node-aix-ppc64 20.3.0 → 20.3.1

package/CHANGELOG.md

@@ -8,7 +8,8 @@
 </tr>
 <tr>
 <td>
-<b><a href="#20.3.0">20.3.0</a></b><br/>
+<b><a href="#20.3.1">20.3.1</a></b><br/>
+<a href="#20.3.0">20.3.0</a><br/>
 <a href="#20.2.0">20.2.0</a><br/>
 <a href="#20.1.0">20.1.0</a><br/>
 <a href="#20.0.0">20.0.0</a><br/>
@@ -38,6 +39,48 @@
   * [io.js](CHANGELOG_IOJS.md)
   * [Archive](CHANGELOG_ARCHIVE.md)
 
+<a id="20.3.1"></a>
+
+## 2023-06-20, Version 20.3.1 (Current), @RafaelGSS
+
+This is a security release.
+
+### Notable Changes
+
+The following CVEs are fixed in this release:
+
+* [CVE-2023-30581](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30581): `mainModule.__proto__` Bypass Experimental Policy Mechanism (High)
+* [CVE-2023-30584](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30584): Path Traversal Bypass in Experimental Permission Model (High)
+* [CVE-2023-30587](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30587): Bypass of Experimental Permission Model via Node.js Inspector (High)
+* [CVE-2023-30582](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30582): Inadequate Permission Model Allows Unauthorized File Watching (Medium)
+* [CVE-2023-30583](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30583): Bypass of Experimental Permission Model via fs.openAsBlob() (Medium)
+* [CVE-2023-30585](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30585): Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
+* [CVE-2023-30586](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30586): Bypass of Experimental Permission Model via Arbitrary OpenSSL Engines (Medium)
+* [CVE-2023-30588](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30588): Process interuption due to invalid Public Key information in x509 certificates (Medium)
+* [CVE-2023-30589](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30589): HTTP Request Smuggling via Empty headers separated by CR (Medium)
+* [CVE-2023-30590](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30590): DiffieHellman does not generate keys after setting a private key (Medium)
+* OpenSSL Security Releases
+  * [OpenSSL security advisory 28th March](https://www.openssl.org/news/secadv/20230328.txt).
+  * [OpenSSL security advisory 20th April](https://www.openssl.org/news/secadv/20230420.txt).
+  * [OpenSSL security advisory 30th May](https://www.openssl.org/news/secadv/20230530.txt)
+
+More detailed information on each of the vulnerabilities can be found in [June 2023 Security Releases](https://nodejs.org/en/blog/vulnerability/june-2023-security-releases/) blog post.
+
+### Commits
+
+* \[[`dac08dafc9`](https://github.com/nodejs/node/commit/dac08dafc9)] - **crypto**: handle cert with invalid SPKI gracefully (Tobias Nießen) [nodejs-private/node-private#393](https://github.com/nodejs-private/node-private/pull/393)
+* \[[`d274c3babc`](https://github.com/nodejs/node/commit/d274c3babc)] - **crypto,https,tls**: disable engines if perms enabled (Tobias Nießen) [nodejs-private/node-private#409](https://github.com/nodejs-private/node-private/pull/409)
+* \[[`5621c1de38`](https://github.com/nodejs/node/commit/5621c1de38)] - **deps**: update archs files for openssl-3.0.9-quic1 (Node.js GitHub Bot) [#48402](https://github.com/nodejs/node/pull/48402)
+* \[[`771caa9f1c`](https://github.com/nodejs/node/commit/771caa9f1c)] - **deps**: upgrade openssl sources to quictls/openssl-3.0.9-quic1 (Node.js GitHub Bot) [#48402](https://github.com/nodejs/node/pull/48402)
+* \[[`0459bf9c99`](https://github.com/nodejs/node/commit/0459bf9c99)] - **doc,test**: clarify behavior of DH generateKeys (Tobias Nießen) [nodejs-private/node-private#426](https://github.com/nodejs-private/node-private/pull/426)
+* \[[`27e20501aa`](https://github.com/nodejs/node/commit/27e20501aa)] - **http**: disable request smuggling via empty headers (Paolo Insogna) [nodejs-private/node-private#427](https://github.com/nodejs-private/node-private/pull/427)
+* \[[`9c17e335f1`](https://github.com/nodejs/node/commit/9c17e335f1)] - **msi**: do not create AppData\Roaming\npm (Tobias Nießen) [nodejs-private/node-private#408](https://github.com/nodejs-private/node-private/pull/408)
+* \[[`b51124c637`](https://github.com/nodejs/node/commit/b51124c637)] - **permission**: handle fs path traversal (RafaelGSS) [nodejs-private/node-private#403](https://github.com/nodejs-private/node-private/pull/403)
+* \[[`ebc5927adc`](https://github.com/nodejs/node/commit/ebc5927adc)] - **permission**: handle fs.openAsBlob (RafaelGSS) [nodejs-private/node-private#405](https://github.com/nodejs-private/node-private/pull/405)
+* \[[`c39a43bff5`](https://github.com/nodejs/node/commit/c39a43bff5)] - **permission**: handle fs.watchFile (RafaelGSS) [nodejs-private/node-private#404](https://github.com/nodejs-private/node-private/pull/404)
+* \[[`d0a8264ec9`](https://github.com/nodejs/node/commit/d0a8264ec9)] - **policy**: handle mainModule.\_\_proto\_\_ bypass (RafaelGSS) [nodejs-private/node-private#416](https://github.com/nodejs-private/node-private/pull/416)
+* \[[`3df13d5a79`](https://github.com/nodejs/node/commit/3df13d5a79)] - **src,permission**: restrict inspector when pm enabled (RafaelGSS) [nodejs-private/node-private#410](https://github.com/nodejs-private/node-private/pull/410)
+
 <a id="20.3.0"></a>
 
 ## 2023-06-08, Version 20.3.0 (Current), @targos

package/include/node/node.exp

@@ -3258,6 +3258,7 @@ OSSL_CMP_MSG_http_perform
 OSSL_CMP_MSG_it
 OSSL_CMP_MSG_new
 OSSL_CMP_MSG_read
+OSSL_CMP_MSG_update_recipNonce
 OSSL_CMP_MSG_update_transactionID
 OSSL_CMP_MSG_write
 OSSL_CMP_PKIBODY_free
@@ -5960,22 +5961,22 @@ _GLOBAL__F__ZN2v88internal6torque5Block13SetInputTypesERKNS1_5StackIPKNS1_4TypeE
 _GLOBAL__F__ZN2v88internal6torque9KytheData21AddConstantDefinitionEPKNS1_5ValueE
 _GLOBAL__F__ZNK2v88internal6torque3cpp8Function22PrintDeclarationHeaderERSoi
 _GLOBAL__F__ZNK2v88internal6torque4Rule9RunActionEPKNS1_4ItemERKNS1_11LexerResultE
-_GLOBAL__I_65535_0_.._deps_v8_src_compiler_int64_lowering.cc_E21CEA7D_0x5333dee00c141cf0
-_GLOBAL__I_65535_0_.._deps_v8_src_compiler_turboshaft_utils.cc_DFF67DD7_0x9415f2318a15dbb2
-_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_gdb_jit.cc_DFF67DD7_0x5b9a92f984a2401
-_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_objects_debug.cc_E21CEA7D_0x67f83ba91582b293
-_GLOBAL__I_65535_0_.._deps_v8_src_execution_arguments.cc_DFF67DD7_0x818d4c18c0ff4a07
-_GLOBAL__I_65535_0_.._deps_v8_src_execution_simulator_base.cc_7874F2D3_0x448cf0d167742335
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_evacuation_verifier.cc_E21CEA7D_0x405408566f56aead
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_factory_base.cc_7874F2D3_0xd9f63bb7b2303c2e
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_heap_verifier.cc_7874F2D3_0x5a5b73fc0cca2c43
-_GLOBAL__I_65535_0_.._deps_v8_src_heap_objects_visiting.cc_DFF67DD7_0x694c0389232d3310
-_GLOBAL__I_65535_0_.._deps_v8_src_objects_tagged_impl.cc_87E8306D_0xc0d098942140c2d6
-_GLOBAL__I_65535_0_.._deps_v8_src_runtime_runtime_trace.cc_E21CEA7D_0x667f0867c82d3de2
-_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_external_pointer_table.cc_87E8306D_0x208cb787e6986c7b
-_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_sandbox.cc_87E8306D_0x2f0ab1046c749870
-_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_testing.cc_7874F2D3_0xa38557a76aa5d8d1
-_GLOBAL__I_65535_0_.._src_connection_wrap.cc_E21CEA7D_0xe8a2f53eefd6b74a
+_GLOBAL__I_65535_0_.._deps_v8_src_compiler_int64_lowering.cc_E21CEA7D_0x873c406ef28b3c84
+_GLOBAL__I_65535_0_.._deps_v8_src_compiler_turboshaft_utils.cc_DFF67DD7_0x168186bcaffdf23a
+_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_gdb_jit.cc_DFF67DD7_0xe2d695e291786a50
+_GLOBAL__I_65535_0_.._deps_v8_src_diagnostics_objects_debug.cc_E21CEA7D_0xb91424806f1105f4
+_GLOBAL__I_65535_0_.._deps_v8_src_execution_arguments.cc_DFF67DD7_0x7be4ee99bd71b58a
+_GLOBAL__I_65535_0_.._deps_v8_src_execution_simulator_base.cc_7874F2D3_0xd22b5187658bb512
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_evacuation_verifier.cc_E21CEA7D_0x482a8a4523413e7b
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_factory_base.cc_7874F2D3_0xcaa571ac99076faa
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_heap_verifier.cc_7874F2D3_0x4481503581611cbd
+_GLOBAL__I_65535_0_.._deps_v8_src_heap_objects_visiting.cc_DFF67DD7_0xf79f03e1ad374537
+_GLOBAL__I_65535_0_.._deps_v8_src_objects_tagged_impl.cc_87E8306D_0x5293429b48df5056
+_GLOBAL__I_65535_0_.._deps_v8_src_runtime_runtime_trace.cc_E21CEA7D_0x4bdbe65e6bf96864
+_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_external_pointer_table.cc_87E8306D_0xdc20af5258e83e46
+_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_sandbox.cc_87E8306D_0xbf580318da80b1a6
+_GLOBAL__I_65535_0_.._deps_v8_src_sandbox_testing.cc_7874F2D3_0x19b70f33a08cba5e
+_GLOBAL__I_65535_0_.._src_connection_wrap.cc_E21CEA7D_0xc38fcc4b6d4199ee
 _GLOBAL__I_65535_0_OPENSSL_ppccap_P
 _GLOBAL__I_65535_0__Z16_register_configv
 _GLOBAL__I_65535_0__Z17_register_symbolsv
@@ -7066,9 +7067,9 @@ _GLOBAL__I_65535_0__ZNK4node3url11BindingData10MemoryInfoEPNS_13MemoryTrackerE
 _GLOBAL__I_65535_0__ZNK4node4quic10TLSContext4sideEv
 _GLOBAL__I_65535_0__ZNK4node4quic6Packet11destinationEv
 _GLOBAL__I_65535_0__ZNK7simdutf14implementation27supported_by_runtime_systemEv
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_enum_verifiers.cc_E21CEA7D_0x9760ef9712c2d84a
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_factory.cc_7874F2D3_0x47db4aed5e0ea7
-_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_torque_defined_classes_tq_csa.cc_E21CEA7D_0xae6e67b2edb23b5c
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_enum_verifiers.cc_E21CEA7D_0x507f5e2aecc8cf64
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_factory.cc_7874F2D3_0xc80fe68dd06f29c6
+_GLOBAL__I_65535_0__home_iojs_build_ws_out_Release_obj_gen_torque_generated_src_objects_torque_defined_classes_tq_csa.cc_E21CEA7D_0x610f5b1dd1b55b0c
 _GLOBAL__I_65535_0_nodedbg_const_ContextEmbedderIndex__kEnvironment__int
 _GLOBAL__I_65535_0_v8dbg_frametype_EntryFrame
 _HZData_73
@@ -51912,6 +51913,8 @@ _ZN4node10permission12FSPermission9RadixTreeD1Ev
 _ZN4node10permission12FSPermission9RadixTreeD2Ev
 _ZN4node10permission16WorkerPermission10is_grantedENS0_15PermissionScopeERKSt17basic_string_viewIcSt11char_traitsIcEE
 _ZN4node10permission16WorkerPermission5ApplyERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEENS0_15PermissionScopeE
+_ZN4node10permission19InspectorPermission10is_grantedENS0_15PermissionScopeERKSt17basic_string_viewIcSt11char_traitsIcEE
+_ZN4node10permission19InspectorPermission5ApplyERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEENS0_15PermissionScopeE
 _ZN4node10permission22ChildProcessPermission10is_grantedENS0_15PermissionScopeERKSt17basic_string_viewIcSt11char_traitsIcEE
 _ZN4node10permission22ChildProcessPermission5ApplyERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEENS0_15PermissionScopeE
 _ZN4node10permission26RegisterExternalReferencesEPNS_25ExternalReferenceRegistryE
@@ -53522,6 +53525,7 @@ _ZN4node35ERR_TLS_PSK_SET_IDENTIY_HINT_FAILEDIJEEEN2v85LocalINS1_5ValueEEEPNS1_7
 _ZN4node35THROW_ERR_CRYPTO_INVALID_MESSAGELENEPN2v87IsolateE
 _ZN4node36RemoveEnvironmentCleanupHookInternalEPNS_9ACHHandleE
 _ZN4node37THROW_ERR_TLS_INVALID_PROTOCOL_METHODIJEEEvPN2v87IsolateEPKcDpOT_
+_ZN4node38ERR_CRYPTO_CUSTOM_ENGINE_NOT_SUPPORTEDIJEEEN2v85LocalINS1_5ValueEEEPNS1_7IsolateEPKcDpOT_
 _ZN4node38ERR_MESSAGE_TARGET_CONTEXT_UNAVAILABLEIJEEEN2v85LocalINS1_5ValueEEEPNS1_7IsolateEPKcDpOT_
 _ZN4node38THROW_ERR_BUFFER_CONTEXT_NOT_AVAILABLEEPN2v87IsolateE
 _ZN4node38THROW_ERR_CRYPTO_UNSUPPORTED_OPERATIONIJEEEvPN2v87IsolateEPKcDpOT_
@@ -53570,6 +53574,7 @@ _ZN4node3url11BindingDataD0Ev
 _ZN4node3url11BindingDataD1Ev
 _ZN4node3url12FromFilePathB5cxx11ESt17basic_string_viewIcSt11char_traitsIcEE
 _ZN4node41ERR_MISSING_TRANSFERABLE_IN_TRANSFER_LISTIJEEEN2v85LocalINS1_5ValueEEEPNS1_7IsolateEPKcDpOT_
+_ZN4node44THROW_ERR_CRYPTO_CUSTOM_ENGINE_NOT_SUPPORTEDIJEEEvPN2v87IsolateEPKcDpOT_
 _ZN4node45THROW_ERR_EXECUTION_ENVIRONMENT_NOT_AVAILABLEEPN2v87IsolateE
 _ZN4node4Blob11HasInstanceEPNS_11EnvironmentEN2v85LocalINS3_5ValueEEE
 _ZN4node4Blob13GetDataObjectERKN2v820FunctionCallbackInfoINS1_5ValueEEE
@@ -72267,6 +72272,11 @@ _ZNSt23_Sp_counted_ptr_inplaceIN4node10permission16WorkerPermissionESaIS2_ELN9__
 _ZNSt23_Sp_counted_ptr_inplaceIN4node10permission16WorkerPermissionESaIS2_ELN9__gnu_cxx12_Lock_policyE2EE14_M_get_deleterERKSt9type_info
 _ZNSt23_Sp_counted_ptr_inplaceIN4node10permission16WorkerPermissionESaIS2_ELN9__gnu_cxx12_Lock_policyE2EED0Ev
 _ZNSt23_Sp_counted_ptr_inplaceIN4node10permission16WorkerPermissionESaIS2_ELN9__gnu_cxx12_Lock_policyE2EED1Ev
+_ZNSt23_Sp_counted_ptr_inplaceIN4node10permission19InspectorPermissionESaIS2_ELN9__gnu_cxx12_Lock_policyE2EE10_M_destroyEv
+_ZNSt23_Sp_counted_ptr_inplaceIN4node10permission19InspectorPermissionESaIS2_ELN9__gnu_cxx12_Lock_policyE2EE10_M_disposeEv
+_ZNSt23_Sp_counted_ptr_inplaceIN4node10permission19InspectorPermissionESaIS2_ELN9__gnu_cxx12_Lock_policyE2EE14_M_get_deleterERKSt9type_info
+_ZNSt23_Sp_counted_ptr_inplaceIN4node10permission19InspectorPermissionESaIS2_ELN9__gnu_cxx12_Lock_policyE2EED0Ev
+_ZNSt23_Sp_counted_ptr_inplaceIN4node10permission19InspectorPermissionESaIS2_ELN9__gnu_cxx12_Lock_policyE2EED1Ev
 _ZNSt23_Sp_counted_ptr_inplaceIN4node10permission22ChildProcessPermissionESaIS2_ELN9__gnu_cxx12_Lock_policyE2EE10_M_destroyEv
 _ZNSt23_Sp_counted_ptr_inplaceIN4node10permission22ChildProcessPermissionESaIS2_ELN9__gnu_cxx12_Lock_policyE2EE10_M_disposeEv
 _ZNSt23_Sp_counted_ptr_inplaceIN4node10permission22ChildProcessPermissionESaIS2_ELN9__gnu_cxx12_Lock_policyE2EE14_M_get_deleterERKSt9type_info
@@ -76690,6 +76700,7 @@ _ZTVN4node10contextify18MicrotaskQueueWrapE
 _ZTVN4node10mksnapshot11BindingDataE
 _ZTVN4node10permission12FSPermissionE
 _ZTVN4node10permission16WorkerPermissionE
+_ZTVN4node10permission19InspectorPermissionE
 _ZTVN4node10permission22ChildProcessPermissionE
 _ZTVN4node11ConnectWrapE
 _ZTVN4node11EnvironmentE
@@ -77593,6 +77604,7 @@ _ZTVSt23_Sp_counted_ptr_inplaceIN2v88platform30DefaultWorkerThreadsTaskRunnerESa
 _ZTVSt23_Sp_counted_ptr_inplaceIN4node10MapKVStoreESaIS1_ELN9__gnu_cxx12_Lock_policyE2EE
 _ZTVSt23_Sp_counted_ptr_inplaceIN4node10permission12FSPermissionESaIS2_ELN9__gnu_cxx12_Lock_policyE2EE
 _ZTVSt23_Sp_counted_ptr_inplaceIN4node10permission16WorkerPermissionESaIS2_ELN9__gnu_cxx12_Lock_policyE2EE
+_ZTVSt23_Sp_counted_ptr_inplaceIN4node10permission19InspectorPermissionESaIS2_ELN9__gnu_cxx12_Lock_policyE2EE
 _ZTVSt23_Sp_counted_ptr_inplaceIN4node10permission22ChildProcessPermissionESaIS2_ELN9__gnu_cxx12_Lock_policyE2EE
 _ZTVSt23_Sp_counted_ptr_inplaceIN4node11BufferValueESaIS1_ELN9__gnu_cxx12_Lock_policyE2EE
 _ZTVSt23_Sp_counted_ptr_inplaceIN4node12RealEnvStoreESaIS1_ELN9__gnu_cxx12_Lock_policyE2EE
@@ -79862,6 +79874,7 @@ bn_cmp_words
 bn_compute_wNAF
 bn_copy_words
 bn_correct_top
+bn_correct_top_consttime
 bn_div_fixed_top
 bn_expand2
 bn_from_mont_fixed_top
@@ -80859,8 +80872,8 @@ llhttp__internal__c_test_flags_2
 llhttp__internal__c_test_flags_3
 llhttp__internal__c_test_lenient_flags
 llhttp__internal__c_test_lenient_flags_1
+llhttp__internal__c_test_lenient_flags_10
 llhttp__internal__c_test_lenient_flags_2
-llhttp__internal__c_test_lenient_flags_6
 llhttp__internal__c_test_lenient_flags_8
 llhttp__internal__c_update_content_length
 llhttp__internal__c_update_finish
@@ -82684,7 +82697,6 @@ ossl_bn_group_6144
 ossl_bn_group_8192
 ossl_bn_inv_sqrt_2
 ossl_bn_miller_rabin_is_prime
-ossl_bn_rsa_do_unblind
 ossl_bn_rsa_fips186_4_derive_prime
 ossl_bn_rsa_fips186_4_gen_prob_primes
 ossl_bsearch
@@ -82807,6 +82819,7 @@ ossl_cmp_certrepmessage_get0_certresponse
 ossl_cmp_certreq_new
 ossl_cmp_certresponse_get1_cert
 ossl_cmp_certstatus_set0_certHash
+ossl_cmp_ctx_get0_newPubkey
 ossl_cmp_ctx_set0_newCert
 ossl_cmp_ctx_set0_statusString
 ossl_cmp_ctx_set0_validatedSrvCert

package/include/node/node_version.h

@@ -24,7 +24,7 @@
 
 #define NODE_MAJOR_VERSION 20
 #define NODE_MINOR_VERSION 3
-#define NODE_PATCH_VERSION 0
+#define NODE_PATCH_VERSION 1
 
 #define NODE_VERSION_IS_LTS 0
 #define NODE_VERSION_LTS_CODENAME ""

package/include/node/openssl/archs/BSD-x86/asm/crypto/buildinf.h

@@ -11,7 +11,7 @@
  */
 
 #define PLATFORM "platform: BSD-x86"
-#define DATE "built on: Mon Feb 13 14:04:08 2023 UTC"
+#define DATE "built on: Fri Jun  9 11:58:46 2023 UTC"
 
 /*
  * Generate compiler_flags as an array of individual characters. This is a

package/include/node/openssl/archs/BSD-x86/asm/include/openssl/cmp.h

@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -442,8 +442,8 @@ int OSSL_CMP_CTX_build_cert_chain(OSSL_CMP_CTX *ctx, X509_STORE *own_trusted,
 int OSSL_CMP_CTX_set1_pkey(OSSL_CMP_CTX *ctx, EVP_PKEY *pkey);
 int OSSL_CMP_CTX_set1_referenceValue(OSSL_CMP_CTX *ctx,
                                      const unsigned char *ref, int len);
-int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx, const unsigned char *sec,
-                                  const int len);
+int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
+                                  const unsigned char *sec, int len);
 /* CMP message header and extra certificates: */
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
@@ -503,6 +503,7 @@ ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
+int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
 OSSL_CMP_MSG *OSSL_CMP_MSG_read(const char *file, OSSL_LIB_CTX *libctx,
                                 const char *propq);

package/include/node/openssl/archs/BSD-x86/asm/include/openssl/opensslv.h

@@ -29,7 +29,7 @@ extern "C" {
  */
 # define OPENSSL_VERSION_MAJOR  3
 # define OPENSSL_VERSION_MINOR  0
-# define OPENSSL_VERSION_PATCH  8
+# define OPENSSL_VERSION_PATCH  9
 
 /*
  * Additional version information
@@ -74,21 +74,21 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.0.8"
-# define OPENSSL_FULL_VERSION_STR "3.0.8+quic"
+# define OPENSSL_VERSION_STR "3.0.9"
+# define OPENSSL_FULL_VERSION_STR "3.0.9+quic"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
  *
  * These strings are defined separately to allow them to be parsable.
  */
-# define OPENSSL_RELEASE_DATE "7 Feb 2023"
+# define OPENSSL_RELEASE_DATE "30 May 2023"
 
 /*
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.0.8+quic 7 Feb 2023"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.0.9+quic 30 May 2023"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE

package/include/node/openssl/archs/BSD-x86/asm_avx2/crypto/buildinf.h

@@ -11,7 +11,7 @@
  */
 
 #define PLATFORM "platform: BSD-x86"
-#define DATE "built on: Mon Feb 13 14:04:20 2023 UTC"
+#define DATE "built on: Fri Jun  9 11:59:07 2023 UTC"
 
 /*
  * Generate compiler_flags as an array of individual characters. This is a

package/include/node/openssl/archs/BSD-x86/asm_avx2/include/openssl/cmp.h

@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -442,8 +442,8 @@ int OSSL_CMP_CTX_build_cert_chain(OSSL_CMP_CTX *ctx, X509_STORE *own_trusted,
 int OSSL_CMP_CTX_set1_pkey(OSSL_CMP_CTX *ctx, EVP_PKEY *pkey);
 int OSSL_CMP_CTX_set1_referenceValue(OSSL_CMP_CTX *ctx,
                                      const unsigned char *ref, int len);
-int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx, const unsigned char *sec,
-                                  const int len);
+int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
+                                  const unsigned char *sec, int len);
 /* CMP message header and extra certificates: */
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
@@ -503,6 +503,7 @@ ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
+int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
 OSSL_CMP_MSG *OSSL_CMP_MSG_read(const char *file, OSSL_LIB_CTX *libctx,
                                 const char *propq);

package/include/node/openssl/archs/BSD-x86/asm_avx2/include/openssl/opensslv.h

@@ -29,7 +29,7 @@ extern "C" {
  */
 # define OPENSSL_VERSION_MAJOR  3
 # define OPENSSL_VERSION_MINOR  0
-# define OPENSSL_VERSION_PATCH  8
+# define OPENSSL_VERSION_PATCH  9
 
 /*
  * Additional version information
@@ -74,21 +74,21 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.0.8"
-# define OPENSSL_FULL_VERSION_STR "3.0.8+quic"
+# define OPENSSL_VERSION_STR "3.0.9"
+# define OPENSSL_FULL_VERSION_STR "3.0.9+quic"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
  *
  * These strings are defined separately to allow them to be parsable.
  */
-# define OPENSSL_RELEASE_DATE "7 Feb 2023"
+# define OPENSSL_RELEASE_DATE "30 May 2023"
 
 /*
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.0.8+quic 7 Feb 2023"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.0.9+quic 30 May 2023"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE

package/include/node/openssl/archs/BSD-x86/no-asm/crypto/buildinf.h

@@ -11,7 +11,7 @@
  */
 
 #define PLATFORM "platform: BSD-x86"
-#define DATE "built on: Mon Feb 13 14:04:32 2023 UTC"
+#define DATE "built on: Fri Jun  9 11:59:26 2023 UTC"
 
 /*
  * Generate compiler_flags as an array of individual characters. This is a
@@ -19,14 +19,14 @@
  * literal
  */
 static const char compiler_flags[] = {
-    'c','o','m','p','i','l','e','r',':',' ','g','c','c',' ','-','f',
-    'P','I','C',' ','-','p','t','h','r','e','a','d',' ','-','W','a',
-    'l','l',' ','-','O','3',' ','-','f','o','m','i','t','-','f','r',
-    'a','m','e','-','p','o','i','n','t','e','r',' ','-','D','L','_',
-    'E','N','D','I','A','N',' ','-','D','O','P','E','N','S','S','L',
-    '_','P','I','C',' ','-','D','_','T','H','R','E','A','D','_','S',
-    'A','F','E',' ','-','D','_','R','E','E','N','T','R','A','N','T',
-    ' ','-','D','O','P','E','N','S','S','L','_','B','U','I','L','D',
-    'I','N','G','_','O','P','E','N','S','S','L',' ','-','D','N','D',
-    'E','B','U','G','\0'
+    'c','o','m','p','i','l','e','r',':',' ','c','c',' ','-','f','P',
+    'I','C',' ','-','p','t','h','r','e','a','d',' ','-','W','a','l',
+    'l',' ','-','O','3',' ','-','f','o','m','i','t','-','f','r','a',
+    'm','e','-','p','o','i','n','t','e','r',' ','-','D','L','_','E',
+    'N','D','I','A','N',' ','-','D','O','P','E','N','S','S','L','_',
+    'P','I','C',' ','-','D','_','T','H','R','E','A','D','_','S','A',
+    'F','E',' ','-','D','_','R','E','E','N','T','R','A','N','T',' ',
+    '-','D','O','P','E','N','S','S','L','_','B','U','I','L','D','I',
+    'N','G','_','O','P','E','N','S','S','L',' ','-','D','N','D','E',
+    'B','U','G','\0'
 };

package/include/node/openssl/archs/BSD-x86/no-asm/include/openssl/cmp.h

@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -442,8 +442,8 @@ int OSSL_CMP_CTX_build_cert_chain(OSSL_CMP_CTX *ctx, X509_STORE *own_trusted,
 int OSSL_CMP_CTX_set1_pkey(OSSL_CMP_CTX *ctx, EVP_PKEY *pkey);
 int OSSL_CMP_CTX_set1_referenceValue(OSSL_CMP_CTX *ctx,
                                      const unsigned char *ref, int len);
-int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx, const unsigned char *sec,
-                                  const int len);
+int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
+                                  const unsigned char *sec, int len);
 /* CMP message header and extra certificates: */
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
@@ -503,6 +503,7 @@ ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
+int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
 OSSL_CMP_MSG *OSSL_CMP_MSG_read(const char *file, OSSL_LIB_CTX *libctx,
                                 const char *propq);

package/include/node/openssl/archs/BSD-x86/no-asm/include/openssl/opensslv.h

@@ -29,7 +29,7 @@ extern "C" {
  */
 # define OPENSSL_VERSION_MAJOR  3
 # define OPENSSL_VERSION_MINOR  0
-# define OPENSSL_VERSION_PATCH  8
+# define OPENSSL_VERSION_PATCH  9
 
 /*
  * Additional version information
@@ -74,21 +74,21 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.0.8"
-# define OPENSSL_FULL_VERSION_STR "3.0.8+quic"
+# define OPENSSL_VERSION_STR "3.0.9"
+# define OPENSSL_FULL_VERSION_STR "3.0.9+quic"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
  *
  * These strings are defined separately to allow them to be parsable.
  */
-# define OPENSSL_RELEASE_DATE "7 Feb 2023"
+# define OPENSSL_RELEASE_DATE "30 May 2023"
 
 /*
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.0.8+quic 7 Feb 2023"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.0.9+quic 30 May 2023"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE

package/include/node/openssl/archs/BSD-x86_64/asm/crypto/buildinf.h

@@ -11,7 +11,7 @@
  */
 
 #define PLATFORM "platform: BSD-x86_64"
-#define DATE "built on: Mon Feb 13 14:04:42 2023 UTC"
+#define DATE "built on: Fri Jun  9 11:59:45 2023 UTC"
 
 /*
  * Generate compiler_flags as an array of individual characters. This is a

package/include/node/openssl/archs/BSD-x86_64/asm/include/openssl/cmp.h

@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -442,8 +442,8 @@ int OSSL_CMP_CTX_build_cert_chain(OSSL_CMP_CTX *ctx, X509_STORE *own_trusted,
 int OSSL_CMP_CTX_set1_pkey(OSSL_CMP_CTX *ctx, EVP_PKEY *pkey);
 int OSSL_CMP_CTX_set1_referenceValue(OSSL_CMP_CTX *ctx,
                                      const unsigned char *ref, int len);
-int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx, const unsigned char *sec,
-                                  const int len);
+int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
+                                  const unsigned char *sec, int len);
 /* CMP message header and extra certificates: */
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
@@ -503,6 +503,7 @@ ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
+int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
 OSSL_CMP_MSG *OSSL_CMP_MSG_read(const char *file, OSSL_LIB_CTX *libctx,
                                 const char *propq);

package/include/node/openssl/archs/BSD-x86_64/asm/include/openssl/opensslv.h

@@ -29,7 +29,7 @@ extern "C" {
  */
 # define OPENSSL_VERSION_MAJOR  3
 # define OPENSSL_VERSION_MINOR  0
-# define OPENSSL_VERSION_PATCH  8
+# define OPENSSL_VERSION_PATCH  9
 
 /*
  * Additional version information
@@ -74,21 +74,21 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.0.8"
-# define OPENSSL_FULL_VERSION_STR "3.0.8+quic"
+# define OPENSSL_VERSION_STR "3.0.9"
+# define OPENSSL_FULL_VERSION_STR "3.0.9+quic"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
  *
  * These strings are defined separately to allow them to be parsable.
  */
-# define OPENSSL_RELEASE_DATE "7 Feb 2023"
+# define OPENSSL_RELEASE_DATE "30 May 2023"
 
 /*
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.0.8+quic 7 Feb 2023"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.0.9+quic 30 May 2023"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE

package/include/node/openssl/archs/BSD-x86_64/asm_avx2/crypto/buildinf.h

@@ -11,7 +11,7 @@
  */
 
 #define PLATFORM "platform: BSD-x86_64"
-#define DATE "built on: Mon Feb 13 14:04:56 2023 UTC"
+#define DATE "built on: Fri Jun  9 12:00:09 2023 UTC"
 
 /*
  * Generate compiler_flags as an array of individual characters. This is a

package/include/node/openssl/archs/BSD-x86_64/asm_avx2/include/openssl/cmp.h

@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -442,8 +442,8 @@ int OSSL_CMP_CTX_build_cert_chain(OSSL_CMP_CTX *ctx, X509_STORE *own_trusted,
 int OSSL_CMP_CTX_set1_pkey(OSSL_CMP_CTX *ctx, EVP_PKEY *pkey);
 int OSSL_CMP_CTX_set1_referenceValue(OSSL_CMP_CTX *ctx,
                                      const unsigned char *ref, int len);
-int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx, const unsigned char *sec,
-                                  const int len);
+int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
+                                  const unsigned char *sec, int len);
 /* CMP message header and extra certificates: */
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
@@ -503,6 +503,7 @@ ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
+int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
 OSSL_CMP_MSG *OSSL_CMP_MSG_read(const char *file, OSSL_LIB_CTX *libctx,
                                 const char *propq);

package/include/node/openssl/archs/BSD-x86_64/asm_avx2/include/openssl/opensslv.h

@@ -29,7 +29,7 @@ extern "C" {
  */
 # define OPENSSL_VERSION_MAJOR  3
 # define OPENSSL_VERSION_MINOR  0
-# define OPENSSL_VERSION_PATCH  8
+# define OPENSSL_VERSION_PATCH  9
 
 /*
  * Additional version information
@@ -74,21 +74,21 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.0.8"
-# define OPENSSL_FULL_VERSION_STR "3.0.8+quic"
+# define OPENSSL_VERSION_STR "3.0.9"
+# define OPENSSL_FULL_VERSION_STR "3.0.9+quic"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
  *
  * These strings are defined separately to allow them to be parsable.
  */
-# define OPENSSL_RELEASE_DATE "7 Feb 2023"
+# define OPENSSL_RELEASE_DATE "30 May 2023"
 
 /*
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.0.8+quic 7 Feb 2023"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.0.9+quic 30 May 2023"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE