Openembedded Core Discussions
 help / color / mirror / Atom feed
From: Alexander Kanavin <alex.kanavin@gmail.com>
To: openembedded-core@lists.openembedded.org
Subject: [PATCH 02/16] openssl10: update to 1.0.2q
Date: Thu, 22 Nov 2018 16:41:22 +0100	[thread overview]
Message-ID: <20181122154136.121480-2-alex.kanavin@gmail.com> (raw)
In-Reply-To: <20181122154136.121480-1-alex.kanavin@gmail.com>

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
---
 .../openssl10/0001-fix-CVE-2018-0734.patch    | 33 -------------------
 ...penssl10_1.0.2p.bb => openssl10_1.0.2q.bb} |  5 ++-
 2 files changed, 2 insertions(+), 36 deletions(-)
 delete mode 100644 meta/recipes-connectivity/openssl/openssl10/0001-fix-CVE-2018-0734.patch
 rename meta/recipes-connectivity/openssl/{openssl10_1.0.2p.bb => openssl10_1.0.2q.bb} (98%)

diff --git a/meta/recipes-connectivity/openssl/openssl10/0001-fix-CVE-2018-0734.patch b/meta/recipes-connectivity/openssl/openssl10/0001-fix-CVE-2018-0734.patch
deleted file mode 100644
index b9865a69b5f..00000000000
--- a/meta/recipes-connectivity/openssl/openssl10/0001-fix-CVE-2018-0734.patch
+++ /dev/null
@@ -1,33 +0,0 @@
-CVE: CVE-2018-0734
-
-Upstream-Status: Backport
-
-Signed-off-by: Kai Kang <kai.kang@windriver.com>
-
-From 43e6a58d4991a451daf4891ff05a48735df871ac Mon Sep 17 00:00:00 2001
-From: Pauli <paul.dale@oracle.com>
-Date: Mon, 29 Oct 2018 08:24:22 +1000
-Subject: [PATCH] Merge DSA reallocation timing fix CVE-2018-0734.
-
-Reviewed-by: Richard Levitte <levitte@openssl.org>
-(Merged from https://github.com/openssl/openssl/pull/7513)
----
- crypto/dsa/dsa_ossl.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/crypto/dsa/dsa_ossl.c b/crypto/dsa/dsa_ossl.c
-index 2dcfedeeee..100e269268 100644
---- a/crypto/dsa/dsa_ossl.c
-+++ b/crypto/dsa/dsa_ossl.c
-@@ -279,7 +279,7 @@ static int dsa_sign_setup(DSA *dsa, BN_CTX *ctx_in, BIGNUM **kinvp,
-         goto err;
- 
-     /* Preallocate space */
--    q_bits = BN_num_bits(dsa->q);
-+    q_bits = BN_num_bits(dsa->q) + sizeof(dsa->q->d[0]) * 16;
-     if (!BN_set_bit(&k, q_bits)
-         || !BN_set_bit(&l, q_bits)
-         || !BN_set_bit(&m, q_bits))
--- 
-2.17.0
-
diff --git a/meta/recipes-connectivity/openssl/openssl10_1.0.2p.bb b/meta/recipes-connectivity/openssl/openssl10_1.0.2q.bb
similarity index 98%
rename from meta/recipes-connectivity/openssl/openssl10_1.0.2p.bb
rename to meta/recipes-connectivity/openssl/openssl10_1.0.2q.bb
index 43259407010..8058b98677a 100644
--- a/meta/recipes-connectivity/openssl/openssl10_1.0.2p.bb
+++ b/meta/recipes-connectivity/openssl/openssl10_1.0.2q.bb
@@ -40,7 +40,6 @@ SRC_URI = "http://www.openssl.org/source/openssl-${PV}.tar.gz \
            file://0001-Fix-build-with-clang-using-external-assembler.patch \
            file://0001-openssl-force-soft-link-to-avoid-rare-race.patch \
            file://0001-allow-manpages-to-be-disabled.patch \
-           file://0001-fix-CVE-2018-0734.patch \
            "
 
 SRC_URI_append_class-target = " \
@@ -52,8 +51,8 @@ SRC_URI_append_class-nativesdk = " \
            file://environment.d-openssl.sh \
            "
 
-SRC_URI[md5sum] = "ac5eb30bf5798aa14b1ae6d0e7da58df"
-SRC_URI[sha256sum] = "50a98e07b1a89eb8f6a99477f262df71c6fa7bef77df4dc83025a2845c827d00"
+SRC_URI[md5sum] = "7563e1ce046cb21948eeb6ba1a0eb71c"
+SRC_URI[sha256sum] = "5744cfcbcec2b1b48629f7354203bc1e5e9b5466998bbccc5b5fcde3b18eb684"
 
 S = "${WORKDIR}/openssl-${PV}"
 
-- 
2.17.1



  reply	other threads:[~2018-11-22 15:41 UTC|newest]

Thread overview: 32+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2018-11-22 15:41 [PATCH 01/16] gobject-introspection: update to 1.58.1 Alexander Kanavin
2018-11-22 15:41 ` Alexander Kanavin [this message]
2018-11-22 15:41 ` [PATCH 03/16] openssl: update to 1.1.1a Alexander Kanavin
2018-11-23 23:36   ` Richard Purdie
2018-11-22 15:41 ` [PATCH 04/16] dmidecode: update to 3.2 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 05/16] tiff: update to 4.0.10 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 06/16] gdbm: update to 1.18.1 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 07/16] icu: update to 63.1 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 08/16] btrfs-tools: update to 4.19 Alexander Kanavin
2018-11-22 23:40   ` Richard Purdie
2018-11-22 15:41 ` [PATCH 09/16] vala: update to 0.42.3 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 10/16] webkitgtk: update to 2.22.4 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 11/16] psmisc: update to 23.2 Alexander Kanavin
2018-11-23 23:35   ` Richard Purdie
2018-11-22 15:41 ` [PATCH 12/16] sysprof: update to 3.30.2 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 13/16] libwebp: update to 1.0.1 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 14/16] lighttpd: update to 1.4.51 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 15/16] libdnf: update to 0.22.3 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 16/16] dnf: update to 4.0.9 Alexander Kanavin
2018-11-22 23:38   ` Richard Purdie
2018-11-23 15:33     ` Richard Purdie
2018-11-22 16:07 ` ✗ patchtest: failure for "gobject-introspection: update ..." and 15 more Patchwork
2018-11-26 22:29 ` [PATCH 01/16] gobject-introspection: update to 1.58.1 Khem Raj
2018-11-27  8:48   ` Alexander Kanavin
2018-11-27 17:58     ` Khem Raj
2018-11-27 18:59       ` Khem Raj
2018-12-02 11:23         ` Alexander Kanavin
2018-12-02 18:58           ` Khem Raj
2018-12-01 22:28       ` Alexander Kanavin
2018-12-02 18:50         ` Khem Raj
2018-12-02 22:22           ` Richard Purdie
2018-12-03 11:49             ` Alexander Kanavin

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20181122154136.121480-2-alex.kanavin@gmail.com \
    --to=alex.kanavin@gmail.com \
    --cc=openembedded-core@lists.openembedded.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox