[Armadeus-commitlog] armadeus branch, master, updated. armadeus-6.0-34-g77e852f

[Julien B a. A. <ar...@us...>]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "armadeus".

The branch, master has been updated
       via  77e852fb0f1042888c2fb4e9573f2dcd56149c78 (commit)
      from  0d0292d0f8b472ac399404640bb8efdee9bf9a39 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 77e852fb0f1042888c2fb4e9573f2dcd56149c78
Author: Julien BOIBESSOT <jul...@ar...>
Date:   Mon Feb 1 18:19:40 2016 +0100

    [BUILDROOT] 2015.02: backport openssl security fix from BR mainline

-----------------------------------------------------------------------

Summary of changes:
 ...f-openssl-security-bump-to-version-1.0.2f.patch |   42 ++++++++++++++++++++
 1 files changed, 42 insertions(+), 0 deletions(-)
 create mode 100644 patches/buildroot/2015.02/224-f-openssl-security-bump-to-version-1.0.2f.patch

diff --git a/patches/buildroot/2015.02/224-f-openssl-security-bump-to-version-1.0.2f.patch b/patches/buildroot/2015.02/224-f-openssl-security-bump-to-version-1.0.2f.patch
new file mode 100644
index 0000000..65c385f
--- /dev/null
+++ b/patches/buildroot/2015.02/224-f-openssl-security-bump-to-version-1.0.2f.patch
@@ -0,0 +1,42 @@
+From 7d8b6bdd0075a57c2a4bb083197da7b41d6cef47 Mon Sep 17 00:00:00 2001
+From: Bernd Kuhls <ber...@t-...>
+Date: Thu, 28 Jan 2016 20:37:07 +0100
+Subject: package/openssl: security bump to version 1.0.2f
+
+Fixes
+DH small subgroups (CVE-2016-0701)
+SSLv2 doesn't block disabled ciphers (CVE-2015-3197)
+An update on DHE man-in-the-middle protection (Logjam)
+
+Signed-off-by: Bernd Kuhls <ber...@t-...>
+Signed-off-by: Peter Korsgaard <pe...@ko...>
+---
+ package/openssl/openssl.hash | 4 ++--
+ package/openssl/openssl.mk   | 2 +-
+ 2 files changed, 3 insertions(+), 3 deletions(-)
+
+diff --git a/package/openssl/openssl.hash b/package/openssl/openssl.hash
+index 2d2a5b0..2cf7516 100644
+--- a/package/openssl/openssl.hash
++++ b/package/openssl/openssl.hash
+@@ -1,2 +1,2 @@
+-# From https://www.openssl.org/source/openssl-1.0.2e.tar.gz.sha256
+-sha256	e23ccafdb75cfcde782da0151731aa2185195ac745eea3846133f2e05c0e0bff	openssl-1.0.2e.tar.gz
++# From https://www.openssl.org/source/openssl-1.0.2f.tar.gz.sha256
++sha256	932b4ee4def2b434f85435d9e3e19ca8ba99ce9a065a61524b429a9d5e9b2e9c	openssl-1.0.2f.tar.gz
+diff --git a/package/openssl/openssl.mk b/package/openssl/openssl.mk
+index c3ea08d..b7498a7 100644
+--- a/package/openssl/openssl.mk
++++ b/package/openssl/openssl.mk
+@@ -4,7 +4,7 @@
+ #
+ ################################################################################
+ 
+-OPENSSL_VERSION = 1.0.2e
++OPENSSL_VERSION = 1.0.2f
+ OPENSSL_SITE = http://www.openssl.org/source
+ OPENSSL_LICENSE = OpenSSL or SSLeay
+ OPENSSL_LICENSE_FILES = LICENSE
+-- 
+cgit v0.12
+


hooks/post-receive
-- 
armadeus