From: Alexander Kanavin <alex.kanavin@gmail.com>
To: openembedded-core@lists.openembedded.org
Subject: [PATCH 02/16] openssl10: update to 1.0.2q
Date: Thu, 22 Nov 2018 16:41:22 +0100 [thread overview]
Message-ID: <20181122154136.121480-2-alex.kanavin@gmail.com> (raw)
In-Reply-To: <20181122154136.121480-1-alex.kanavin@gmail.com>
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
---
.../openssl10/0001-fix-CVE-2018-0734.patch | 33 -------------------
...penssl10_1.0.2p.bb => openssl10_1.0.2q.bb} | 5 ++-
2 files changed, 2 insertions(+), 36 deletions(-)
delete mode 100644 meta/recipes-connectivity/openssl/openssl10/0001-fix-CVE-2018-0734.patch
rename meta/recipes-connectivity/openssl/{openssl10_1.0.2p.bb => openssl10_1.0.2q.bb} (98%)
diff --git a/meta/recipes-connectivity/openssl/openssl10/0001-fix-CVE-2018-0734.patch b/meta/recipes-connectivity/openssl/openssl10/0001-fix-CVE-2018-0734.patch
deleted file mode 100644
index b9865a69b5f..00000000000
--- a/meta/recipes-connectivity/openssl/openssl10/0001-fix-CVE-2018-0734.patch
+++ /dev/null
@@ -1,33 +0,0 @@
-CVE: CVE-2018-0734
-
-Upstream-Status: Backport
-
-Signed-off-by: Kai Kang <kai.kang@windriver.com>
-
-From 43e6a58d4991a451daf4891ff05a48735df871ac Mon Sep 17 00:00:00 2001
-From: Pauli <paul.dale@oracle.com>
-Date: Mon, 29 Oct 2018 08:24:22 +1000
-Subject: [PATCH] Merge DSA reallocation timing fix CVE-2018-0734.
-
-Reviewed-by: Richard Levitte <levitte@openssl.org>
-(Merged from https://github.com/openssl/openssl/pull/7513)
----
- crypto/dsa/dsa_ossl.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/crypto/dsa/dsa_ossl.c b/crypto/dsa/dsa_ossl.c
-index 2dcfedeeee..100e269268 100644
---- a/crypto/dsa/dsa_ossl.c
-+++ b/crypto/dsa/dsa_ossl.c
-@@ -279,7 +279,7 @@ static int dsa_sign_setup(DSA *dsa, BN_CTX *ctx_in, BIGNUM **kinvp,
- goto err;
-
- /* Preallocate space */
-- q_bits = BN_num_bits(dsa->q);
-+ q_bits = BN_num_bits(dsa->q) + sizeof(dsa->q->d[0]) * 16;
- if (!BN_set_bit(&k, q_bits)
- || !BN_set_bit(&l, q_bits)
- || !BN_set_bit(&m, q_bits))
---
-2.17.0
-
diff --git a/meta/recipes-connectivity/openssl/openssl10_1.0.2p.bb b/meta/recipes-connectivity/openssl/openssl10_1.0.2q.bb
similarity index 98%
rename from meta/recipes-connectivity/openssl/openssl10_1.0.2p.bb
rename to meta/recipes-connectivity/openssl/openssl10_1.0.2q.bb
index 43259407010..8058b98677a 100644
--- a/meta/recipes-connectivity/openssl/openssl10_1.0.2p.bb
+++ b/meta/recipes-connectivity/openssl/openssl10_1.0.2q.bb
@@ -40,7 +40,6 @@ SRC_URI = "http://www.openssl.org/source/openssl-${PV}.tar.gz \
file://0001-Fix-build-with-clang-using-external-assembler.patch \
file://0001-openssl-force-soft-link-to-avoid-rare-race.patch \
file://0001-allow-manpages-to-be-disabled.patch \
- file://0001-fix-CVE-2018-0734.patch \
"
SRC_URI_append_class-target = " \
@@ -52,8 +51,8 @@ SRC_URI_append_class-nativesdk = " \
file://environment.d-openssl.sh \
"
-SRC_URI[md5sum] = "ac5eb30bf5798aa14b1ae6d0e7da58df"
-SRC_URI[sha256sum] = "50a98e07b1a89eb8f6a99477f262df71c6fa7bef77df4dc83025a2845c827d00"
+SRC_URI[md5sum] = "7563e1ce046cb21948eeb6ba1a0eb71c"
+SRC_URI[sha256sum] = "5744cfcbcec2b1b48629f7354203bc1e5e9b5466998bbccc5b5fcde3b18eb684"
S = "${WORKDIR}/openssl-${PV}"
--
2.17.1
next prev parent reply other threads:[~2018-11-22 15:41 UTC|newest]
Thread overview: 32+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-11-22 15:41 [PATCH 01/16] gobject-introspection: update to 1.58.1 Alexander Kanavin
2018-11-22 15:41 ` Alexander Kanavin [this message]
2018-11-22 15:41 ` [PATCH 03/16] openssl: update to 1.1.1a Alexander Kanavin
2018-11-23 23:36 ` Richard Purdie
2018-11-22 15:41 ` [PATCH 04/16] dmidecode: update to 3.2 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 05/16] tiff: update to 4.0.10 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 06/16] gdbm: update to 1.18.1 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 07/16] icu: update to 63.1 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 08/16] btrfs-tools: update to 4.19 Alexander Kanavin
2018-11-22 23:40 ` Richard Purdie
2018-11-22 15:41 ` [PATCH 09/16] vala: update to 0.42.3 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 10/16] webkitgtk: update to 2.22.4 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 11/16] psmisc: update to 23.2 Alexander Kanavin
2018-11-23 23:35 ` Richard Purdie
2018-11-22 15:41 ` [PATCH 12/16] sysprof: update to 3.30.2 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 13/16] libwebp: update to 1.0.1 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 14/16] lighttpd: update to 1.4.51 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 15/16] libdnf: update to 0.22.3 Alexander Kanavin
2018-11-22 15:41 ` [PATCH 16/16] dnf: update to 4.0.9 Alexander Kanavin
2018-11-22 23:38 ` Richard Purdie
2018-11-23 15:33 ` Richard Purdie
2018-11-22 16:07 ` ✗ patchtest: failure for "gobject-introspection: update ..." and 15 more Patchwork
2018-11-26 22:29 ` [PATCH 01/16] gobject-introspection: update to 1.58.1 Khem Raj
2018-11-27 8:48 ` Alexander Kanavin
2018-11-27 17:58 ` Khem Raj
2018-11-27 18:59 ` Khem Raj
2018-12-02 11:23 ` Alexander Kanavin
2018-12-02 18:58 ` Khem Raj
2018-12-01 22:28 ` Alexander Kanavin
2018-12-02 18:50 ` Khem Raj
2018-12-02 22:22 ` Richard Purdie
2018-12-03 11:49 ` Alexander Kanavin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20181122154136.121480-2-alex.kanavin@gmail.com \
--to=alex.kanavin@gmail.com \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox