commit 65779725601043fb2634b283dd5b965c475e2219 Author: Fredrik Rinnestam <fredrik@crux.nu> Date: Tue May 3 20:32:33 2016 +0200 [notify] openssl: updated to 1.0.2h Update resolves CVE-2016-2176, CVE-2016-2109, CVE-2016-2106, CVE-2016-2105, CVE-2016-2107, CVE-2016-2108 diff --git a/openssl/.footprint b/openssl/.footprint index ad4287e..ed9cbca 100644 --- a/openssl/.footprint +++ b/openssl/.footprint @@ -773,6 +773,10 @@ lrwxrwxrwx root/root usr/share/man/man3/EVP_CipherFinal_ex.3ssl.gz -> EVP_Encryp lrwxrwxrwx root/root usr/share/man/man3/EVP_CipherInit.3ssl.gz -> EVP_EncryptInit.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/EVP_CipherInit_ex.3ssl.gz -> EVP_EncryptInit.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/EVP_CipherUpdate.3ssl.gz -> EVP_EncryptInit.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_DecodeBlock.3ssl.gz -> EVP_EncodeInit.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_DecodeFinal.3ssl.gz -> EVP_EncodeInit.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_DecodeInit.3ssl.gz -> EVP_EncodeInit.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_DecodeUpdate.3ssl.gz -> EVP_EncodeInit.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/EVP_DecryptFinal.3ssl.gz -> EVP_EncryptInit.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/EVP_DecryptFinal_ex.3ssl.gz -> EVP_EncryptInit.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/EVP_DecryptInit.3ssl.gz -> EVP_EncryptInit.3ssl.gz @@ -789,6 +793,10 @@ lrwxrwxrwx root/root usr/share/man/man3/EVP_DigestUpdate.3ssl.gz -> EVP_DigestIn lrwxrwxrwx root/root usr/share/man/man3/EVP_DigestVerifyFinal.3ssl.gz -> EVP_DigestVerifyInit.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/EVP_DigestVerifyInit.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/EVP_DigestVerifyUpdate.3ssl.gz -> EVP_DigestVerifyInit.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_EncodeBlock.3ssl.gz -> EVP_EncodeInit.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_EncodeFinal.3ssl.gz -> EVP_EncodeInit.3ssl.gz +-rw-r--r-- root/root usr/share/man/man3/EVP_EncodeInit.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_EncodeUpdate.3ssl.gz -> EVP_EncodeInit.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/EVP_EncryptFinal.3ssl.gz -> EVP_EncryptInit.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/EVP_EncryptFinal_ex.3ssl.gz -> EVP_EncryptInit.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/EVP_EncryptInit.3ssl.gz @@ -1246,6 +1254,8 @@ lrwxrwxrwx root/root usr/share/man/man3/SSL_CTX_set1_chain_cert_store.3ssl.gz -> lrwxrwxrwx root/root usr/share/man/man3/SSL_CTX_set1_curves_list.3ssl.gz -> SSL_CTX_set1_curves.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_CTX_set1_param.3ssl.gz -> SSL_CTX_get0_param.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/SSL_CTX_set1_verify_cert_store.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/SSL_CTX_set_alpn_protos.3ssl.gz -> SSL_CTX_set_alpn_select_cb.3ssl.gz +-rw-r--r-- root/root usr/share/man/man3/SSL_CTX_set_alpn_select_cb.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/SSL_CTX_set_cert_cb.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/SSL_CTX_set_cert_store.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/SSL_CTX_set_cert_verify_callback.3ssl.gz @@ -1325,6 +1335,7 @@ lrwxrwxrwx root/root usr/share/man/man3/SSL_ctrl.3ssl.gz -> SSL_CTX_ctrl.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/SSL_do_handshake.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_flush_sessions.3ssl.gz -> SSL_CTX_flush_sessions.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/SSL_free.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/SSL_get0_alpn_selected.3ssl.gz -> SSL_CTX_set_alpn_select_cb.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_get0_chain_certs.3ssl.gz -> SSL_CTX_add1_chain_cert.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_get0_param.3ssl.gz -> SSL_CTX_get0_param.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_get1_curves.3ssl.gz -> SSL_CTX_set1_curves.3ssl.gz @@ -1379,6 +1390,7 @@ lrwxrwxrwx root/root usr/share/man/man3/SSL_remove_session.3ssl.gz -> SSL_CTX_ad -rw-r--r-- root/root usr/share/man/man3/SSL_rstate_string.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_rstate_string_long.3ssl.gz -> SSL_rstate_string.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_select_current_cert.3ssl.gz -> SSL_CTX_add1_chain_cert.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/SSL_select_next_proto.3ssl.gz -> SSL_CTX_set_alpn_select_cb.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/SSL_session_reused.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_set0_chain.3ssl.gz -> SSL_CTX_add1_chain_cert.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_set0_chain_cert_store.3ssl.gz -> SSL_CTX_set1_verify_cert_store.3ssl.gz @@ -1389,6 +1401,7 @@ lrwxrwxrwx root/root usr/share/man/man3/SSL_set1_curves.3ssl.gz -> SSL_CTX_set1_ lrwxrwxrwx root/root usr/share/man/man3/SSL_set1_curves_list.3ssl.gz -> SSL_CTX_set1_curves.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_set1_param.3ssl.gz -> SSL_CTX_get0_param.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_set1_verify_cert_store.3ssl.gz -> SSL_CTX_set1_verify_cert_store.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/SSL_set_alpn_protos.3ssl.gz -> SSL_CTX_set_alpn_select_cb.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/SSL_set_bio.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_set_cert_cb.3ssl.gz -> SSL_CTX_set_cert_cb.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_set_cipher_list.3ssl.gz -> SSL_CTX_set_cipher_list.3ssl.gz diff --git a/openssl/.md5sum b/openssl/.md5sum index 4f3fbb9..e3c9445 100644 --- a/openssl/.md5sum +++ b/openssl/.md5sum @@ -1,2 +1,2 @@ 91f85842d2118003ee465c34259047e6 mksslcert.sh -f3c710c045cdee5fd114feb69feba7aa openssl-1.0.2g.tar.gz +9392e65072ce4b614c1392eefc1f23d0 openssl-1.0.2h.tar.gz diff --git a/openssl/Pkgfile b/openssl/Pkgfile index 680b64b..1f2414a 100644 --- a/openssl/Pkgfile +++ b/openssl/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: CRUX System Team, core-ports at crux dot nu name=openssl -version=1.0.2g +version=1.0.2h release=1 source=(http://www.openssl.org/source/$name-$version.tar.gz \ mksslcert.sh)