New OpenSSL releases 3.1.3, 3.0.11 and 1.1.1w

[Angus Robertson 574]

 OpenSSL has released new versions of the three active branches.

 

These releases fix a low severity issue with the Win64 POLY1305 MAC implementation corrupting XMM registers ([CVE-2023-4807]) which  applies only to processors released in the last two or three years supporting AVX512-IFMA instructions.  
 

Windows binaries are available in SVN and the overnight zip file (tomorrow) and separately from https://wiki.overbyte.eu/wiki/index.php/ICS_Download or https://www.magsys.co.uk/delphi/magics.asp

 

Separately, YuOpenSSL has released 3.0.11 and 1.1.1w as commercial DCUs allowing applications to be used with OpenSSL without needing separate DLLs.

 

Note that 1.1.1w is the last release of that version, it is now out of support unless you have an OpenSSL Premium Level Support contract for $50,000/year.

 

Angus