New OpenSSL releases 3.0.5 and 1.1.1q

[Angus Robertson 574]

OpenSSL has released new versions of the two supported branches, 3.0.5 and 1.1.1q, Windows binaries are available from

http://wiki.overbyte.eu/wiki/index.php/ICS_Download or https://www.magsys.co.uk/delphi/magics.asp .

OpenSSL 3.0.5 fixes a serious bug on some X86_64 CPUs in 3.0.4, a version we never released.  Also a moderate security bug relating to AES OCB encryption, but this is not used by TLS ciphers.
Also a moderate security bug with the c_rehash script that allows command injection, we don't use that either.

 

OpenSSL 1.1.1q fixes the AES OCB and c_rehash bugs.

 

Separately YuOpenSSL has released both these versions as commercial DCUs allowing applications to be used with OpenSSL without needing separate DLLs.

 

Angus