commit openssl for openSUSE:Factory
Hello community, here is the log from the commit of package openssl for openSUSE:Factory checked in at Thu Oct 7 21:53:08 CEST 2010. -------- --- openssl/openssl.changes 2010-07-28 22:55:55.000000000 +0200 +++ /mounts/work_src_done/STABLE/openssl/openssl.changes 2010-09-25 11:00:51.000000000 +0200 @@ -1,0 +2,6 @@ +Sat Sep 25 08:55:02 UTC 2010 - gjhe@novell.com + +- fix bug [bnc#629905] + CVE-2010-2939 + +------------------------------------------------------------------- calling whatdependson for head-i586 New: ---- CVE-2010-2939.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ openssl.spec ++++++ --- /var/tmp/diff_new_pack.BtpHrm/_old 2010-10-07 21:52:00.000000000 +0200 +++ /var/tmp/diff_new_pack.BtpHrm/_new 2010-10-07 21:52:00.000000000 +0200 @@ -32,7 +32,7 @@ %endif # Version: 1.0.0 -Release: 9 +Release: 10 Summary: Secure Sockets and Transport Layer Security Url: http://www.openssl.org/ Source: http://www.%{name}.org/source/%{name}-%{version}.tar.bz2 @@ -45,6 +45,7 @@ Patch2: bug610223.patch Patch3: CVE-2010-1633_and_CVE-2010-0742.patch Patch4: patchset-19727.diff +Patch5: CVE-2010-2939.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -176,6 +177,7 @@ %patch2 -p1 %patch3 -p1 %patch4 -p1 +%patch5 -p1 cp -p %{S:10} . echo "adding/overwriting some entries in the 'table' hash in Configure" # $dso_scheme:$shared_target:$shared_cflag:$shared_ldflag:$shared_extension:$ranlib:$arflags ++++++ CVE-2010-2939.patch ++++++ Index: openssl-1.0.0/ssl/s3_clnt.c =================================================================== --- openssl-1.0.0.orig/ssl/s3_clnt.c +++ openssl-1.0.0/ssl/s3_clnt.c @@ -1508,6 +1508,7 @@ int ssl3_get_key_exchange(SSL *s) s->session->sess_cert->peer_ecdh_tmp=ecdh; ecdh=NULL; BN_CTX_free(bn_ctx); + bn_ctx=NULL; EC_POINT_free(srvr_ecpoint); srvr_ecpoint = NULL; } ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org
participants (1)
-
root@hilbert.suse.de