[Armadeus-commitlog] armadeus branch, master, updated. armadeus-6.0-24-g4154497

[Sébastien S. <ss...@us...>]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "armadeus".

The branch, master has been updated
       via  4154497b86e46f4b97b849c35fb6f94fbd54d48b (commit)
      from  d340cf11bf4bb1c8f9de95d78f037037a7ad25e4 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 4154497b86e46f4b97b849c35fb6f94fbd54d48b
Author: Sébastien Szymanski <seb...@ar...>
Date:   Tue Dec 8 11:25:33 2015 +0100

    [BUILDROOT] openssl: bump to version 1.0.2e
    
    Patch comes from upstream.

-----------------------------------------------------------------------

Summary of changes:
 ...e-openssl-security-bump-to-version-1.0.2e.patch |   53 ++++++++++++++++++++
 patches/buildroot/2015.02/cleanup_buildroot.sh     |    1 +
 2 files changed, 54 insertions(+), 0 deletions(-)
 create mode 100644 patches/buildroot/2015.02/224-e-openssl-security-bump-to-version-1.0.2e.patch

diff --git a/patches/buildroot/2015.02/224-e-openssl-security-bump-to-version-1.0.2e.patch b/patches/buildroot/2015.02/224-e-openssl-security-bump-to-version-1.0.2e.patch
new file mode 100644
index 0000000..e0e134d
--- /dev/null
+++ b/patches/buildroot/2015.02/224-e-openssl-security-bump-to-version-1.0.2e.patch
@@ -0,0 +1,53 @@
+From e9fb14ecef2427d3b98586c667f1e19112de5f90 Mon Sep 17 00:00:00 2001
+From: Gustavo Zacarias <gus...@fr...>
+Date: Thu, 3 Dec 2015 14:49:42 -0300
+Subject: [PATCH] openssl: security bump to version 1.0.2e
+
+Fixes:
+CVE-2015-3193 - BN_mod_exp may produce incorrect results on x86_64
+CVE-2015-3194 - Certificate verify crash with missing PSS parameter
+CVE-2015-3195 - X509_ATTRIBUTE memory leak
+
+Enable IDEA as well since otherwise the build breaks (always great
+upstream) - it's no longer patent encumbered.
+
+[Peter: correct sha256]
+Signed-off-by: Gustavo Zacarias <gus...@fr...>
+Signed-off-by: Peter Korsgaard <pe...@ko...>
+---
+ package/openssl/openssl.hash | 4 ++--
+ package/openssl/openssl.mk   | 3 +--
+ 2 files changed, 3 insertions(+), 4 deletions(-)
+
+Index: buildroot/package/openssl/openssl.hash
+===================================================================
+--- buildroot.orig/package/openssl/openssl.hash
++++ buildroot/package/openssl/openssl.hash
+@@ -1,4 +1,2 @@
+-# From https://www.openssl.org/source/openssl-1.0.2c.tar.gz.md5
+-# From https://www.openssl.org/source/openssl-1.0.2c.tar.gz.sha1
+-md5	8c8d81a9ae7005276e486702edbcd4b6	openssl-1.0.2c.tar.gz
+-sha1	6e4a5e91159eb32383296c7c83ac0e59b83a0a44	openssl-1.0.2c.tar.gz
++# From https://www.openssl.org/source/openssl-1.0.2e.tar.gz.sha256
++sha256	e23ccafdb75cfcde782da0151731aa2185195ac745eea3846133f2e05c0e0bff	openssl-1.0.2e.tar.gz
+Index: buildroot/package/openssl/openssl.mk
+===================================================================
+--- buildroot.orig/package/openssl/openssl.mk
++++ buildroot/package/openssl/openssl.mk
+@@ -4,7 +4,7 @@
+ #
+ ################################################################################
+ 
+-OPENSSL_VERSION = 1.0.2d
++OPENSSL_VERSION = 1.0.2e
+ OPENSSL_SITE = http://www.openssl.org/source
+ OPENSSL_LICENSE = OpenSSL or SSLeay
+ OPENSSL_LICENSE_FILES = LICENSE
+@@ -81,7 +81,6 @@ define OPENSSL_CONFIGURE_CMDS
+ 			--libdir=/lib \
+ 			$(if $(BR2_TOOLCHAIN_HAS_THREADS),threads,no-threads) \
+ 			$(if $(BR2_STATIC_LIBS),no-shared,shared) \
+-			no-idea \
+ 			no-rc5 \
+ 			enable-camellia \
+ 			enable-mdc2 \
diff --git a/patches/buildroot/2015.02/cleanup_buildroot.sh b/patches/buildroot/2015.02/cleanup_buildroot.sh
index adaf421..a22cc65 100755
--- a/patches/buildroot/2015.02/cleanup_buildroot.sh
+++ b/patches/buildroot/2015.02/cleanup_buildroot.sh
@@ -100,6 +100,7 @@ rm -rf buildroot/package/nss-pam-ldapd/Config.in
 rm -rf buildroot/package/nss-pam-ldapd/nss-pam-ldapd.hash
 rm -rf buildroot/package/nss-pam-ldapd/nss-pam-ldapd.mk
 rm -rf buildroot/package/openssl/004-musl-termios.patch
+rm -rf buildroot/package/openssl/005-Make-c_rehash-match-commands-starting-with-minus-inste.patch
 rm -rf buildroot/package/openssl/openssl.hash
 rm -rf buildroot/package/openssl/openssl.mk
 rm -rf buildroot/package/openswan/openswan.mk


hooks/post-receive
-- 
armadeus