# changelog

author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.5-6
changelog:
  - CVE-2022-3602: X.509 Email Address Buffer Overflow
  - CVE-2022-3786: X.509 Email Address Buffer Overflow
    Resolves: CVE-2022-3602
    Resolves: CVE-2022-3786


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-1
changelog:
  - Rebase to upstream version 3.0.7
  - C99 compatibility in downstream-only 0032-Force-fips.patch
    Resolves: rhbz#2152504
  - Adjusting include for the FIPS_mode macro
    Resolves: rhbz#2083876


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.8-1
changelog:
  - Rebase to upstream version 3.0.8
    Resolves: CVE-2022-4203
    Resolves: CVE-2022-4304
    Resolves: CVE-2022-4450
    Resolves: CVE-2023-0215
    Resolves: CVE-2023-0216
    Resolves: CVE-2023-0217
    Resolves: CVE-2023-0286
    Resolves: CVE-2023-0401


author: Sahana Prasad <sahana@redhat.com> - 1:3.0.8-2
changelog:
  - Upload new upstream sources without manually hobbling them.
  - Remove the hobbling script as it is redundant. It is now allowed to ship
    the sources of patented EC curves, however it is still made unavailable to use
    by compiling with the 'no-ec2m' Configure option. The additional forbidden
    curves such as P-160, P-192, wap-tls curves are manually removed by updating
    0011-Remove-EC-curves.patch.
  - Enable Brainpool curves.
  - Apply the changes to ec_curve.c and  ectest.c as a new patch
    0010-Add-changes-to-ectest-and-eccurve.patch instead of replacing them.
  - Modify 0011-Remove-EC-curves.patch to allow Brainpool curves.
  - Modify 0011-Remove-EC-curves.patch to allow code under macro OPENSSL_NO_EC2M.
    Resolves: rhbz#2130618, rhbz#2141672


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.9-1
changelog:
  - Rebase to upstream version 3.0.9
    Resolves: CVE-2023-0464
    Resolves: CVE-2023-0465
    Resolves: CVE-2023-0466
    Resolves: CVE-2023-1255
    Resolves: CVE-2023-2650


