crypto-policies: Keep mid-sentence upper case
  * fips-mode-setup: Write error messages to stderr
  * fips-mode-setup: Fix some shellcheck warnings
  * fips-mode-setup: Fix test for empty /boot
  * fips-mode-setup: Avoid 'boot=UUID=' if /boot == /
  * Update man pages
  * Rebase patches:
  - crypto-policies-FIPS.patch
  - crypto-policies-revert-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1730894400">- Update to version 20241010.5930b9a:
  * LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  * nss: be stricter with new purposes
  * nss: rewrite backend for 3.101
  * cryptopolicies: parent scopes for dumping purposes
  * policygenerators: move scoping inside generators
  * TEST-PQ: disable pure Kyber768
  * nss: wire XYBER768D00 to X25519-KYBER768
  * TEST-PQ: update
  * TEST-PQ: also enable sntrup761x25519-sha512@openssh.com
  * TEST-PQ, alg_lists, openssl: enable more experimental `sign` values
  * TEST-PQ, python: add more groups, mark experimental
  * openssl: mark liboqsprovider groups optional with ?
  * Remove patches:
  - crypto-policies-revert-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1738670400">- Update to version 20250124.4d262e7: [bsc#1239009, bsc#1236165]
  * openssl: stricter enabling of Ciphersuites
  * openssl: make use of -CBC and -AESGCM keywords
  * openssl: add TLS 1.3 Brainpool identifiers
  * fix warning on using experimental key_exchanges
  * update-crypto-policies: don't output FIPS warning in fips mode
  * openssh: map mlkem768x25519-sha256 to KEM-ECDH &amp; MLKEM768-X25519 &amp; SHA2-256
  * openssh, libssh: refactor kx maps to use tuples
  * alg_lists: mark MLKEM768/SNTRUP kex experimental
  * nss: revert enabling mlkem768secp256r1
  * nss: add mlkem768x25519 and mlkem768secp256r1, remove xyber
  * gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  * openssl: use both names for SecP256r1MLKEM768 / X25519MLKEM768
  * openssh, TEST-PQ: rename MLKEM key_exchange to MLKEM768
  * openssh: add support for sntrup761x25519-sha512 and mlkem768x25519-sha256
  * openssl: map NULL to TLS_SHA256_SHA256:TLS_SHA384_SHA384...
  * python/update-crypto-policies: pacify pylint
  * fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * fips-mode-setup: small Argon2 detection fix
  * SHA1: add __openssl_block_sha1_signatures = 0
  * fips-mode-setup: block if LUKS devices using Argon2 are detected
  * update-crypto-policies: skip warning on --set=FIPS if bootc
  * fips-setup-helper: skip warning, BTW
  * fips-mode-setup: force --no-bootcfg when UKI is detected
  * fips-setup-helper: add a libexec helper for anaconda
  * fips-crypto-policy-overlay: automount FIPS policy
  * openssh: make dss no longer enableble, support is dropped
  * gnutls: wire GROUP-X25519-KYBER768 to X25519-KYBER768
  * DEFAULT: switch to rh-allow-sha1-signatures = no...
  * java: drop unused javasystem backend
  * java: stop specifying jdk.tls.namedGroups in javasystem
  * ec_min_size: introduce and use in java, default to 256
  * java: use and include jdk.disabled.namedCurves
  * BSI: Update BSI policy for new 2024 minimum recommendations
  * fips-mode-setup: flashy ticking warning upon use
  * fips-mode-setup: add another scary "unsupported"
  * CONTRIBUTING.md: add a small section on updating policies
  * CONTRIBUTING.md: remove trailing punctuation from headers
  * BSI: switch to 3072 minimum RSA key size
  * java: make hash, mac and sign more orthogonal
  * java: specify jdk.tls.namedGroups system property
  * java: respect more key size restrictions
  * java: disable anon ciphersuites, tying them to NULL...
  * java: start controlling / disable DTLSv1.0
  * nss: wire KYBER768 to XYBER768D00
  * nss: unconditionally load p11-kit-proxy.so
  * gnutls: make DTLS0.9 controllable again
  * gnutls: retire GNUTLS_NO_TLS_SESSION_HASH
  * openssh: remove OPENSSH_MIN_RSA_SIZE / OPENSSH_MIN_RSA_SIZE_FORCE
  * gnutls: remove extraneous newline
  * sequoia: move away from subprocess.getstatusoutput
  * python/cryptopolicies/cryptopolicies.py: add trailing commas
  * python, tests: rename MalformedLine to MalformedLineError
  * Makefile: introduce SKIP_LINTING flag for packagers to use
  * Makefile: run ruff
  * tests: use pathlib
  * tests: run(check=True) + CalledProcessError where convenient
  * tests: use subprocess.run
  * tests/krb5.py: check all generated policies
  * tests: print to stderr on error paths
  * tests/nss.py: also use encoding='utf-8'
  * tests/nss.py: also use removesuffix
  * tests/nss.py: skip creating tempfiles
  * tests/java.pl -&gt; tests/java.py
  * tests/gnutls.pl -&gt; tests/gnutls.py
  * tests/openssl.pl -&gt; tests/openssl.py
  * tests/verify-output.pl: remove
  * libreswan: do not use up pfs= / ikev2= keywords for default behaviour
  * Rebase patches:
  - crypto-policies-no-build-manpages.patch
  - crypto-policies-policygenerators.patch
  - crypto-policies-supported.patch
  - crypto-policies-nss.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1739361600">- Remove dangling symlink for the libreswan config [bsc#1236858]
- Remove also sequoia config and generator files
- Remove not needed fips bind mount service</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1740744000">- Fix fips-mode-setup in EFI or Secure Boot mode. [bsc#1227637]
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1741694400">- Enable SHA1 sigver in the DEFAULT policy.
  * Add crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1742299200">- Allow sshd in FIPS mode when using the DEFAULT policy [bsc#1227370]
  * Add crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1743076800">- Relax the nss version requirement since the mlkem768secp256r1
  enablement has been reverted.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1744200000">- Update crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1751284800">- Allow openssl to load when using the DEFAULT policy, and also
  other policies, in FIPS mode. [bsc#1243830, bsc#1242233]
  * Add crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1752148800">- Update to version 20250324.3714354:
  * NO-PQ: introduce
  * LEGACY/DEFAULT/FUTURE: enable hybrid ML-KEM and pure ML-DSA
  * _openssl_block_sha1_signatures: flip the default to 1
  * sequoia: add sha3, x25519, ed25519, x448, ed448, but not for rpm-sequoia
  * sequoia: refactor a bit
  * openssl: specify default key size for req
  * gnutls: support P384-MLKEM1024
  * openssl: stop generating `openssl` in favour of `opensslcnf`
  * gnutls: drop kyber (switching to leancrypto took it away)
  * openssl: use both names for P384-MLKEM1024
  * Detect the presence of nss-policy-check
  * Don't use hardcoded python3 path
  * Make xsltproc settable as XSLTPROC
  * python/cryptopolicies/validation/scope.py: fix new ruff rule RUF021
  * Update the info in the README.SUSE file
  * Remove the FEDORA policies and directories
  * Remove patches:
  - crypto-policies-supported.patch
  - crypto-policies-FIPS.patch
  * Rebase patches:
  - crypto-policies-policygenerators.patch
  - crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch
  - crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1752148801">- Add the FIPS scripts fips-finish-install and fips-mode-setup as
  sources in the spec file as they have been removed upstream.
  * We will maintain these scripts downstream.
  * Update the man pages for update-crypto-policies.8.gz
  * Rebase crypto-policies-no-build-manpages.patch
  * Add crypto-policies-FIPS-output.patch
  * Add man pages in text file in compressed form in the file
    man-fips-scripts.tar.xz and add them to the Makefile.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753444800">- Update to version 20250425.9267dee:
  * openssl: fix mistakes in integrity-only cipher definitions
  * NO-PQ, cryptopolicies: add experimental value suppression
  * nss: add mlkem768x25519 and mlkem768secp256r1
  * gnutls: 'allow-rsa-pkcs1-encrypt = false' everywhere but in LEGACY
  * TEST-PQ, openssh: add support for MLKEM768 key_exchange
  * LEGACY: drop cipher@pkcs12 = SEED-CBC
  * fips-crypto-policy-overlay: automount FIPS policy, follow-up fixes
  * nss: TLS-REQUIRE-EMS in FIPS
  * DEFAULT: disable RSA key exchange
  * LEGACY: disable sign = *-SHA1
  * nss: wire XYBER768D00 to X25519-KYBER768, not KYBER768
  * Removed patches fixed upstream:
  - crypto-policies-pylint.patch
  * Rebased patches:
  - crypto-policies-nss.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1762776000">- Update to version 20250714.cd6043a: [bsc#1253025, bsc#1252696]
  * gnutls: enable ML-DSA, for both secure-sig and secure-sig-for-cert
  * python, policies, tests: alias X25519-MLKEM768 to MLKEM768-X25519
  * FIPS: disable MLKEM768-X25519 for openssh (no-op)
  * FIPS: deprioritize X25519-MLKEM768 over P256-MLKEM768 for openssl...
  * TEST-PQ: be more careful with the ordering
  * openssl: send one PQ and one classic key_share; prioritize PQ groups
  * sequoia: Generate AEAD policy
  * Do not include EdDSA in FIPS policy
  * sequoia: Add PQC algorithm
  * sequoia: Run tests against PQC capable policy-config-check
  * Revert "openssl, policies: implement group_key_share option"
  * openssl, policies: implement group_key_share option
  * FIPS: enable hybrid ML-KEM (TLS only) and pure ML-DSA
  * python/build-crypto-policies: output diffs on --test mismatches
  * sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...
  * policies, alg_lists, openssl: remove KYBER from allowed values
  * openssl: stricter enabling of Ciphersuites
  * openssl: make use of -CBC and -AESGCM keywords
  * openssl: add TLS 1.3 Brainpool identifiers
  * fix warning on using experimental key_exchanges
  * update-crypto-policies: don't output FIPS warning in fips mode
  * openssh: map mlkem768x25519-sha256 to KEM-ECDH &amp; MLKEM768-X25519 &amp; SHA2-256
  * openssh, libssh: refactor kx maps to use tuples
  * alg_lists: mark MLKEM768/SNTRUP kex experimental
  * nss: revert enabling mlkem768secp256r1
  * nss: add mlkem768x25519 and mlkem768secp256r1, remove xyber
  * gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  * openssl: use both names for SecP256r1MLKEM768 / X25519MLKEM768
  * openssh, TEST-PQ: rename MLKEM key_exchange to MLKEM768
  * openssh: add support for sntrup761x25519-sha512 and mlkem768x25519-sha256
  * LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  * openssl: map NULL to TLS_SHA256_SHA256:TLS_SHA384_SHA384...
  * nss: be stricter with new purposes
  * python/update-crypto-policies: pacify pylint
  * fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * fips-mode-setup: small Argon2 detection fix
  * SHA1: add __openssl_block_sha1_signatures = 0
  * fips-mode-setup: block if LUKS devices using Argon2 are detected
  * update-crypto-policies: skip warning on --set=FIPS if bootc
  * fips-setup-helper: skip warning, BTW
  * fips-mode-setup: force --no-bootcfg when UKI is detected
  * fips-crypto-policy-overlay: automount FIPS policy
  * nss: rewrite backend for 3.101
  * cryptopolicies: parent scopes for dumping purposes
  * policygenerators: move scoping inside generators
  * openssh: make dss no longer enableble, support is dropped
  * gnutls: wire GROUP-X25519-KYBER768 to X25519-KYBER768
  * TEST-PQ: disable pure Kyber768
  * DEFAULT: switch to rh-allow-sha1-signatures = no...
  * java: drop unused javasystem backend
  * java: stop specifying jdk.tls.namedGroups in javasystem
  * ec_min_size: introduce and use in java, default to 256
  * java: use and include jdk.disabled.namedCurves
  * BSI: Update BSI policy for new 2024 minimum recommendations
  * fips-mode-setup: flashy ticking warning upon use
  * fips-mode-setup: add another scary "unsupported"
  * BSI: switch to 3072 minimum RSA key size
  * java: make hash, mac and sign more orthogonal
  * java: specify jdk.tls.namedGroups system property
  * java: respect more key size restrictions
  * java: disable anon ciphersuites, tying them to NULL...
  * java: start controlling / disable DTLSv1.0
  * nss: wire KYBER768 to XYBER768D00</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1762776001">- Adapt the manpages to SUSE/openSUSE:
  * Add crypto-policies-SUSE-manpages.patch
  * Compress all the man pages for update-crypto-policies.8.gz,
    crypto-policies.7.gz, fips-finish-install.8.gz and
    fips-mode-setup.8.gz into man-crypto-policies.tar.xz</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1762862400">- Fix the testsuite:
  * Port all the policy changes to the config files in the test suite.
  * Use the newly introduced SKIP_LINTING=1 option.
  * Rebase crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1764936000">- Update to version 20251128.19878fe:
  * nss: enable ML-DSA
  * gnutls: do enabled-curve for hybrids with said curve
  * openssl: allow disabling all TLS / DTLS protocols
  * openssh: support mlkem768nistp256-sha256 and mlkem1024nistp384-sha384
  * Revert "Do not include EdDSA in FIPS policy"
  * openssl: let TLS 1.3 brainpool groups get used for key shares
  * sequoia: register "eddsa" as an alias to EDDSA-ED25519
  * Makefile: unbreak coverage testing on rawhide
  * tests/unittest_preprocess_text: catch 3 warnings separately
  * Rebase patches:
  - crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch
  - crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
  <changelog author="JS &lt;obs.coke518@passinbox.com&gt;" date="1774958400">- Disable the use of posix_spawn() under qemu user-mode emulation.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1776859200">- Modify the output of fips-mode-setup to hint the user when
  setting the FIPS mode in transactional systems to use the
  command 'transactional-update setup-fips'. (bsc#1262315)</changelog>
</package>
<package pkgid="f7f3888a44f2cf9e1b7fbc01f2164a839b5d023ec142aa2520c834cbf162e9afd175b359318b3ebbdcd9752170a005cb08bc3c8beca24525cf75da445375b533" name="crypto-policies" arch="src">
  <version epoch="0" ver="20251128.19878fe" rel="49.1"/>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1706875200">- Update to version 20231108.adb5572b:
  * Print matches in syntax deprecation warnings
  * Restore support for scoped ssh_etm directives
  * fips-mode-setup: Fix usage with --no-bootcfg
  * turn ssh_etm into an etm@SSH tri-state
  * fips-mode-setup: increase chroot-friendliness
  * bind: fix a typo that led to duplication of ECDSAPxxxSHAxxx
  * pylintrc: use-implicit-booleaness-not-comparison-to-*</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1707220800">- Update to version 20240201.9f501f3:
  * .gitlab-ci.yml: install sequoia-policy-config
  * java: disable ChaCha20-Poly1305 where applicable
  * fips-mode-setup: make sure ostree is detected in chroot
  * fips-finish-install: make sure ostree is detected in chroot
  * TEST-PQ: enable X25519-KYBER768 / P384-KYBER768 for openssl
  * TEST-PQ: add a no-op subpolicy
  * update-crypto-policies: Keep mid-sentence upper case
  * fips-mode-setup: Write error messages to stderr
  * fips-mode-setup: Fix some shellcheck warnings
  * fips-mode-setup: Fix test for empty /boot
  * fips-mode-setup: Avoid 'boot=UUID=' if /boot == /
  * Update man pages
  * Rebase patches:
  - crypto-policies-FIPS.patch
  - crypto-policies-revert-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1730894400">- Update to version 20241010.5930b9a:
  * LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  * nss: be stricter with new purposes
  * nss: rewrite backend for 3.101
  * cryptopolicies: parent scopes for dumping purposes
  * policygenerators: move scoping inside generators
  * TEST-PQ: disable pure Kyber768
  * nss: wire XYBER768D00 to X25519-KYBER768
  * TEST-PQ: update
  * TEST-PQ: also enable sntrup761x25519-sha512@openssh.com
  * TEST-PQ, alg_lists, openssl: enable more experimental `sign` values
  * TEST-PQ, python: add more groups, mark experimental
  * openssl: mark liboqsprovider groups optional with ?
  * Remove patches:
  - crypto-policies-revert-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1738670400">- Update to version 20250124.4d262e7: [bsc#1239009, bsc#1236165]
  * openssl: stricter enabling of Ciphersuites
  * openssl: make use of -CBC and -AESGCM keywords
  * openssl: add TLS 1.3 Brainpool identifiers
  * fix warning on using experimental key_exchanges
  * update-crypto-policies: don't output FIPS warning in fips mode
  * openssh: map mlkem768x25519-sha256 to KEM-ECDH &amp; MLKEM768-X25519 &amp; SHA2-256
  * openssh, libssh: refactor kx maps to use tuples
  * alg_lists: mark MLKEM768/SNTRUP kex experimental
  * nss: revert enabling mlkem768secp256r1
  * nss: add mlkem768x25519 and mlkem768secp256r1, remove xyber
  * gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  * openssl: use both names for SecP256r1MLKEM768 / X25519MLKEM768
  * openssh, TEST-PQ: rename MLKEM key_exchange to MLKEM768
  * openssh: add support for sntrup761x25519-sha512 and mlkem768x25519-sha256
  * openssl: map NULL to TLS_SHA256_SHA256:TLS_SHA384_SHA384...
  * python/update-crypto-policies: pacify pylint
  * fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * fips-mode-setup: small Argon2 detection fix
  * SHA1: add __openssl_block_sha1_signatures = 0
  * fips-mode-setup: block if LUKS devices using Argon2 are detected
  * update-crypto-policies: skip warning on --set=FIPS if bootc
  * fips-setup-helper: skip warning, BTW
  * fips-mode-setup: force --no-bootcfg when UKI is detected
  * fips-setup-helper: add a libexec helper for anaconda
  * fips-crypto-policy-overlay: automount FIPS policy
  * openssh: make dss no longer enableble, support is dropped
  * gnutls: wire GROUP-X25519-KYBER768 to X25519-KYBER768
  * DEFAULT: switch to rh-allow-sha1-signatures = no...
  * java: drop unused javasystem backend
  * java: stop specifying jdk.tls.namedGroups in javasystem
  * ec_min_size: introduce and use in java, default to 256
  * java: use and include jdk.disabled.namedCurves
  * BSI: Update BSI policy for new 2024 minimum recommendations
  * fips-mode-setup: flashy ticking warning upon use
  * fips-mode-setup: add another scary "unsupported"
  * CONTRIBUTING.md: add a small section on updating policies
  * CONTRIBUTING.md: remove trailing punctuation from headers
  * BSI: switch to 3072 minimum RSA key size
  * java: make hash, mac and sign more orthogonal
  * java: specify jdk.tls.namedGroups system property
  * java: respect more key size restrictions
  * java: disable anon ciphersuites, tying them to NULL...
  * java: start controlling / disable DTLSv1.0
  * nss: wire KYBER768 to XYBER768D00
  * nss: unconditionally load p11-kit-proxy.so
  * gnutls: make DTLS0.9 controllable again
  * gnutls: retire GNUTLS_NO_TLS_SESSION_HASH
  * openssh: remove OPENSSH_MIN_RSA_SIZE / OPENSSH_MIN_RSA_SIZE_FORCE
  * gnutls: remove extraneous newline
  * sequoia: move away from subprocess.getstatusoutput
  * python/cryptopolicies/cryptopolicies.py: add trailing commas
  * python, tests: rename MalformedLine to MalformedLineError
  * Makefile: introduce SKIP_LINTING flag for packagers to use
  * Makefile: run ruff
  * tests: use pathlib
  * tests: run(check=True) + CalledProcessError where convenient
  * tests: use subprocess.run
  * tests/krb5.py: check all generated policies
  * tests: print to stderr on error paths
  * tests/nss.py: also use encoding='utf-8'
  * tests/nss.py: also use removesuffix
  * tests/nss.py: skip creating tempfiles
  * tests/java.pl -&gt; tests/java.py
  * tests/gnutls.pl -&gt; tests/gnutls.py
  * tests/openssl.pl -&gt; tests/openssl.py
  * tests/verify-output.pl: remove
  * libreswan: do not use up pfs= / ikev2= keywords for default behaviour
  * Rebase patches:
  - crypto-policies-no-build-manpages.patch
  - crypto-policies-policygenerators.patch
  - crypto-policies-supported.patch
  - crypto-policies-nss.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1739361600">- Remove dangling symlink for the libreswan config [bsc#1236858]
- Remove also sequoia config and generator files
- Remove not needed fips bind mount service</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1740744000">- Fix fips-mode-setup in EFI or Secure Boot mode. [bsc#1227637]
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1741694400">- Enable SHA1 sigver in the DEFAULT policy.
  * Add crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1742299200">- Allow sshd in FIPS mode when using the DEFAULT policy [bsc#1227370]
  * Add crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1743076800">- Relax the nss version requirement since the mlkem768secp256r1
  enablement has been reverted.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1744200000">- Update crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1751284800">- Allow openssl to load when using the DEFAULT policy, and also
  other policies, in FIPS mode. [bsc#1243830, bsc#1242233]
  * Add crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1752148800">- Update to version 20250324.3714354:
  * NO-PQ: introduce
  * LEGACY/DEFAULT/FUTURE: enable hybrid ML-KEM and pure ML-DSA
  * _openssl_block_sha1_signatures: flip the default to 1
  * sequoia: add sha3, x25519, ed25519, x448, ed448, but not for rpm-sequoia
  * sequoia: refactor a bit
  * openssl: specify default key size for req
  * gnutls: support P384-MLKEM1024
  * openssl: stop generating `openssl` in favour of `opensslcnf`
  * gnutls: drop kyber (switching to leancrypto took it away)
  * openssl: use both names for P384-MLKEM1024
  * Detect the presence of nss-policy-check
  * Don't use hardcoded python3 path
  * Make xsltproc settable as XSLTPROC
  * python/cryptopolicies/validation/scope.py: fix new ruff rule RUF021
  * Update the info in the README.SUSE file
  * Remove the FEDORA policies and directories
  * Remove patches:
  - crypto-policies-supported.patch
  - crypto-policies-FIPS.patch
  * Rebase patches:
  - crypto-policies-policygenerators.patch
  - crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch
  - crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1752148801">- Add the FIPS scripts fips-finish-install and fips-mode-setup as
  sources in the spec file as they have been removed upstream.
  * We will maintain these scripts downstream.
  * Update the man pages for update-crypto-policies.8.gz
  * Rebase crypto-policies-no-build-manpages.patch
  * Add crypto-policies-FIPS-output.patch
  * Add man pages in text file in compressed form in the file
    man-fips-scripts.tar.xz and add them to the Makefile.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753444800">- Update to version 20250425.9267dee:
  * openssl: fix mistakes in integrity-only cipher definitions
  * NO-PQ, cryptopolicies: add experimental value suppression
  * nss: add mlkem768x25519 and mlkem768secp256r1
  * gnutls: 'allow-rsa-pkcs1-encrypt = false' everywhere but in LEGACY
  * TEST-PQ, openssh: add support for MLKEM768 key_exchange
  * LEGACY: drop cipher@pkcs12 = SEED-CBC
  * fips-crypto-policy-overlay: automount FIPS policy, follow-up fixes
  * nss: TLS-REQUIRE-EMS in FIPS
  * DEFAULT: disable RSA key exchange
  * LEGACY: disable sign = *-SHA1
  * nss: wire XYBER768D00 to X25519-KYBER768, not KYBER768
  * Removed patches fixed upstream:
  - crypto-policies-pylint.patch
  * Rebased patches:
  - crypto-policies-nss.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1762776000">- Update to version 20250714.cd6043a: [bsc#1253025, bsc#1252696]
  * gnutls: enable ML-DSA, for both secure-sig and secure-sig-for-cert
  * python, policies, tests: alias X25519-MLKEM768 to MLKEM768-X25519
  * FIPS: disable MLKEM768-X25519 for openssh (no-op)
  * FIPS: deprioritize X25519-MLKEM768 over P256-MLKEM768 for openssl...
  * TEST-PQ: be more careful with the ordering
  * openssl: send one PQ and one classic key_share; prioritize PQ groups
  * sequoia: Generate AEAD policy
  * Do not include EdDSA in FIPS policy
  * sequoia: Add PQC algorithm
  * sequoia: Run tests against PQC capable policy-config-check
  * Revert "openssl, policies: implement group_key_share option"
  * openssl, policies: implement group_key_share option
  * FIPS: enable hybrid ML-KEM (TLS only) and pure ML-DSA
  * python/build-crypto-policies: output diffs on --test mismatches
  * sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...
  * policies, alg_lists, openssl: remove KYBER from allowed values
  * openssl: stricter enabling of Ciphersuites
  * openssl: make use of -CBC and -AESGCM keywords
  * openssl: add TLS 1.3 Brainpool identifiers
  * fix warning on using experimental key_exchanges
  * update-crypto-policies: don't output FIPS warning in fips mode
  * openssh: map mlkem768x25519-sha256 to KEM-ECDH &amp; MLKEM768-X25519 &amp; SHA2-256
  * openssh, libssh: refactor kx maps to use tuples
  * alg_lists: mark MLKEM768/SNTRUP kex experimental
  * nss: revert enabling mlkem768secp256r1
  * nss: add mlkem768x25519 and mlkem768secp256r1, remove xyber
  * gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  * openssl: use both names for SecP256r1MLKEM768 / X25519MLKEM768
  * openssh, TEST-PQ: rename MLKEM key_exchange to MLKEM768
  * openssh: add support for sntrup761x25519-sha512 and mlkem768x25519-sha256
  * LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  * openssl: map NULL to TLS_SHA256_SHA256:TLS_SHA384_SHA384...
  * nss: be stricter with new purposes
  * python/update-crypto-policies: pacify pylint
  * fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * fips-mode-setup: small Argon2 detection fix
  * SHA1: add __openssl_block_sha1_signatures = 0
  * fips-mode-setup: block if LUKS devices using Argon2 are detected
  * update-crypto-policies: skip warning on --set=FIPS if bootc
  * fips-setup-helper: skip warning, BTW
  * fips-mode-setup: force --no-bootcfg when UKI is detected
  * fips-crypto-policy-overlay: automount FIPS policy
  * nss: rewrite backend for 3.101
  * cryptopolicies: parent scopes for dumping purposes
  * policygenerators: move scoping inside generators
  * openssh: make dss no longer enableble, support is dropped
  * gnutls: wire GROUP-X25519-KYBER768 to X25519-KYBER768
  * TEST-PQ: disable pure Kyber768
  * DEFAULT: switch to rh-allow-sha1-signatures = no...
  * java: drop unused javasystem backend
  * java: stop specifying jdk.tls.namedGroups in javasystem
  * ec_min_size: introduce and use in java, default to 256
  * java: use and include jdk.disabled.namedCurves
  * BSI: Update BSI policy for new 2024 minimum recommendations
  * fips-mode-setup: flashy ticking warning upon use
  * fips-mode-setup: add another scary "unsupported"
  * BSI: switch to 3072 minimum RSA key size
  * java: make hash, mac and sign more orthogonal
  * java: specify jdk.tls.namedGroups system property
  * java: respect more key size restrictions
  * java: disable anon ciphersuites, tying them to NULL...
  * java: start controlling / disable DTLSv1.0
  * nss: wire KYBER768 to XYBER768D00</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1762776001">- Adapt the manpages to SUSE/openSUSE:
  * Add crypto-policies-SUSE-manpages.patch
  * Compress all the man pages for update-crypto-policies.8.gz,
    crypto-policies.7.gz, fips-finish-install.8.gz and
    fips-mode-setup.8.gz into man-crypto-policies.tar.xz</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1762862400">- Fix the testsuite:
  * Port all the policy changes to the config files in the test suite.
  * Use the newly introduced SKIP_LINTING=1 option.
  * Rebase crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1764936000">- Update to version 20251128.19878fe:
  * nss: enable ML-DSA
  * gnutls: do enabled-curve for hybrids with said curve
  * openssl: allow disabling all TLS / DTLS protocols
  * openssh: support mlkem768nistp256-sha256 and mlkem1024nistp384-sha384
  * Revert "Do not include EdDSA in FIPS policy"
  * openssl: let TLS 1.3 brainpool groups get used for key shares
  * sequoia: register "eddsa" as an alias to EDDSA-ED25519
  * Makefile: unbreak coverage testing on rawhide
  * tests/unittest_preprocess_text: catch 3 warnings separately
  * Rebase patches:
  - crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch
  - crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
  <changelog author="JS &lt;obs.coke518@passinbox.com&gt;" date="1774958400">- Disable the use of posix_spawn() under qemu user-mode emulation.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1776859200">- Modify the output of fips-mode-setup to hint the user when
  setting the FIPS mode in transactional systems to use the
  command 'transactional-update setup-fips'. (bsc#1262315)</changelog>
</package>
<package pkgid="fd1bb78cbb44f1c0f546fe7e2bb9f56631f058bf8d82b36001e57bcfc525be804b9f6fee5d945acc1b985ef70b36dc72d2b1ddfb36dbe00c29ac7002e8fb4c10" name="crypto-policies-scripts" arch="noarch">
  <version epoch="0" ver="20251128.19878fe" rel="49.1"/>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1706875200">- Update to version 20231108.adb5572b:
  * Print matches in syntax deprecation warnings
  * Restore support for scoped ssh_etm directives
  * fips-mode-setup: Fix usage with --no-bootcfg
  * turn ssh_etm into an etm@SSH tri-state
  * fips-mode-setup: increase chroot-friendliness
  * bind: fix a typo that led to duplication of ECDSAPxxxSHAxxx
  * pylintrc: use-implicit-booleaness-not-comparison-to-*</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1707220800">- Update to version 20240201.9f501f3:
  * .gitlab-ci.yml: install sequoia-policy-config
  * java: disable ChaCha20-Poly1305 where applicable
  * fips-mode-setup: make sure ostree is detected in chroot
  * fips-finish-install: make sure ostree is detected in chroot
  * TEST-PQ: enable X25519-KYBER768 / P384-KYBER768 for openssl
  * TEST-PQ: add a no-op subpolicy
  * update-crypto-policies: Keep mid-sentence upper case
  * fips-mode-setup: Write error messages to stderr
  * fips-mode-setup: Fix some shellcheck warnings
  * fips-mode-setup: Fix test for empty /boot
  * fips-mode-setup: Avoid 'boot=UUID=' if /boot == /
  * Update man pages
  * Rebase patches:
  - crypto-policies-FIPS.patch
  - crypto-policies-revert-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1730894400">- Update to version 20241010.5930b9a:
  * LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  * nss: be stricter with new purposes
  * nss: rewrite backend for 3.101
  * cryptopolicies: parent scopes for dumping purposes
  * policygenerators: move scoping inside generators
  * TEST-PQ: disable pure Kyber768
  * nss: wire XYBER768D00 to X25519-KYBER768
  * TEST-PQ: update
  * TEST-PQ: also enable sntrup761x25519-sha512@openssh.com
  * TEST-PQ, alg_lists, openssl: enable more experimental `sign` values
  * TEST-PQ, python: add more groups, mark experimental
  * openssl: mark liboqsprovider groups optional with ?
  * Remove patches:
  - crypto-policies-revert-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1738670400">- Update to version 20250124.4d262e7: [bsc#1239009, bsc#1236165]
  * openssl: stricter enabling of Ciphersuites
  * openssl: make use of -CBC and -AESGCM keywords
  * openssl: add TLS 1.3 Brainpool identifiers
  * fix warning on using experimental key_exchanges
  * update-crypto-policies: don't output FIPS warning in fips mode
  * openssh: map mlkem768x25519-sha256 to KEM-ECDH &amp; MLKEM768-X25519 &amp; SHA2-256
  * openssh, libssh: refactor kx maps to use tuples
  * alg_lists: mark MLKEM768/SNTRUP kex experimental
  * nss: revert enabling mlkem768secp256r1
  * nss: add mlkem768x25519 and mlkem768secp256r1, remove xyber
  * gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  * openssl: use both names for SecP256r1MLKEM768 / X25519MLKEM768
  * openssh, TEST-PQ: rename MLKEM key_exchange to MLKEM768
  * openssh: add support for sntrup761x25519-sha512 and mlkem768x25519-sha256
  * openssl: map NULL to TLS_SHA256_SHA256:TLS_SHA384_SHA384...
  * python/update-crypto-policies: pacify pylint
  * fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * fips-mode-setup: small Argon2 detection fix
  * SHA1: add __openssl_block_sha1_signatures = 0
  * fips-mode-setup: block if LUKS devices using Argon2 are detected
  * update-crypto-policies: skip warning on --set=FIPS if bootc
  * fips-setup-helper: skip warning, BTW
  * fips-mode-setup: force --no-bootcfg when UKI is detected
  * fips-setup-helper: add a libexec helper for anaconda
  * fips-crypto-policy-overlay: automount FIPS policy
  * openssh: make dss no longer enableble, support is dropped
  * gnutls: wire GROUP-X25519-KYBER768 to X25519-KYBER768
  * DEFAULT: switch to rh-allow-sha1-signatures = no...
  * java: drop unused javasystem backend
  * java: stop specifying jdk.tls.namedGroups in javasystem
  * ec_min_size: introduce and use in java, default to 256
  * java: use and include jdk.disabled.namedCurves
  * BSI: Update BSI policy for new 2024 minimum recommendations
  * fips-mode-setup: flashy ticking warning upon use
  * fips-mode-setup: add another scary "unsupported"
  * CONTRIBUTING.md: add a small section on updating policies
  * CONTRIBUTING.md: remove trailing punctuation from headers
  * BSI: switch to 3072 minimum RSA key size
  * java: make hash, mac and sign more orthogonal
  * java: specify jdk.tls.namedGroups system property
  * java: respect more key size restrictions
  * java: disable anon ciphersuites, tying them to NULL...
  * java: start controlling / disable DTLSv1.0
  * nss: wire KYBER768 to XYBER768D00
  * nss: unconditionally load p11-kit-proxy.so
  * gnutls: make DTLS0.9 controllable again
  * gnutls: retire GNUTLS_NO_TLS_SESSION_HASH
  * openssh: remove OPENSSH_MIN_RSA_SIZE / OPENSSH_MIN_RSA_SIZE_FORCE
  * gnutls: remove extraneous newline
  * sequoia: move away from subprocess.getstatusoutput
  * python/cryptopolicies/cryptopolicies.py: add trailing commas
  * python, tests: rename MalformedLine to MalformedLineError
  * Makefile: introduce SKIP_LINTING flag for packagers to use
  * Makefile: run ruff
  * tests: use pathlib
  * tests: run(check=True) + CalledProcessError where convenient
  * tests: use subprocess.run
  * tests/krb5.py: check all generated policies
  * tests: print to stderr on error paths
  * tests/nss.py: also use encoding='utf-8'
  * tests/nss.py: also use removesuffix
  * tests/nss.py: skip creating tempfiles
  * tests/java.pl -&gt; tests/java.py
  * tests/gnutls.pl -&gt; tests/gnutls.py
  * tests/openssl.pl -&gt; tests/openssl.py
  * tests/verify-output.pl: remove
  * libreswan: do not use up pfs= / ikev2= keywords for default behaviour
  * Rebase patches:
  - crypto-policies-no-build-manpages.patch
  - crypto-policies-policygenerators.patch
  - crypto-policies-supported.patch
  - crypto-policies-nss.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1739361600">- Remove dangling symlink for the libreswan config [bsc#1236858]
- Remove also sequoia config and generator files
- Remove not needed fips bind mount service</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1740744000">- Fix fips-mode-setup in EFI or Secure Boot mode. [bsc#1227637]
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1741694400">- Enable SHA1 sigver in the DEFAULT policy.
  * Add crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1742299200">- Allow sshd in FIPS mode when using the DEFAULT policy [bsc#1227370]
  * Add crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1743076800">- Relax the nss version requirement since the mlkem768secp256r1
  enablement has been reverted.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1744200000">- Update crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1751284800">- Allow openssl to load when using the DEFAULT policy, and also
  other policies, in FIPS mode. [bsc#1243830, bsc#1242233]
  * Add crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1752148800">- Update to version 20250324.3714354:
  * NO-PQ: introduce
  * LEGACY/DEFAULT/FUTURE: enable hybrid ML-KEM and pure ML-DSA
  * _openssl_block_sha1_signatures: flip the default to 1
  * sequoia: add sha3, x25519, ed25519, x448, ed448, but not for rpm-sequoia
  * sequoia: refactor a bit
  * openssl: specify default key size for req
  * gnutls: support P384-MLKEM1024
  * openssl: stop generating `openssl` in favour of `opensslcnf`
  * gnutls: drop kyber (switching to leancrypto took it away)
  * openssl: use both names for P384-MLKEM1024
  * Detect the presence of nss-policy-check
  * Don't use hardcoded python3 path
  * Make xsltproc settable as XSLTPROC
  * python/cryptopolicies/validation/scope.py: fix new ruff rule RUF021
  * Update the info in the README.SUSE file
  * Remove the FEDORA policies and directories
  * Remove patches:
  - crypto-policies-supported.patch
  - crypto-policies-FIPS.patch
  * Rebase patches:
  - crypto-policies-policygenerators.patch
  - crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch
  - crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1752148801">- Add the FIPS scripts fips-finish-install and fips-mode-setup as
  sources in the spec file as they have been removed upstream.
  * We will maintain these scripts downstream.
  * Update the man pages for update-crypto-policies.8.gz
  * Rebase crypto-policies-no-build-manpages.patch
  * Add crypto-policies-FIPS-output.patch
  * Add man pages in text file in compressed form in the file
    man-fips-scripts.tar.xz and add them to the Makefile.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753444800">- Update to version 20250425.9267dee:
  * openssl: fix mistakes in integrity-only cipher definitions
  * NO-PQ, cryptopolicies: add experimental value suppression
  * nss: add mlkem768x25519 and mlkem768secp256r1
  * gnutls: 'allow-rsa-pkcs1-encrypt = false' everywhere but in LEGACY
  * TEST-PQ, openssh: add support for MLKEM768 key_exchange
  * LEGACY: drop cipher@pkcs12 = SEED-CBC
  * fips-crypto-policy-overlay: automount FIPS policy, follow-up fixes
  * nss: TLS-REQUIRE-EMS in FIPS
  * DEFAULT: disable RSA key exchange
  * LEGACY: disable sign = *-SHA1
  * nss: wire XYBER768D00 to X25519-KYBER768, not KYBER768
  * Removed patches fixed upstream:
  - crypto-policies-pylint.patch
  * Rebased patches:
  - crypto-policies-nss.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1762776000">- Update to version 20250714.cd6043a: [bsc#1253025, bsc#1252696]
  * gnutls: enable ML-DSA, for both secure-sig and secure-sig-for-cert
  * python, policies, tests: alias X25519-MLKEM768 to MLKEM768-X25519
  * FIPS: disable MLKEM768-X25519 for openssh (no-op)
  * FIPS: deprioritize X25519-MLKEM768 over P256-MLKEM768 for openssl...
  * TEST-PQ: be more careful with the ordering
  * openssl: send one PQ and one classic key_share; prioritize PQ groups
  * sequoia: Generate AEAD policy
  * Do not include EdDSA in FIPS policy
  * sequoia: Add PQC algorithm
  * sequoia: Run tests against PQC capable policy-config-check
  * Revert "openssl, policies: implement group_key_share option"
  * openssl, policies: implement group_key_share option
  * FIPS: enable hybrid ML-KEM (TLS only) and pure ML-DSA
  * python/build-crypto-policies: output diffs on --test mismatches
  * sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...
  * policies, alg_lists, openssl: remove KYBER from allowed values
  * openssl: stricter enabling of Ciphersuites
  * openssl: make use of -CBC and -AESGCM keywords
  * openssl: add TLS 1.3 Brainpool identifiers
  * fix warning on using experimental key_exchanges
  * update-crypto-policies: don't output FIPS warning in fips mode
  * openssh: map mlkem768x25519-sha256 to KEM-ECDH &amp; MLKEM768-X25519 &amp; SHA2-256
  * openssh, libssh: refactor kx maps to use tuples
  * alg_lists: mark MLKEM768/SNTRUP kex experimental
  * nss: revert enabling mlkem768secp256r1
  * nss: add mlkem768x25519 and mlkem768secp256r1, remove xyber
  * gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  * openssl: use both names for SecP256r1MLKEM768 / X25519MLKEM768
  * openssh, TEST-PQ: rename MLKEM key_exchange to MLKEM768
  * openssh: add support for sntrup761x25519-sha512 and mlkem768x25519-sha256
  * LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  * openssl: map NULL to TLS_SHA256_SHA256:TLS_SHA384_SHA384...
  * nss: be stricter with new purposes
  * python/update-crypto-policies: pacify pylint
  * fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * fips-mode-setup: small Argon2 detection fix
  * SHA1: add __openssl_block_sha1_signatures = 0
  * fips-mode-setup: block if LUKS devices using Argon2 are detected
  * update-crypto-policies: skip warning on --set=FIPS if bootc
  * fips-setup-helper: skip warning, BTW
  * fips-mode-setup: force --no-bootcfg when UKI is detected
  * fips-crypto-policy-overlay: automount FIPS policy
  * nss: rewrite backend for 3.101
  * cryptopolicies: parent scopes for dumping purposes
  * policygenerators: move scoping inside generators
  * openssh: make dss no longer enableble, support is dropped
  * gnutls: wire GROUP-X25519-KYBER768 to X25519-KYBER768
  * TEST-PQ: disable pure Kyber768
  * DEFAULT: switch to rh-allow-sha1-signatures = no...
  * java: drop unused javasystem backend
  * java: stop specifying jdk.tls.namedGroups in javasystem
  * ec_min_size: introduce and use in java, default to 256
  * java: use and include jdk.disabled.namedCurves
  * BSI: Update BSI policy for new 2024 minimum recommendations
  * fips-mode-setup: flashy ticking warning upon use
  * fips-mode-setup: add another scary "unsupported"
  * BSI: switch to 3072 minimum RSA key size
  * java: make hash, mac and sign more orthogonal
  * java: specify jdk.tls.namedGroups system property
  * java: respect more key size restrictions
  * java: disable anon ciphersuites, tying them to NULL...
  * java: start controlling / disable DTLSv1.0
  * nss: wire KYBER768 to XYBER768D00</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1762776001">- Adapt the manpages to SUSE/openSUSE:
  * Add crypto-policies-SUSE-manpages.patch
  * Compress all the man pages for update-crypto-policies.8.gz,
    crypto-policies.7.gz, fips-finish-install.8.gz and
    fips-mode-setup.8.gz into man-crypto-policies.tar.xz</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1762862400">- Fix the testsuite:
  * Port all the policy changes to the config files in the test suite.
  * Use the newly introduced SKIP_LINTING=1 option.
  * Rebase crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1764936000">- Update to version 20251128.19878fe:
  * nss: enable ML-DSA
  * gnutls: do enabled-curve for hybrids with said curve
  * openssl: allow disabling all TLS / DTLS protocols
  * openssh: support mlkem768nistp256-sha256 and mlkem1024nistp384-sha384
  * Revert "Do not include EdDSA in FIPS policy"
  * openssl: let TLS 1.3 brainpool groups get used for key shares
  * sequoia: register "eddsa" as an alias to EDDSA-ED25519
  * Makefile: unbreak coverage testing on rawhide
  * tests/unittest_preprocess_text: catch 3 warnings separately
  * Rebase patches:
  - crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch
  - crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch</changelog>
  <changelog author="JS &lt;obs.coke518@passinbox.com&gt;" date="1774958400">- Disable the use of posix_spawn() under qemu user-mode emulation.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1776859200">- Modify the output of fips-mode-setup to hint the user when
  setting the FIPS mode in transactional systems to use the
  command 'transactional-update setup-fips'. (bsc#1262315)</changelog>
</package>
<package pkgid="db1e5828d9d1c43c49b90729b0b8d6e30150aa6b4eade4a046f19e6d773eb5acb9c9d779610d86c7b1b7c6e1f0195d8f953e5709b3ca240476a46a30f49da586" name="libopenssl-3-devel" arch="i586">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="656ae8b3fc52e33a92e73355cf4dc8e1b4d7b55f52c4ee455535ed45cf353e5387fcc8d910a2d0d47c9821e62f07869765c4a36b3613823771672281759bd57b" name="libopenssl-3-devel" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="8348c41245737016b417954de4b4831cb2d0cc63978927ecffecdd4eb14c5041ef7474e489a79eab3818288b2233f3ad7b8573b2d91dcb9beec305bd8d3d7693" name="libopenssl-3-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="7e8285c229de207604880b29308c14929258cf88444e39f8bd6ad3789ea5ed2be2fb87fd06d465d56bee2011e230f7dd3f1e12466e2ded9dabeb6ffacd34e3e8" name="libopenssl-3-fips-provider" arch="i586">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="7cf36ba3761bcbc55fa010092210dc0c12d05d3570f49b7fe70698a940554e4f1d5a540e5767cc607be5160da3cab5135d2cc9193fa167cbfa5e35049939ad06" name="libopenssl-3-fips-provider" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="6abddf2d61f8cf22c96ae0ef56db9544f632f4460a7f36459f1cc1360d3ee5ca67a37010d69dda84c4ee61ac84628555c6fdd18d7b68d903129de6dd5a8e8f6f" name="libopenssl-3-fips-provider-32bit" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="7ab78cdde1355657ff373ea0799fdde0edea21d733fa4bd4095cdbcc2c43365ce2c74c521628e72e9c3f1d78b3690dea6155bcb7a3dfaca4f3e97f8ff14badb1" name="libopenssl-3-fips-provider-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="f4069e56ef65635d6c966b9a926cb4485cf31922079a773cd804e8e2098591a53f9a2a6bd735e58fbe6eb0076d05da34b5ecf9fc6eaad37c9a51deabf597828c" name="libopenssl-3-fips-provider-debuginfo" arch="i586">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="20568e4eb86b30952eb3f4df65043ff0504a1b95bfcb746c54eacbecadfdb38c8c6d566f0ab37745a22018f4a13ff14eac058b8add63856920a65bbb6d771281" name="libopenssl-3-fips-provider-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="a063c0f46262ba5cee9c287d18b7b0a1b2657f233c4270c751b196413e88b216e763455b0dc37a39ebf30ea02a993f578adeb30c5435459e6c00e44b7e9b7899" name="libopenssl-3-fips-provider-x86-64-v3" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="fc58f49095d1b8cbbf8c2287de290a0e751c1f15859a3f9c47b4aef9f7a168806f0cdd9804eb83771dd5da08801789a40d911dc81cec48fdd155d4f739c52d41" name="libopenssl-3-fips-provider-x86-64-v3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="333a61599ec4c0b5634eccb786a8997d1bf7953a8bbcd028d67a9a78f0be3492776ceaf64bf0b1a69f15c9799161eed5634495723780d9bee196fea6b5f9b4bc" name="libopenssl-devel" arch="noarch">
  <version epoch="0" ver="3.5.3" rel="39.1"/>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1675771200">- Update to 3.0.8</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1678795200">- Update to 3.1.0</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1685448000">- Update to 3.1.1</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1687262400">- Improve cross-package provides/conflicts [boo#1210313]
  * Add Conflicts: openssl(cli) for mutual exclusion between
    openssl, openssl-1_0_0 and libressl.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1690891200">- Update to 3.1.2</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1695124800">- Update to 3.1.3</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1698148800">- Update to 3.1.4</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1706529600">- New libopenssl-fips-provider package.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1708689600">- Build the 32bit flavor of libopenssl-fips-provider [bsc#1220232]
  * Update baselibs.conf</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1729512000">- Update to 3.1.7</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1729857600">- Update to 3.2.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1729857601">- Update to 3.2.1</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1730116800">- Update to 3.2.3</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1739275200">- Update to 3.2.4</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1758110401">- Update to 3.6.0</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774267200">- Revert to 3.5.3</changelog>
</package>
<package pkgid="f18fcc16826ac642e8c20b432c20d92f3977fd62164409ace7566a534059c96a75721fae733392b6d0a2113f520a738248eb1294cbdc7b6b79a8a9afc0cd51f3" name="libopenssl-fips-provider" arch="noarch">
  <version epoch="0" ver="3.5.3" rel="39.1"/>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1675771200">- Update to 3.0.8</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1678795200">- Update to 3.1.0</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1685448000">- Update to 3.1.1</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1687262400">- Improve cross-package provides/conflicts [boo#1210313]
  * Add Conflicts: openssl(cli) for mutual exclusion between
    openssl, openssl-1_0_0 and libressl.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1690891200">- Update to 3.1.2</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1695124800">- Update to 3.1.3</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1698148800">- Update to 3.1.4</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1706529600">- New libopenssl-fips-provider package.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1708689600">- Build the 32bit flavor of libopenssl-fips-provider [bsc#1220232]
  * Update baselibs.conf</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1729512000">- Update to 3.1.7</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1729857600">- Update to 3.2.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1729857601">- Update to 3.2.1</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1730116800">- Update to 3.2.3</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1739275200">- Update to 3.2.4</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1758110401">- Update to 3.6.0</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774267200">- Revert to 3.5.3</changelog>
</package>
<package pkgid="5f7a709324cf7cd2a7370cd22d414c8777e8ee439b127a8becf5163540a5a1119a412ed75793d4d90ccd9b4f9763781e3c7acf4a23ce34e68a211ab2c80772f6" name="libopenssl3" arch="i586">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="7e32237db4a6efc8c3932c26beb765e873f51659ec2970d66f9949c5b123308443aa09452a057e5f1d3effa9c24edc5aa8655622a3d120097b59d902455a764f" name="libopenssl3" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="97aad6826b72e2725d95d2aa929bd8613486cb4ffe97ce046911c8ea154e731678a7a531c7d412c767c7943bf7cc0c18a7e695e5595c41e19c924180ae6c92cf" name="libopenssl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="fadb4368f1c7e865e44f4ed4f5d6b2e96b4841dce53ee074b841f98fd951d7cc8b47516b5d55120e1cff014aa54f990f45fd13eaecb9c1db3c4cf595c9af07e3" name="libopenssl3-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="5e15ff090fb6ab935bf48d1af010431cb679535b061ca434d9f52de7f3537aeda2264506762dd09033b6e4fb28826df6500b06f4bf1f46b63e39b3170c55a63c" name="libopenssl3-debuginfo" arch="i586">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="9e6ad4f36c4377d63c029f0d7d2aea85e122963db7899a6a883f09f03048281a32aa336638419cbbb3acc2e0770b40558b0aad4073d10011fc3358b5f7101355" name="libopenssl3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="43a62eb51b669e05dab73df7d8e9343a9edee7f165de7cbc2776e12caf26e5138ee179c26c6ab3d0c164e1dfdcf3db4fafaff7a1256ab0be192d9fa736781d34" name="libopenssl3-x86-64-v3" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="5a72a6b157d2c4401ddcba6185d34aa67e3958373b6cf9009109bc38f30d217f8e7238146cfe318c38c786b829e3d9fb6c953eb32be16b8b776d4f1e997bed2f" name="libopenssl3-x86-64-v3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="0b181905acf943ed948c5d58289761556c207a36f61054479ddb4a4f0bda97927cc37106a2398803025a2062afed7dadcc61a02dc58929fb51a129f85417f962" name="openssl-3" arch="i586">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="77ddcf6f017868f75ae97dc25b4c233e556fe45c6a09706085aebd51121edf0ac15ac4bb493e2d45a4f67efd8458bd87ea7db421cb58952ce60097b8a8bf2ba2" name="openssl-3" arch="src">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="ea77b37de262213745a10599a88ef82871882a2f732422b61d480e8fe407c22217b98db7318b749e9b5bd77d72d930cb1e8225fb9af87b641b6567023dfe6136" name="openssl-3" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="fe99c74dc2abfb832ef11a75d6b5b4e32ca26f17a77d37450bd1b5f779aa850f37e93a3413accf145b245e504db5f1e0523dc4c7547112d12fe665edd57820e0" name="openssl-3-debuginfo" arch="i586">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="1739e4cec88810fdd3a32d2c89faf1b377ed3aa2cf3661d06536bf39c019dd8155e9ae3c43eece5f0d363698d6e01b9530c619d1cd515ec5c79a67f1a6377862" name="openssl-3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="7e86ebbe766811a78eafb2bd29931365409923ef0078fc7c6da35be5a71bbca2ca7b1357a7043f5c8c9b81f5a0bfa5c1e07f6495d495c2376b0d637319e43a3a" name="openssl-3-debugsource" arch="i586">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="ed69073c1ad49130f84eea1ecc932767337f8107b4c5eef227a8b530bf4ccf9048af5da19718f6a6a0275d0b4f93b90dcb54c568b031c1d8ef94ed0371518dc1" name="openssl-3-debugsource" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="f917a47c4464620f7e13385a2703f96e6a686d6c850600306e93e0b91a8693618a48c5630373090f0ee9aec2b5646814bbed8d6033fcff471bb1678c98a3eb4f" name="openssl-3-doc" arch="noarch">
  <version epoch="0" ver="3.5.3" rel="169.1"/>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1742558400">- FIPS: Mark SHA-1 as non-approved in the SLI. [jsc#PED-12224]
  * Add openssl-FIPS-Mark-SHA1-as-nonapproved.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0:
  * Security fixes:
  - [bsc#1243459, CVE-2025-27587] Minerva side channel vulnerability in P-384
  * Changes:
  - Default encryption cipher for the req, cms, and smime applications
    changed from des-ede3-cbc to aes-256-cbc.
  - The default TLS supported groups list has been changed to include
    and prefer hybrid PQC KEM groups. Some practically unused groups
    were removed from the default list.
  - The default TLS keyshares have been changed to offer X25519MLKEM768
    and and X25519.
  - All BIO_meth_get_*() functions were deprecated.
  * New features:
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - A new configuration option no-tls-deprecated-ec to disable support
    for TLS groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS
    provider to use the JITTER seed source
  - Support for central key generation in CMP
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - Support for multiple TLS keyshares and improved TLS key establishment
    group configurability
  - API support for pipelining in provided cipher algorithms
  * Remove patches:
  - openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  - openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  - openssl-3-add-defines-CPACF-funcs.patch
  - openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch
  - openssl-3-add-xof-state-handling-s3_absorb.patch
  - openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  - openssl-3-fix-s390x_shake_squeeze.patch
  - openssl-3-hw-acceleration-aes-xts-s390x.patch
  - openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  - openssl-3-fix-state-handling-keccak_final_s390x.patch
  - openssl-3-add-hw-acceleration-hmac.patch
  - openssl-3-fix-state-handling-sha3_final_s390x.patch
  - openssl-3-fix-hmac-digest-detection-s390x.patch
  - openssl-3-support-multiple-sha3_squeeze_s390x.patch
  - openssl-3-fix-sha3-squeeze-ppc64.patch
  - openssl-3-fix-s390x_sha3_absorb.patch
  - openssl-3-fix-state-handling-shake_final_s390x.patch
  - openssl-3-add_EVP_DigestSqueeze_api.patch
  - openssl-FIPS-enforce-security-checks-during-initialization.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-FIPS-Mark-SHA1-as-nonapproved.patch
  - openssl-Remove-EC-curves.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-Revert-Improve-FIPS-RSA-keygen-performance.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-3-fix-quic_multistream_test.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-Use-FFDHE2048-in-self-test.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-pbkdf2-Set-indicator-if-pkcs5-param-disabled-checks.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * Rebased patches:
  - openssl-pkgconfig.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Force-FIPS.patch
  - openssl-disable-fipsinstall.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-Disable-explicit-ec.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Expose-a-FIPS-indicator.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-rand-Forbid-truncated-hashes-SHA-3-in-FIPS-prov.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  - openssl-FIPS-Enforce-error-state.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch
  - openssl-skip-quic-pairwise.patch
  * Add patches:
  - openssl-FIPS-Fix-encoder-decoder-negative-test.patch
  - openssl-FIPS-SUSE-FIPS-module-version.patch
  - openssl-FIPS-EC-disable-weak-curves.patch
  - openssl-FIPS-NO-DES-support.patch
  - openssl-FIPS-NO-DSA-Support.patch
  - openssl-FIPS-NO-Kmac.patch
  - openssl-FIPS-NO-PQ-ML-SLH-DSA.patch
  - openssl-shared-jitterentropy.patch
  - openssl-rh-allow-sha1-signatures.patch
  - openssl-disable-75-test_quicapi-test.patch
- Changes between 3.3.0 and 3.4.0:
  * Changes:
  - Deprecation of TS_VERIFY_CTX_set_* functions and addition of
    replacement TS_VERIFY_CTX_set0_* functions with improved semantics
  - The X25519 and X448 key exchange implementation in the FIPS provider
    is unapproved and has fips=no property.
  - SHAKE-128 and SHAKE-256 implementations have no default digest length
    anymore. That means these algorithms cannot be used with
    EVP_DigestFinal/_ex() unless the xoflen param is set before.
  - Setting config_diagnostics=1 in the config file will cause errors to
    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an
    error in the ssl module configuration.
  - An empty renegotiate extension will be used in TLS client hellos
    instead of the empty renegotiation SCSV, for all connections with a
    minimum TLS version &gt; 1.0.
  - Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
    SSL_CTX_flush_sessions() functions in favor of their respective _ex
    functions which are Y2038-safe on platforms with Y2038-safe time_t
  * New features:
  - Support for directly fetched composite signature algorithms such as
    RSA-SHA2-256 including new API functions
  - FIPS indicators support in the FIPS provider and various updates of
    the FIPS provider required for future FIPS 140-3 validations
  - Implementation of RFC 9579 (PBMAC1) in PKCS#12
  - An optional additional random seed source RNG JITTER using a statically
    linked jitterentropy library
  - New options -not_before and -not_after for explicit setting start and
    end dates of certificates created with the req and x509 apps
  - Support for integrity-only cipher suites TLS_SHA256_SHA256 and
    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
  - Support for retrieving certificate request templates and CRLs in CMP
  - Support for additional X.509v3 extensions related to Attribute Certificates
  - Initial Attribute Certificate (RFC 5755) support
  - Possibility to customize ECC groups initialization to use precomputed
    values to save CPU time and use of this feature by the P-256 implementation
- Changes between 3.2.0 and 3.3.0:
  * Changes:
  - Optimized AES-CTR for ARM Neoverse V1 and V2
  - Various optimizations for cryptographic routines using RISC-V vector
    crypto extensions
  - Added assembly implementation for md5 on loongarch64
  - Accept longer context for TLS 1.2 exporters
  - The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value of
    [0|no|false|off] will disable the setting.
  - In openssl speed, changed the default hash function used with hmac from
    md5 to sha256.
  - The -verify option to the openssl crl and openssl req will make the
    program exit with 1 on failure.
  - The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(),
    and related functions have been augmented to check for a minimum length
    of the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
  - OPENSSL_sk_push() and sk__push() functions now return 0 instead of -1
    if called with a NULL stack argument.
  - New limit on HTTP response headers is introduced to HTTP client.
    The default limit is set to 256 header lines.
  * Bug fixes and mitigations:
  - The BIO_get_new_index() function can only be called 127 times before
    it reaches its upper bound of BIO_TYPE_MASK and will now return -1
    once its exhausted.
  * new features:
  - Support for qlog for tracing QUIC connections has been added
  - Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.
  - Added APIs to allow disabling implicit QUIC event processing for QUIC
    SSL objects
  - Added APIs to allow querying the size and utilisation of a QUIC
    stream's write buffer
  - New API SSL_write_ex2, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.
  - Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.
  - Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.
  - The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.
  - The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested
  - Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled.
  - Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config
    options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with ? character are ignored
    and the configuration will still be used.
  - Added -set_issuer and -set_subject options to openssl x509 to override
    the Issuer and Subject when creating a certificate. The -subj option
    now is an alias for -set_subject.
  - Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
  - New option SSL_OP_PREFER_NO_DHE_KEX, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over
    PSK with DHE, if both are available.
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.
  - Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.
  - Support for using certificate profiles and extened delayed delivery in CMP</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747051200">- FIPS: Restore the check to deny SHA1 signatures in FIPS mode and
  the functionality to allow/deny via crypto-policies. [jsc#PED-12224]
  * Remove openssl-rh-allow-sha1-signatures.patch
  * Add patches:
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1747310400">- FIPS: Fix the speed command in FIPS mode for KMAC
  * Add openssl-FIPS-Fix-openssl-speed-KMAC.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1748260800">- Security fix: [bsc#1243564, CVE-2025-4575]
  * Fix the x509 application adding trusted use instead of rejected use
  * Add openssl-CVE-2025-4575.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1748520000">- Fix P-384 curve on lower-than-P9 PPC64 targets [bsc#1243014]
  * Add openssl-Fix-P384-on-P8-targets.patch [a72f753c]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1:
  * Fix x509 application adds trusted use instead of rejected use.
    [bsc#1243564, CVE-2025-4575]
- Remove patches:
  * openssl-Fix-P384-on-P8-targets.patch
  * openssl-CVE-2025-4575.patch
- Rebase patches:
  * openssl-Allow-disabling-of-SHA1-signatures.patch
  * openssl-FIPS-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  * openssl-FIPS-NO-DES-support.patch
- Fix a bogus warning caused by -Wfree-nonheap-object
  * Add patch openssl-Fix-Wfree-nonheap-object-warning.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1753704000">- Use termios instead of obsolete termio</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1753876800">- Disable LTO for userspace livepatching [jsc#PED-13245]</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2:
  * Miscellaneous minor bug fixes.
  * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
    This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
  * openssl-FIPS-140-3-keychecks.patch
  * openssl-FIPS-NO-DES-support.patch
  * openssl-FIPS-enforce-EMS-support.patch
  * openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3:
  * Added FIPS 140-3 PCT on DH key generation.
  * Fixed the synthesised OPENSSL_VERSION_NUMBER.
- Rebase patches:
  * openssl-DH-Disable-FIPS-186-4-type-parameters-in-FIPS-mode.patch
  * openssl-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  * openssl-FIPS-limit-rsa-encrypt.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1759320000">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl-CVE-2025-9230.patch
- Security fix: [bsc#1250233 CVE-2025-9231]
  * Fix timing side-channel in SM2 algorithm on 64 bit ARM
  * Add patch openssl-CVE-2025-9231.patch
- Security fix: [bsc#1250234 CVE-2025-9232]
  * Fix out-of-bounds read in HTTP client no_proxy handling
  * Add patch openssl-CVE-2025-9232.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1769515200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * TLS 1.3 CompressedCertificate excessive memory allocation
  - openssl-CVE-2025-66199.patch [bsc#1256833, CVE-2025-66199]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * 'openssl dgst' one-shot codepath silently truncates inputs greater than 16MB
  - openssl-CVE-2025-15469.patch [bsc#1256832, CVE-2025-15469]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch
  * Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
  - openssl-CVE-2025-11187.patch [bsc#1256829, CVE-2025-11187]
  * NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
  - openssl-CVE-2025-15468.patch [bsc#1256831, CVE-2025-15468]
- Enable livepatching support for ppc64le [bsc#1257274]</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1769774400">- Do not guard ulp-macros with arch x86-64.</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1772193600">- Enable MD2 in legacy provider ( jsc#PED-15724 )</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774180800">- Security fix:
  * CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652)
    Added patch openssl-CVE-2026-2673.patch
    Added patch openssl-crypto-mem.c-factor-out-memory-allocation-failure-reporting.patch
    Added patch openssl-Add-array-memory-allocation-routines.patch
- Remove showciphers.c in favor of openssl ciphers
- Use %ldconfig_scriptlets</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS
    EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add	patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-CVE-2026-28390.patch
- Fix NULL pointer dereference when processing an OCSP response
  * Add patch openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1775563200">- Adapt spec file for immutability via systemd-tmpfiles (jsc#PED-14813)
- Fix check %{suse_version} &gt; 1600 (jsc#PED-15816)</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1778673600">- POWER performance enhancements
  * Optimized MLDSA NTT, supports p8 and above architectures (jsc#PED-14569)
  * Add patch:
    openssl-ppc64le-Optimized-MLKEM-NTT-supports-p8-ISA-2.07-and-above-architectures.patch</changelog>
  <changelog author="Angel Yankov &lt;angel.yankov@suse.com&gt;" date="1780920000">- Security fixes:
  * CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357)
  * CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356)
  * CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353)
  * CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355)
  * CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350)
  * CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351)
  * CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352)
  * CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349)
  * CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345)
  * CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347)
  * CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344)
  * CVE-2026-9076:  Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341)
  * CVE-2026-7383:  Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340)
  * CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342)
  * Add patches:
    openssl-CVE-2026-45447.patch
    openssl-CVE-2026-45446.patch
    openssl-CVE-2026-42770.patch
    openssl-CVE-2026-45445.patch
    openssl-CVE-2026-42767.patch
    openssl-CVE-2026-42768.patch
    openssl-CVE-2026-42769.patch
    openssl-CVE-2026-42766.patch
    openssl-CVE-2026-34183.patch
    openssl-CVE-2026-42764.patch
    openssl-CVE-2026-34182.patch
    openssl-CVE-2026-9076.patch
    openssl-CVE-2026-7383.patch
    openssl-CVE-2026-34180.patch</changelog>
</package>
<package pkgid="cc70ef7c577c78363fa2970cdbb90e6208f387a04903fe1fbe5c8187863ede460cff74af0038412f33415fe925b63b270483444b0a95773faef9246791c755e9" name="openssl" arch="noarch">
  <version epoch="0" ver="3.5.3" rel="39.1"/>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1675771200">- Update to 3.0.8</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1678795200">- Update to 3.1.0</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1685448000">- Update to 3.1.1</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1687262400">- Improve cross-package provides/conflicts [boo#1210313]
  * Add Conflicts: openssl(cli) for mutual exclusion between
    openssl, openssl-1_0_0 and libressl.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1690891200">- Update to 3.1.2</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1695124800">- Update to 3.1.3</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1698148800">- Update to 3.1.4</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1706529600">- New libopenssl-fips-provider package.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1708689600">- Build the 32bit flavor of libopenssl-fips-provider [bsc#1220232]
  * Update baselibs.conf</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1729512000">- Update to 3.1.7</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1729857600">- Update to 3.2.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1729857601">- Update to 3.2.1</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1730116800">- Update to 3.2.3</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1739275200">- Update to 3.2.4</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1758110401">- Update to 3.6.0</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774267200">- Revert to 3.5.3</changelog>
</package>
<package pkgid="5267839ec8079fa329bdd7cb495e71525afbe4c69c6ec0681d6dec027ff5767de6c4b2d19f4e0026028d8a9d229b9a9e8dde898a8796f000d1987fe885ca3bc8" name="openssl" arch="src">
  <version epoch="0" ver="3.5.3" rel="39.1"/>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1675771200">- Update to 3.0.8</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1678795200">- Update to 3.1.0</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1685448000">- Update to 3.1.1</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1687262400">- Improve cross-package provides/conflicts [boo#1210313]
  * Add Conflicts: openssl(cli) for mutual exclusion between
    openssl, openssl-1_0_0 and libressl.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1690891200">- Update to 3.1.2</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1695124800">- Update to 3.1.3</changelog>
  <changelog author="Otto Hollmann &lt;otto.hollmann@suse.com&gt;" date="1698148800">- Update to 3.1.4</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1706529600">- New libopenssl-fips-provider package.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1708689600">- Build the 32bit flavor of libopenssl-fips-provider [bsc#1220232]
  * Update baselibs.conf</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1729512000">- Update to 3.1.7</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1729857600">- Update to 3.2.0</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1729857601">- Update to 3.2.1</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1730116800">- Update to 3.2.3</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1739275200">- Update to 3.2.4</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1743768000">- Update to 3.5.0</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1751889600">- Update to 3.5.1</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1754395200">- Update to 3.5.2</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1758110400">- Update to 3.5.3</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1758110401">- Update to 3.6.0</changelog>
  <changelog author="Lucas Mulling &lt;lucas.mulling@suse.com&gt;" date="1774267200">- Revert to 3.5.3</changelog>
</package>
</otherdata>