[OE-core] [dizzy][PATCH] openssl: upgrade to v1.0.1o

Hugo Vasconcelos Saldanha hugo.saldanha at aker.com.br
Tue Jun 23 14:48:23 UTC 2015


The upgrade fixes the following CVEs:

CVE-2015-4000
CVE-2015-1788
CVE-2015-1789
CVE-2015-1790
CVE-2015-1792
CVE-2015-1791

A patch was updated so it could be applied cleanly to the new version.

Signed-off-by: Hugo Vasconcelos Saldanha <hugo.saldanha at aker.com.br>
---
 .../openssl/openssl/debian/man-section.patch                | 13 ++++++-------
 .../openssl/{openssl_1.0.1m.bb => openssl_1.0.1o.bb}        |  4 ++--
 2 files changed, 8 insertions(+), 9 deletions(-)
 rename meta/recipes-connectivity/openssl/{openssl_1.0.1m.bb => openssl_1.0.1o.bb} (92%)

diff --git a/meta/recipes-connectivity/openssl/openssl/debian/man-section.patch b/meta/recipes-connectivity/openssl/openssl/debian/man-section.patch
index 21c1d1a..583b5d8 100644
--- a/meta/recipes-connectivity/openssl/openssl/debian/man-section.patch
+++ b/meta/recipes-connectivity/openssl/openssl/debian/man-section.patch
@@ -1,11 +1,10 @@
 Upstream-Status: Backport [debian]
 
-Index: openssl-1.0.0c/Makefile.org
-===================================================================
---- openssl-1.0.0c.orig/Makefile.org	2010-12-12 16:11:37.000000000 +0100
-+++ openssl-1.0.0c/Makefile.org	2010-12-12 16:13:28.000000000 +0100
+diff -ur openssl-1.0.1o.orig/Makefile.org openssl-1.0.1o/Makefile.org
+--- openssl-1.0.1o.orig/Makefile.org	2015-06-12 12:17:52.000000000 -0300
++++ openssl-1.0.1o/Makefile.org	2015-06-23 09:57:43.929893419 -0300
 @@ -160,7 +160,8 @@
- MANDIR=/usr/share/man
+ MANDIR=$(OPENSSLDIR)/man
  MAN1=1
  MAN3=3
 -MANSUFFIX=
@@ -14,7 +13,7 @@ Index: openssl-1.0.0c/Makefile.org
  HTMLSUFFIX=html
  HTMLDIR=$(OPENSSLDIR)/html
  SHELL=/bin/sh
-@@ -651,7 +652,7 @@
+@@ -642,7 +643,7 @@
  		echo "installing man$$sec/$$fn.$${sec}$(MANSUFFIX)"; \
  		(cd `$(PERL) util/dirname.pl $$i`; \
  		sh -c "$$pod2man \
@@ -23,7 +22,7 @@ Index: openssl-1.0.0c/Makefile.org
  			--release=$(VERSION) `basename $$i`") \
  			>  $(INSTALL_PREFIX)$(MANDIR)/man$$sec/$$fn.$${sec}$(MANSUFFIX); \
  		$(PERL) util/extract-names.pl < $$i | \
-@@ -668,7 +669,7 @@
+@@ -659,7 +660,7 @@
  		echo "installing man$$sec/$$fn.$${sec}$(MANSUFFIX)"; \
  		(cd `$(PERL) util/dirname.pl $$i`; \
  		sh -c "$$pod2man \
diff --git a/meta/recipes-connectivity/openssl/openssl_1.0.1m.bb b/meta/recipes-connectivity/openssl/openssl_1.0.1o.bb
similarity index 92%
rename from meta/recipes-connectivity/openssl/openssl_1.0.1m.bb
rename to meta/recipes-connectivity/openssl/openssl_1.0.1o.bb
index cab6b3f..44d4d27 100644
--- a/meta/recipes-connectivity/openssl/openssl_1.0.1m.bb
+++ b/meta/recipes-connectivity/openssl/openssl_1.0.1o.bb
@@ -37,8 +37,8 @@ SRC_URI += "file://configure-targets.patch \
             file://run-ptest \
            "
 
-SRC_URI[md5sum] = "d143d1555d842a069cb7cc34ba745a06"
-SRC_URI[sha256sum] = "095f0b7b09116c0c5526422088058dc7e6e000aa14d22acca6a4e2babcdfef74"
+SRC_URI[md5sum] = "af1096f500a612e2e2adacb958d7eab1"
+SRC_URI[sha256sum] = "16e678c6a05f2502811e075f2c4059ac01c878d091c9c585afc49ebc541f7b13"
 
 PACKAGES =+ " \
 	${PN}-engines \
-- 
2.4.4





More information about the Openembedded-core mailing list