[PATCH] openssl: upgrade from 1.1.1k to 1.1.1l

[PATCH] openssl: upgrade from 1.1.1k to 1.1.1l

[Randy MacLeod]

Includes fixes for:

CVE: CVE-2021-3711
CVE: CVE-2021-3712

as described by:
   https://www.openssl.org/news/secadv/20210824.txt

Ptest results on qemux86-64 with kvm:
   All tests successful.
   Files=158, Tests=2532, 137 wallclock secs \
     ( 2.59 usr  0.33 sys + 104.71 cusr 44.19 csys = 151.82 CPU)
   Result: PASS
   DURATION: 137

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
---
 .../openssl/{openssl_1.1.1k.bb => openssl_1.1.1l.bb}            | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-connectivity/openssl/{openssl_1.1.1k.bb => openssl_1.1.1l.bb} (98%)

diff --git a/meta/recipes-connectivity/openssl/openssl_1.1.1k.bb b/meta/recipes-connectivity/openssl/openssl_1.1.1l.bb
similarity index 98%
rename from meta/recipes-connectivity/openssl/openssl_1.1.1k.bb
rename to meta/recipes-connectivity/openssl/openssl_1.1.1l.bb
index 09afa27ac1..b241ba78bc 100644
--- a/meta/recipes-connectivity/openssl/openssl_1.1.1k.bb
+++ b/meta/recipes-connectivity/openssl/openssl_1.1.1l.bb
@@ -28,7 +28,7 @@ SRC_URI:append:riscv32 = " \
            file://0004-Fixup-support-for-io_pgetevents_time64-syscall.patch \
            "
 
-SRC_URI[sha256sum] = "892a0875b9872acd04a9fde79b1f943075d5ea162415de3047c327df33fbaee5"
+SRC_URI[sha256sum] = "0b7a3e5e59c34827fe0c3a74b7ec8baef302b98fa80088d7f9153aa16fa76bd1"
 
 inherit lib_package multilib_header multilib_script ptest
 MULTILIB_SCRIPTS = "${PN}-bin:${bindir}/c_rehash"
-- 
2.30.2

Re: [OE-core] [PATCH] openssl: upgrade from 1.1.1k to 1.1.1l

[Mikko Rapeli]

Hi,

On Tue, Aug 24, 2021 at 11:44:05PM -0400, Randy MacLeod wrote:
> Includes fixes for:
> 
> CVE: CVE-2021-3711
> CVE: CVE-2021-3712
> 
> as described by:
>    https://www.openssl.org/news/secadv/20210824.txt
> 
> Ptest results on qemux86-64 with kvm:
>    All tests successful.
>    Files=158, Tests=2532, 137 wallclock secs \
>      ( 2.59 usr  0.33 sys + 104.71 cusr 44.19 csys = 151.82 CPU)
>    Result: PASS
>    DURATION: 137

I sent the same with CI test runs passing on x86_86 and aarch64 products
on dunfell. No problems seen with the update.

Tested-by: Mikko Rapeli <mikko.rapeli@bmw.de>

-Mikko

> Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
> ---
>  .../openssl/{openssl_1.1.1k.bb => openssl_1.1.1l.bb}            | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>  rename meta/recipes-connectivity/openssl/{openssl_1.1.1k.bb => openssl_1.1.1l.bb} (98%)
> 
> diff --git a/meta/recipes-connectivity/openssl/openssl_1.1.1k.bb b/meta/recipes-connectivity/openssl/openssl_1.1.1l.bb
> similarity index 98%
> rename from meta/recipes-connectivity/openssl/openssl_1.1.1k.bb
> rename to meta/recipes-connectivity/openssl/openssl_1.1.1l.bb
> index 09afa27ac1..b241ba78bc 100644
> --- a/meta/recipes-connectivity/openssl/openssl_1.1.1k.bb
> +++ b/meta/recipes-connectivity/openssl/openssl_1.1.1l.bb
> @@ -28,7 +28,7 @@ SRC_URI:append:riscv32 = " \
>             file://0004-Fixup-support-for-io_pgetevents_time64-syscall.patch \
>             "
>  
> -SRC_URI[sha256sum] = "892a0875b9872acd04a9fde79b1f943075d5ea162415de3047c327df33fbaee5"
> +SRC_URI[sha256sum] = "0b7a3e5e59c34827fe0c3a74b7ec8baef302b98fa80088d7f9153aa16fa76bd1"
>  
>  inherit lib_package multilib_header multilib_script ptest
>  MULTILIB_SCRIPTS = "${PN}-bin:${bindir}/c_rehash"
> -- 
> 2.30.2
> 

> 
> 
>