NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

openssl: security bump to version 1.0.2b

Browse Source 
CVE-2015-1790 - PKCS7 crash with missing EnvelopedContent
CVE-2015-1789 - Exploitable out-of-bounds read in X509_cmp_time
CVE-2015-1788 - Malformed ECParameters causes infinite loop
CVE-2015-1792 - CMS verify infinite loop with unknown hash function
CVE-2015-1791 - Race condition handling NewSessionTicket

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
This commit is contained in:
Gustavo Zacarias 2015-06-12 08:35:59 -03:00 committed by Thomas Petazzoni
parent 316a0a43a5
commit 53c8d64c08
3 changed files with 5 additions and 32 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
package/openssl/005-Make-c_rehash-match-commands-starting-with-minus-inste.patch
View File

@ -1,27 +0,0 @@
From 079cae9d7628f16b9efdf5723d2bfae5bdc2ba4e Mon Sep 17 00:00:00 2001
From: Gustavo Zacarias <gustavo@zacarias.com.ar>
Date: Tue, 27 Jan 2015 18:27:32 -0300
Subject: [PATCH] Make c_rehash match commands starting with - (minus) instead
of minus in any starting position, otherwise a directory named a-b breaks it
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
---
tools/c_rehash.in | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/tools/c_rehash.in b/tools/c_rehash.in
index 887e927..1df2fab 100644
--- a/tools/c_rehash.in
+++ b/tools/c_rehash.in
@@ -15,7 +15,7 @@ my $symlink_exists=eval {symlink("",""); 1};
my $removelinks = 1;
## Parse flags.
-while ( $ARGV[0] =~ '-.*' ) {
+while ( $ARGV[0] =~ '^-.*' ) {
my $flag = shift @ARGV;
last if ( $flag eq '--');
if ( $flag =~ /-old/) {
--
2.0.5

8
package/openssl/openssl.hash
View File

@ -1,4 +1,4 @@
# From https://www.openssl.org/source/openssl-1.0.2a.tar.gz.md5
# From https://www.openssl.org/source/openssl-1.0.2a.tar.gz.sha1
md5 a06c547dac9044161a477211049f60ef openssl-1.0.2a.tar.gz
sha1 46ecd325b8e587fa491f6bb02ad4a9fb9f382f5f openssl-1.0.2a.tar.gz
# From https://www.openssl.org/source/openssl-1.0.2b.tar.gz.md5
# From https://www.openssl.org/source/openssl-1.0.2b.tar.gz.sha1
md5 7729b259e2dea7d60b32fc3934d6984b openssl-1.0.2b.tar.gz
sha1 9006e53ca56a14d041e3875320eedfa63d82aba7 openssl-1.0.2b.tar.gz

2
package/openssl/openssl.mk
View File

@ -4,7 +4,7 @@
#
################################################################################
OPENSSL_VERSION = 1.0.2a
OPENSSL_VERSION = 1.0.2b
OPENSSL_SITE = http://www.openssl.org/source
OPENSSL_LICENSE = OpenSSL or SSLeay
OPENSSL_LICENSE_FILES = LICENSE