commit 90e8c73802afae3eaa78ef20cdf9ce82101069fa Author: Fredrik Rinnestam <fredrik@crux.nu> Date: Thu Nov 2 23:55:32 2017 +0100 openssl: updated to 1.0.2m. Fix for CVE-2017-3736, CVE-2017-3735 diff --git a/openssl/.footprint b/openssl/.footprint index bdb2fd42..3321694e 100644 --- a/openssl/.footprint +++ b/openssl/.footprint @@ -146,6 +146,48 @@ lrwxrwxrwx root/root usr/share/man/man1/md5.1ssl.gz -> dgst.1ssl.gz lrwxrwxrwx root/root usr/share/man/man1/mdc2.1ssl.gz -> dgst.1ssl.gz -rw-r--r-- root/root usr/share/man/man1/nseq.1ssl.gz -rw-r--r-- root/root usr/share/man/man1/ocsp.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-asn1parse.1ssl.gz -> asn1parse.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-ca.1ssl.gz -> ca.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-ciphers.1ssl.gz -> ciphers.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-cms.1ssl.gz -> cms.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-crl.1ssl.gz -> crl.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-crl2pkcs7.1ssl.gz -> crl2pkcs7.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-dgst.1ssl.gz -> dgst.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-dhparam.1ssl.gz -> dhparam.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-dsa.1ssl.gz -> dsa.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-dsaparam.1ssl.gz -> dsaparam.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-ec.1ssl.gz -> ec.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-ecparam.1ssl.gz -> ecparam.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-enc.1ssl.gz -> enc.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-errstr.1ssl.gz -> errstr.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-gendsa.1ssl.gz -> gendsa.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-genpkey.1ssl.gz -> genpkey.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-genrsa.1ssl.gz -> genrsa.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-nseq.1ssl.gz -> nseq.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-ocsp.1ssl.gz -> ocsp.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-passwd.1ssl.gz -> passwd.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-pkcs12.1ssl.gz -> pkcs12.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-pkcs7.1ssl.gz -> pkcs7.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-pkcs8.1ssl.gz -> pkcs8.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-pkey.1ssl.gz -> pkey.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-pkeyparam.1ssl.gz -> pkeyparam.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-pkeyutl.1ssl.gz -> pkeyutl.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-rand.1ssl.gz -> rand.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-req.1ssl.gz -> req.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-rsa.1ssl.gz -> rsa.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-rsautl.1ssl.gz -> rsautl.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-s_client.1ssl.gz -> s_client.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-s_server.1ssl.gz -> s_server.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-s_time.1ssl.gz -> s_time.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-sess_id.1ssl.gz -> sess_id.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-smime.1ssl.gz -> smime.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-speed.1ssl.gz -> speed.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-spkac.1ssl.gz -> spkac.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-ts.1ssl.gz -> ts.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-tsget.1ssl.gz -> tsget.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-verify.1ssl.gz -> verify.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-version.1ssl.gz -> version.1ssl.gz +lrwxrwxrwx root/root usr/share/man/man1/openssl-x509.1ssl.gz -> x509.1ssl.gz -rw-r--r-- root/root usr/share/man/man1/openssl.1ssl.gz -rw-r--r-- root/root usr/share/man/man1/passwd.1ssl.gz -rw-r--r-- root/root usr/share/man/man1/pkcs12.1ssl.gz @@ -840,6 +882,7 @@ lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_CTX_set_rsa_padding.3ssl.gz -> lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_CTX_set_rsa_pss_saltlen.3ssl.gz -> EVP_PKEY_CTX_ctrl.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_CTX_set_rsa_rsa_keygen_bits.3ssl.gz -> EVP_PKEY_CTX_ctrl.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_CTX_set_signature_md.3ssl.gz -> EVP_PKEY_CTX_ctrl.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_METHOD.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_assign_DH.3ssl.gz -> EVP_PKEY_set1_RSA.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_assign_DSA.3ssl.gz -> EVP_PKEY_set1_RSA.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_assign_EC_KEY.3ssl.gz -> EVP_PKEY_set1_RSA.3ssl.gz @@ -863,6 +906,39 @@ lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_get1_RSA.3ssl.gz -> EVP_PKEY_se lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_get_default_digest_nid.3ssl.gz -> EVP_PKEY_get_default_digest.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/EVP_PKEY_keygen.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_keygen_init.3ssl.gz -> EVP_PKEY_keygen.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_add0.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_copy.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_find.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_free.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_get_cleanup.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_get_copy.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_get_ctrl.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_get_decrypt.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_get_derive.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_get_encrypt.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_get_init.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_get_keygen.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_get_paramgen.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_get_sign.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_get_signctx.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_get_verify.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_get_verify_recover.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_get_verifyctx.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +-rw-r--r-- root/root usr/share/man/man3/EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_set_cleanup.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_set_copy.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_set_ctrl.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_set_decrypt.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_set_derive.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_set_encrypt.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_set_init.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_set_keygen.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_set_paramgen.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_set_sign.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_set_signctx.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_set_verify.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_set_verify_recover.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_meth_set_verifyctx.3ssl.gz -> EVP_PKEY_meth_new.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_missing_parameters.3ssl.gz -> EVP_PKEY_cmp.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/EVP_PKEY_new.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/EVP_PKEY_paramgen.3ssl.gz -> EVP_PKEY_keygen.3ssl.gz @@ -1289,6 +1365,8 @@ lrwxrwxrwx root/root usr/share/man/man3/SSL_CTX_set_psk_server_callback.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/SSL_CTX_set_session_id_context.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/SSL_CTX_set_ssl_version.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/SSL_CTX_set_timeout.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/SSL_CTX_set_tlsext_servername_arg.3ssl.gz -> SSL_CTX_set_tlsext_servername_callback.3ssl.gz +-rw-r--r-- root/root usr/share/man/man3/SSL_CTX_set_tlsext_servername_callback.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_CTX_set_tlsext_status_arg.3ssl.gz -> SSL_CTX_set_tlsext_status_cb.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/SSL_CTX_set_tlsext_status_cb.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/SSL_CTX_set_tlsext_ticket_key_cb.3ssl.gz @@ -1338,6 +1416,7 @@ lrwxrwxrwx root/root usr/share/man/man3/SSL_clear_options.3ssl.gz -> SSL_CTX_set -rw-r--r-- root/root usr/share/man/man3/SSL_connect.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_ctrl.3ssl.gz -> SSL_CTX_ctrl.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/SSL_do_handshake.3ssl.gz +-rw-r--r-- root/root usr/share/man/man3/SSL_export_keying_material.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_flush_sessions.3ssl.gz -> SSL_CTX_flush_sessions.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/SSL_free.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_get0_alpn_selected.3ssl.gz -> SSL_CTX_set_alpn_select_cb.3ssl.gz @@ -1373,6 +1452,8 @@ lrwxrwxrwx root/root usr/share/man/man3/SSL_get_quiet_shutdown.3ssl.gz -> SSL_CT -rw-r--r-- root/root usr/share/man/man3/SSL_get_rbio.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_get_read_ahead.3ssl.gz -> SSL_CTX_set_read_ahead.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_get_secure_renegotiation_support.3ssl.gz -> SSL_CTX_set_options.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/SSL_get_servername.3ssl.gz -> SSL_CTX_set_tlsext_servername_callback.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/SSL_get_servername_type.3ssl.gz -> SSL_CTX_set_tlsext_servername_callback.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/SSL_get_session.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_get_shared_curve.3ssl.gz -> SSL_CTX_set1_curves.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/SSL_get_shutdown.3ssl.gz -> SSL_set_shutdown.3ssl.gz @@ -1525,6 +1606,7 @@ lrwxrwxrwx root/root usr/share/man/man3/X509_NAME_oneline.3ssl.gz -> X509_NAME_p lrwxrwxrwx root/root usr/share/man/man3/X509_NAME_print.3ssl.gz -> X509_NAME_print_ex.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/X509_NAME_print_ex.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/X509_NAME_print_ex_fp.3ssl.gz -> X509_NAME_print_ex.3ssl.gz +lrwxrwxrwx root/root usr/share/man/man3/X509_REQ_check_private_key.3ssl.gz -> X509_check_private_key.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/X509_STORE_CTX_cleanup.3ssl.gz -> X509_STORE_CTX_new.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/X509_STORE_CTX_free.3ssl.gz -> X509_STORE_CTX_new.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/X509_STORE_CTX_get0_param.3ssl.gz -> X509_STORE_CTX_new.3ssl.gz @@ -1568,6 +1650,7 @@ lrwxrwxrwx root/root usr/share/man/man3/X509_check_email.3ssl.gz -> X509_check_h -rw-r--r-- root/root usr/share/man/man3/X509_check_host.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/X509_check_ip.3ssl.gz -> X509_check_host.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/X509_check_ip_asc.3ssl.gz -> X509_check_host.3ssl.gz +-rw-r--r-- root/root usr/share/man/man3/X509_check_private_key.3ssl.gz lrwxrwxrwx root/root usr/share/man/man3/X509_free.3ssl.gz -> X509_new.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/X509_new.3ssl.gz -rw-r--r-- root/root usr/share/man/man3/X509_verify_cert.3ssl.gz diff --git a/openssl/.md5sum b/openssl/.md5sum index d2eea0ee..057dcfd1 100644 --- a/openssl/.md5sum +++ b/openssl/.md5sum @@ -1,2 +1,2 @@ 91f85842d2118003ee465c34259047e6 mksslcert.sh -f85123cd390e864dfbe517e7616e6566 openssl-1.0.2l.tar.gz +10e9e37f492094b9ef296f68f24a7666 openssl-1.0.2m.tar.gz diff --git a/openssl/.signature b/openssl/.signature index 2203bec1..12f0148a 100644 --- a/openssl/.signature +++ b/openssl/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/core.pub -RWRJc1FUaeVeqq5W8zEwfNwbeTEIxABs+zTGPTmGg3WlQmh5ii5BarfsXGzlvrKnev7Pp7KWgN1TvEAu0PkVhU+NWXBtyhjkYAY= -SHA256 (Pkgfile) = fafa732ae8d37338b828e2d0561eb40f27a610f30e1c9fb3b0af4d78452d985a -SHA256 (.footprint) = 3ae01429ede9e29a90fa49c51cf378d967114d1744d8f3fcf477eb92fe4b4cc7 -SHA256 (openssl-1.0.2l.tar.gz) = ce07195b659e75f4e1db43552860070061f156a98bb37b672b101ba6e3ddf30c +RWRJc1FUaeVeqpI+YtkQdbm6BBZSeD5mHdwsENety2FUAjfHKdRtwB3CT8+HjzBJ3cKjKEETg6pfd1xCpTPdDWLaXv1N/cV/9Qs= +SHA256 (Pkgfile) = 72e3320693c08ae8e580a7220d9c9c3afce39511d51d4b31efaed93f9994ef5b +SHA256 (.footprint) = 7dbc1710a05fce27dc1dc6997877ecf87a36e43283e87cc3a1fbc00894c21a6a +SHA256 (openssl-1.0.2m.tar.gz) = 8c6ff15ec6b319b50788f42c7abc2890c08ba5a1cdcd3810eb9092deada37b0f SHA256 (mksslcert.sh) = d01cfd061b792f4f7444429582c5c9e83aaa7fc63cafd05669fd3f2970dff779 diff --git a/openssl/Pkgfile b/openssl/Pkgfile index 02e8f4ed..1756092f 100644 --- a/openssl/Pkgfile +++ b/openssl/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: CRUX System Team, core-ports at crux dot nu name=openssl -version=1.0.2l +version=1.0.2m release=1 source=(http://www.openssl.org/source/$name-$version.tar.gz \ mksslcert.sh)