## New Versioning Policy Check out [VERSIONING.md](https://github.com/aws/aws-lc/blob/main/VERSIONING.md) to learn about our new versioning scheme. ## What's Changed - Test key import in EVPTest a bit more extensively by [@nebeid](https://github.com/nebeid) in [#3058](https://github.com/aws/aws-lc/pull/3058) - Add OPENSSL\_cleanse to zero stack secrets before return by [@prasden](https://github.com/prasden) in [#3227](https://github.com/aws/aws-lc/pull/3227) - Fix: Apply COHABITANT\_HEADERS logic to location of tool binaries by [@edmundlod](https://github.com/edmundlod) in [#3116](https://github.com/aws/aws-lc/pull/3116) - Fix wherelen handling in BIO\_ADDR\_rawmake AF\_UNIX path by [@samuel40791765](https://github.com/samuel40791765) in [#3233](https://github.com/aws/aws-lc/pull/3233) - Harden PKCS7 and OCSP error handling by [@prasden](https://github.com/prasden) in [#3237](https://github.com/aws/aws-lc/pull/3237) - Reject len < -1 in ASN1\_mbstring\_ncopy by [@samuel40791765](https://github.com/samuel40791765) in [#3232](https://github.com/aws/aws-lc/pull/3232) - Free existing union arm by current type in PKCS7\_set\_type by [@samuel40791765](https://github.com/samuel40791765) in [#3231](https://github.com/aws/aws-lc/pull/3231) - Ensure no trailing data for PKCS8 EVP\_parse\_private\_key by [@torben-hansen](https://github.com/torben-hansen) in [#3242](https://github.com/aws/aws-lc/pull/3242) - Include trailing NUL in BIO\_ADDR\_rawaddress AF\_UNIX length by [@samuel40791765](https://github.com/samuel40791765) in [#3236](https://github.com/aws/aws-lc/pull/3236) - Reject negative pass\_len in PEM\_ASN1\_write\_bio by [@samuel40791765](https://github.com/samuel40791765) in [#3228](https://github.com/aws/aws-lc/pull/3228) - Check parameters before comparing pqdsa public keys by [@samuel40791765](https://github.com/samuel40791765) in [#3229](https://github.com/aws/aws-lc/pull/3229) - Free existing responderId union arm in OCSP\_RESPID setters by [@samuel40791765](https://github.com/samuel40791765) in [#3234](https://github.com/aws/aws-lc/pull/3234) - Release cipher\_data on error path too for EVP\_CTRL\_INIT and EVP\_CTRL\_COPY by [@torben-hansen](https://github.com/torben-hansen) in [#3243](https://github.com/aws/aws-lc/pull/3243) - ci: declare contents: read on zig compiler workflow by [@arpitjain099](https://github.com/arpitjain099) in [#3249](https://github.com/aws/aws-lc/pull/3249) - Add new review workflow by [@nhatnghiho](https://github.com/nhatnghiho) in [#3230](https://github.com/aws/aws-lc/pull/3230) - Log versioning and library names druing cmake build step by [@torben-hansen](https://github.com/torben-hansen) in [#3254](https://github.com/aws/aws-lc/pull/3254) - Tighten OCSP\_parse\_url URL parsing by [@prasden](https://github.com/prasden) in [#3238](https://github.com/aws/aws-lc/pull/3238) - Add SHRT\_MAX caps to bound iteration and input lengths by [@prasden](https://github.com/prasden) in [#3240](https://github.com/aws/aws-lc/pull/3240) - Fix correctness findings from penpal testing by [@prasden](https://github.com/prasden) in [#3235](https://github.com/aws/aws-lc/pull/3235) - Document new versioning scheme and bump mainline to v5.0.0 by [@samuel40791765](https://github.com/samuel40791765) in [#3212](https://github.com/aws/aws-lc/pull/3212) - Decouple the FIPS version number from the AWS-LC version number by [@samuel40791765](https://github.com/samuel40791765) in [#3211](https://github.com/aws/aws-lc/pull/3211) - Bump the github-actions group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot\] in [#3258](https://github.com/aws/aws-lc/pull/3258) - Bump time from 0.3.36 to 0.3.47 in /tests/ci/lambda by [@dependabot](https://github.com/dependabot)\[bot\] in [#3248](https://github.com/aws/aws-lc/pull/3248) - tool-openssl/s\_client: default SNI to -connect host to match OpenSSL by [@alexw91](https://github.com/alexw91) in [#3209](https://github.com/aws/aws-lc/pull/3209) - Reject undersized buffer in pkey\_dsa\_sign by [@nebeid](https://github.com/nebeid) in [#3112](https://github.com/aws/aws-lc/pull/3112) - Drop obsolete test\_pkey\_rsa.rb hunk from Ruby 3.4 patch by [@geedo0](https://github.com/geedo0) in [#3260](https://github.com/aws/aws-lc/pull/3260) - Enable Windows 7 compat path on MinGW builds by [@justsmth](https://github.com/justsmth) in [#3239](https://github.com/aws/aws-lc/pull/3239) - Add `getauxval` availability detection with `/proc/self/auxv` fallback for uclibc targets by [@justsmth](https://github.com/justsmth) in [#3250](https://github.com/aws/aws-lc/pull/3250) - Prefer CRLs with specific IDP match by [@nhatnghiho](https://github.com/nhatnghiho) in [#3264](https://github.com/aws/aws-lc/pull/3264) - Fix manylinux1 build: O\_CLOEXEC fallback in getauxval shim by [@justsmth](https://github.com/justsmth) in [#3268](https://github.com/aws/aws-lc/pull/3268) - Gate Linux specific code to fix compilation on AIX by [@pgimalac](https://github.com/pgimalac) in [#3265](https://github.com/aws/aws-lc/pull/3265) - BoringSSL: Harden nc\_email name constraint checking by [@nebeid](https://github.com/nebeid) in [#3266](https://github.com/aws/aws-lc/pull/3266) - Fix python 3.13 patch by [@WillChilds-Klein](https://github.com/WillChilds-Klein) in [#3271](https://github.com/aws/aws-lc/pull/3271) - Make rustfmt optional for Rust bindings generation by [@justsmth](https://github.com/justsmth) in [#3270](https://github.com/aws/aws-lc/pull/3270) - Skip MariaDB socket conflict test unable to run as root by [@WillChilds-Klein](https://github.com/WillChilds-Klein) in [#3274](https://github.com/aws/aws-lc/pull/3274) - use /map: linker flag to avoid running a binary to capture the hash by [@yoavwizstein](https://github.com/yoavwizstein) in [#3133](https://github.com/aws/aws-lc/pull/3133) - Add inline documentation for API contracts by [@nebeid](https://github.com/nebeid) in [#3267](https://github.com/aws/aws-lc/pull/3267) - ML-DSA support as a TLS 1.3 signature scheme by [@dkostic](https://github.com/dkostic) in [#3251](https://github.com/aws/aws-lc/pull/3251) - Make FIPS compiler wrapper unconditional by [@justsmth](https://github.com/justsmth) in [#3269](https://github.com/aws/aws-lc/pull/3269) ## New Contributors - [@edmundlod](https://github.com/edmundlod) made their first contribution in [#3116](https://github.com/aws/aws-lc/pull/3116) - [@arpitjain099](https://github.com/arpitjain099) made their first contribution in [#3249](https://github.com/aws/aws-lc/pull/3249) - [@pgimalac](https://github.com/pgimalac) made their first contribution in [#3265](https://github.com/aws/aws-lc/pull/3265) - [@yoavwizstein](https://github.com/yoavwizstein) made their first contribution in [#3133](https://github.com/aws/aws-lc/pull/3133) **Full Changelog**: [v1.73.0...v5.0.0](https://github.com/aws/aws-lc/compare/v1.73.0...v5.0.0) <https://github.com/aws/aws-lc/releases/tag/v5.0.0>
New Versioning Policy
Check out VERSIONING.md to learn about our new versioning scheme.
What's Changed
getauxvalavailability detection with/proc/self/auxvfallback for uclibc targets by @justsmth in #3250New Contributors
Full Changelog: v1.73.0...v5.0.0
https://github.com/aws/aws-lc/releases/tag/v5.0.0