[Armadeus-commitlog] armadeus branch, master, updated. armadeus-5.3-777-gc0febd2
Brought to you by:
sszy
Menu
▾
▴
[Armadeus-commitlog] armadeus branch, master, updated. armadeus-5.3-777-gc0febd2
|
From: Sébastien S. <ss...@us...> - 2015-06-24 08:50:41
|
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "armadeus".
The branch, master has been updated
via c0febd24b54a688f8993333d46a7229c34f8700b (commit)
from 64b985fc4e74085def70166567bf6028ccadebe1 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit c0febd24b54a688f8993333d46a7229c34f8700b
Author: Sébastien Szymanski <seb...@ar...>
Date: Wed Jun 24 10:55:50 2015 +0200
[BUILDROOT] openssl: bump to version 1.0.2c
Patches come from upstream.
-----------------------------------------------------------------------
Summary of changes:
...-openssl-security-bump-to-version-1.0.2a.patch} | 0
...b-openssl-security-bump-to-version-1.0.2b.patch | 82 ++++++++++++++++++++
.../2015.02/224-c-bump-to-version-1.0.2c.patch | 43 ++++++++++
3 files changed, 125 insertions(+), 0 deletions(-)
rename patches/buildroot/2015.02/{224-openssl-security-bump-to-version-1.0.2a.patch => 224-a-openssl-security-bump-to-version-1.0.2a.patch} (100%)
create mode 100644 patches/buildroot/2015.02/224-b-openssl-security-bump-to-version-1.0.2b.patch
create mode 100644 patches/buildroot/2015.02/224-c-bump-to-version-1.0.2c.patch
diff --git a/patches/buildroot/2015.02/224-openssl-security-bump-to-version-1.0.2a.patch b/patches/buildroot/2015.02/224-a-openssl-security-bump-to-version-1.0.2a.patch
similarity index 100%
rename from patches/buildroot/2015.02/224-openssl-security-bump-to-version-1.0.2a.patch
rename to patches/buildroot/2015.02/224-a-openssl-security-bump-to-version-1.0.2a.patch
diff --git a/patches/buildroot/2015.02/224-b-openssl-security-bump-to-version-1.0.2b.patch b/patches/buildroot/2015.02/224-b-openssl-security-bump-to-version-1.0.2b.patch
new file mode 100644
index 0000000..867d8a1
--- /dev/null
+++ b/patches/buildroot/2015.02/224-b-openssl-security-bump-to-version-1.0.2b.patch
@@ -0,0 +1,82 @@
+From 53c8d64c08028f0057965a436707c1422c6fd331 Mon Sep 17 00:00:00 2001
+From: Gustavo Zacarias <gu...@za...>
+Date: Fri, 12 Jun 2015 08:35:59 -0300
+Subject: [PATCH 1/2] openssl: security bump to version 1.0.2b
+
+CVE-2015-1790 - PKCS7 crash with missing EnvelopedContent
+CVE-2015-1789 - Exploitable out-of-bounds read in X509_cmp_time
+CVE-2015-1788 - Malformed ECParameters causes infinite loop
+CVE-2015-1792 - CMS verify infinite loop with unknown hash function
+CVE-2015-1791 - Race condition handling NewSessionTicket
+
+Signed-off-by: Gustavo Zacarias <gu...@za...>
+Signed-off-by: Thomas Petazzoni <tho...@fr...>
+---
+ ...-match-commands-starting-with-minus-inste.patch | 27 ----------------------
+ package/openssl/openssl.hash | 8 +++----
+ package/openssl/openssl.mk | 2 +-
+ 3 files changed, 5 insertions(+), 32 deletions(-)
+ delete mode 100644 package/openssl/005-Make-c_rehash-match-commands-starting-with-minus-inste.patch
+
+diff --git a/package/openssl/005-Make-c_rehash-match-commands-starting-with-minus-inste.patch b/package/openssl/005-Make-c_rehash-match-commands-starting-with-minus-inste.patch
+deleted file mode 100644
+index 5db95d6..0000000
+--- a/package/openssl/005-Make-c_rehash-match-commands-starting-with-minus-inste.patch
++++ /dev/null
+@@ -1,27 +0,0 @@
+-From 079cae9d7628f16b9efdf5723d2bfae5bdc2ba4e Mon Sep 17 00:00:00 2001
+-From: Gustavo Zacarias <gu...@za...>
+-Date: Tue, 27 Jan 2015 18:27:32 -0300
+-Subject: [PATCH] Make c_rehash match commands starting with - (minus) instead
+- of minus in any starting position, otherwise a directory named a-b breaks it
+-
+-Signed-off-by: Gustavo Zacarias <gu...@za...>
+----
+- tools/c_rehash.in | 2 +-
+- 1 file changed, 1 insertion(+), 1 deletion(-)
+-
+-diff --git a/tools/c_rehash.in b/tools/c_rehash.in
+-index 887e927..1df2fab 100644
+---- a/tools/c_rehash.in
+-+++ b/tools/c_rehash.in
+-@@ -15,7 +15,7 @@ my $symlink_exists=eval {symlink("",""); 1};
+- my $removelinks = 1;
+-
+- ## Parse flags.
+--while ( $ARGV[0] =~ '-.*' ) {
+-+while ( $ARGV[0] =~ '^-.*' ) {
+- my $flag = shift @ARGV;
+- last if ( $flag eq '--');
+- if ( $flag =~ /-old/) {
+---
+-2.0.5
+-
+diff --git a/package/openssl/openssl.hash b/package/openssl/openssl.hash
+index c9987fc..673f99f 100644
+--- a/package/openssl/openssl.hash
++++ b/package/openssl/openssl.hash
+@@ -1,4 +1,4 @@
+-# From https://www.openssl.org/source/openssl-1.0.2a.tar.gz.md5
+-# From https://www.openssl.org/source/openssl-1.0.2a.tar.gz.sha1
+-md5 a06c547dac9044161a477211049f60ef openssl-1.0.2a.tar.gz
+-sha1 46ecd325b8e587fa491f6bb02ad4a9fb9f382f5f openssl-1.0.2a.tar.gz
++# From https://www.openssl.org/source/openssl-1.0.2b.tar.gz.md5
++# From https://www.openssl.org/source/openssl-1.0.2b.tar.gz.sha1
++md5 7729b259e2dea7d60b32fc3934d6984b openssl-1.0.2b.tar.gz
++sha1 9006e53ca56a14d041e3875320eedfa63d82aba7 openssl-1.0.2b.tar.gz
+diff --git a/package/openssl/openssl.mk b/package/openssl/openssl.mk
+index f90c811..8051a9b 100644
+--- a/package/openssl/openssl.mk
++++ b/package/openssl/openssl.mk
+@@ -4,7 +4,7 @@
+ #
+ ################################################################################
+
+-OPENSSL_VERSION = 1.0.2a
++OPENSSL_VERSION = 1.0.2b
+ OPENSSL_SITE = http://www.openssl.org/source
+ OPENSSL_LICENSE = OpenSSL or SSLeay
+ OPENSSL_LICENSE_FILES = LICENSE
+--
+2.3.6
+
diff --git a/patches/buildroot/2015.02/224-c-bump-to-version-1.0.2c.patch b/patches/buildroot/2015.02/224-c-bump-to-version-1.0.2c.patch
new file mode 100644
index 0000000..45e073f
--- /dev/null
+++ b/patches/buildroot/2015.02/224-c-bump-to-version-1.0.2c.patch
@@ -0,0 +1,43 @@
+From e4f2d3b12acf9f056d6cbbfab2e60c14f755bb88 Mon Sep 17 00:00:00 2001
+From: Gustavo Zacarias <gu...@za...>
+Date: Fri, 12 Jun 2015 16:44:31 -0300
+Subject: [PATCH 2/2] openssl: bump to version 1.0.2c
+
+Fixes HMAC ABI breakage from 1.0.2b
+
+Signed-off-by: Gustavo Zacarias <gu...@za...>
+Signed-off-by: Thomas Petazzoni <tho...@fr...>
+---
+ package/openssl/openssl.hash | 8 ++++----
+ package/openssl/openssl.mk | 2 +-
+ 2 files changed, 5 insertions(+), 5 deletions(-)
+
+diff --git a/package/openssl/openssl.hash b/package/openssl/openssl.hash
+index 673f99f..4b212fb 100644
+--- a/package/openssl/openssl.hash
++++ b/package/openssl/openssl.hash
+@@ -1,4 +1,4 @@
+-# From https://www.openssl.org/source/openssl-1.0.2b.tar.gz.md5
+-# From https://www.openssl.org/source/openssl-1.0.2b.tar.gz.sha1
+-md5 7729b259e2dea7d60b32fc3934d6984b openssl-1.0.2b.tar.gz
+-sha1 9006e53ca56a14d041e3875320eedfa63d82aba7 openssl-1.0.2b.tar.gz
++# From https://www.openssl.org/source/openssl-1.0.2c.tar.gz.md5
++# From https://www.openssl.org/source/openssl-1.0.2c.tar.gz.sha1
++md5 8c8d81a9ae7005276e486702edbcd4b6 openssl-1.0.2c.tar.gz
++sha1 6e4a5e91159eb32383296c7c83ac0e59b83a0a44 openssl-1.0.2c.tar.gz
+diff --git a/package/openssl/openssl.mk b/package/openssl/openssl.mk
+index 8051a9b..fd8904d 100644
+--- a/package/openssl/openssl.mk
++++ b/package/openssl/openssl.mk
+@@ -4,7 +4,7 @@
+ #
+ ################################################################################
+
+-OPENSSL_VERSION = 1.0.2b
++OPENSSL_VERSION = 1.0.2c
+ OPENSSL_SITE = http://www.openssl.org/source
+ OPENSSL_LICENSE = OpenSSL or SSLeay
+ OPENSSL_LICENSE_FILES = LICENSE
+--
+2.3.6
+
hooks/post-receive
--
armadeus
|