Discussion:
[packages/openssl] (3 commits) ...Merge branch 'dev-1.0.2f'
(too old to reply)
glen
2016-01-28 18:09:38 UTC
Permalink
Summary of changes:

81e27b7... test build upcoming 1.0.2f (*)
79a6f85... 1.0.2f release. CVE-2016-0701, CVE-2015-3197 fixes
2450a30... Merge branch 'dev-1.0.2f'

(*) This commit already existed in another branch; no separate mail sent
glen
2016-01-28 18:09:43 UTC
Permalink
commit 79a6f853504ceef91fe05a36dbde7f9d863ad07b
Author: Elan Ruusamäe <***@delfi.ee>
Date: Thu Jan 28 20:04:08 2016 +0200

1.0.2f release. CVE-2016-0701, CVE-2015-3197 fixes

- DH small subgroups (CVE-2016-0701)
- SSLv2 doesn't block disabled ciphers (CVE-2015-3197)

https://www.openssl.org/news/openssl-1.0.2-notes.html

openssl.spec | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
---
diff --git a/openssl.spec b/openssl.spec
index 3b03d09..21e1a12 100644
--- a/openssl.spec
+++ b/openssl.spec
@@ -25,15 +25,15 @@ Name: openssl
# Version 1.0.2 will be supported until 2019-12-31.
# https://www.openssl.org/about/releasestrat.html
Version: 1.0.2f
-Release: 0.1
+Release: 1
License: Apache-like
Group: Libraries
%if %{without snap}
Source0: ftp://ftp.openssl.org/source/%{name}-%{version}.tar.gz
+# Source0-md5: b3bf73f507172be9292ea2a8c28b659d
%else
Source1: https://github.com/openssl/openssl/archive/OpenSSL_1_0_2-stable.tar.gz
%endif
-# Source0-md5: 5262bfa25b60ed9de9f28d5d52d77fc5
Source2: %{name}.1.pl
Source3: %{name}-ssl-certificate.sh
Source4: %{name}-c_rehash.sh
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/openssl.git/commitdiff/2450a3005fd2469cab3b19538af2a1cc4de854d3
glen
2016-01-28 18:09:48 UTC
Permalink
commit 2450a3005fd2469cab3b19538af2a1cc4de854d3
Merge: e9e51fa 79a6f85
Author: Elan Ruusamäe <***@delfi.ee>
Date: Thu Jan 28 20:09:26 2016 +0200

Merge branch 'dev-1.0.2f'

openssl.spec | 17 +++++++++++++++--
1 file changed, 15 insertions(+), 2 deletions(-)
---
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/openssl.git/commitdiff/2450a3005fd2469cab3b19538af2a1cc4de854d3
Loading...