[OE-core] [dizzy][PATCH] openssl: upgrade to v1.0.1o

Hugo Vasconcelos Saldanha hugo.saldanha at aker.com.br
Mon Jun 29 14:36:48 UTC 2015


ping

On Tue, Jun 23, 2015 at 11:48:23AM -0300, Hugo Vasconcelos Saldanha wrote:
> The upgrade fixes the following CVEs:
> 
> CVE-2015-4000
> CVE-2015-1788
> CVE-2015-1789
> CVE-2015-1790
> CVE-2015-1792
> CVE-2015-1791
> 
> A patch was updated so it could be applied cleanly to the new version.
> 
> Signed-off-by: Hugo Vasconcelos Saldanha <hugo.saldanha at aker.com.br>
> ---
>  .../openssl/openssl/debian/man-section.patch                | 13 ++++++-------
>  .../openssl/{openssl_1.0.1m.bb => openssl_1.0.1o.bb}        |  4 ++--
>  2 files changed, 8 insertions(+), 9 deletions(-)
>  rename meta/recipes-connectivity/openssl/{openssl_1.0.1m.bb => openssl_1.0.1o.bb} (92%)
> 
> diff --git a/meta/recipes-connectivity/openssl/openssl/debian/man-section.patch b/meta/recipes-connectivity/openssl/openssl/debian/man-section.patch
> index 21c1d1a..583b5d8 100644
> --- a/meta/recipes-connectivity/openssl/openssl/debian/man-section.patch
> +++ b/meta/recipes-connectivity/openssl/openssl/debian/man-section.patch
> @@ -1,11 +1,10 @@
>  Upstream-Status: Backport [debian]
>  
> -Index: openssl-1.0.0c/Makefile.org
> -===================================================================
> ---- openssl-1.0.0c.orig/Makefile.org	2010-12-12 16:11:37.000000000 +0100
> -+++ openssl-1.0.0c/Makefile.org	2010-12-12 16:13:28.000000000 +0100
> +diff -ur openssl-1.0.1o.orig/Makefile.org openssl-1.0.1o/Makefile.org
> +--- openssl-1.0.1o.orig/Makefile.org	2015-06-12 12:17:52.000000000 -0300
> ++++ openssl-1.0.1o/Makefile.org	2015-06-23 09:57:43.929893419 -0300
>  @@ -160,7 +160,8 @@
> - MANDIR=/usr/share/man
> + MANDIR=$(OPENSSLDIR)/man
>   MAN1=1
>   MAN3=3
>  -MANSUFFIX=
> @@ -14,7 +13,7 @@ Index: openssl-1.0.0c/Makefile.org
>   HTMLSUFFIX=html
>   HTMLDIR=$(OPENSSLDIR)/html
>   SHELL=/bin/sh
> -@@ -651,7 +652,7 @@
> +@@ -642,7 +643,7 @@
>   		echo "installing man$$sec/$$fn.$${sec}$(MANSUFFIX)"; \
>   		(cd `$(PERL) util/dirname.pl $$i`; \
>   		sh -c "$$pod2man \
> @@ -23,7 +22,7 @@ Index: openssl-1.0.0c/Makefile.org
>   			--release=$(VERSION) `basename $$i`") \
>   			>  $(INSTALL_PREFIX)$(MANDIR)/man$$sec/$$fn.$${sec}$(MANSUFFIX); \
>   		$(PERL) util/extract-names.pl < $$i | \
> -@@ -668,7 +669,7 @@
> +@@ -659,7 +660,7 @@
>   		echo "installing man$$sec/$$fn.$${sec}$(MANSUFFIX)"; \
>   		(cd `$(PERL) util/dirname.pl $$i`; \
>   		sh -c "$$pod2man \
> diff --git a/meta/recipes-connectivity/openssl/openssl_1.0.1m.bb b/meta/recipes-connectivity/openssl/openssl_1.0.1o.bb
> similarity index 92%
> rename from meta/recipes-connectivity/openssl/openssl_1.0.1m.bb
> rename to meta/recipes-connectivity/openssl/openssl_1.0.1o.bb
> index cab6b3f..44d4d27 100644
> --- a/meta/recipes-connectivity/openssl/openssl_1.0.1m.bb
> +++ b/meta/recipes-connectivity/openssl/openssl_1.0.1o.bb
> @@ -37,8 +37,8 @@ SRC_URI += "file://configure-targets.patch \
>              file://run-ptest \
>             "
>  
> -SRC_URI[md5sum] = "d143d1555d842a069cb7cc34ba745a06"
> -SRC_URI[sha256sum] = "095f0b7b09116c0c5526422088058dc7e6e000aa14d22acca6a4e2babcdfef74"
> +SRC_URI[md5sum] = "af1096f500a612e2e2adacb958d7eab1"
> +SRC_URI[sha256sum] = "16e678c6a05f2502811e075f2c4059ac01c878d091c9c585afc49ebc541f7b13"
>  
>  PACKAGES =+ " \
>  	${PN}-engines \
> -- 
> 2.4.4
> 

-- 
		Hugo




More information about the Openembedded-core mailing list