FreeBSD-EN-21:24.libcrypto : OpenSSL 1.1.1e API functions not exported
Versions Affected : All versions prior to TrueNAS 12.0-U6
Description
New API functions added in OpenSSL 1.1.1e and later were not publicly exported to applications.
Applications trying to use new API functions added in OpenSSL 1.1.1e or later would fail to build with a link error.
Workaround
No workaround is available. However, the APIs added in OpenSSL 1.1.1e and later are obscure and not used by many applications. In particular, none of the affected APIs are used by applications using libssl from OpenSSL for Transport Layer Security (TLS)
Mitigation
- Upgrade to TrueNAS 12.0-U6 or later.
Commit
- FreeBSD Revision : r370391
- TrueNAS Commit : 8f00aba
- TrueNAS Commit : f4242bd
- JIRA Ticket : NAS-111999