Hello community,
here is the log from the commit of package openssl for openSUSE:Factory
checked in at Thu Jul 9 10:42:46 CEST 2009.
--------
--- openssl/openssl.changes 2009-04-15 12:21:56.000000000 +0200
+++ openssl/openssl.changes 2009-07-06 06:27:38.000000000 +0200
@@ -1,0 +2,30 @@
+Fri Jul 3 11:53:48 CEST 2009 - gjhe@novell.com
+
+- update to version 0.9.8k
+- patches merged upstream:
+ openssl-CVE-2008-5077.patch
+ openssl-CVE-2009-0590.patch
+ openssl-CVE-2009-0591.patch
+ openssl-CVE-2009-0789.patch
+ openssl-CVE-2009-1377.patch
+ openssl-CVE-2009-1378.patch
+ openssl-CVE-2009-1379.patch
+ openssl-CVE-2009-1386.patch
+ openssl-CVE-2009-1387.patch
+
+-------------------------------------------------------------------
+Tue Jun 30 05:17:26 CEST 2009 - gjhe@novell.com
+
+- fix security bug [bnc#509031]
+ CVE-2009-1386
+ CVE-2009-1387
+
+-------------------------------------------------------------------
+Tue Jun 30 05:16:39 CEST 2009 - gjhe@novell.com
+
+- fix security bug [bnc#504687]
+ CVE-2009-1377
+ CVE-2009-1378
+ CVE-2009-1379
+
+-------------------------------------------------------------------
calling whatdependson for head-i586
Old:
----
openssl-0.9.8h.tar.bz2
openssl-CVE-2008-5077.patch
openssl-CVE-2009-0590.patch
openssl-CVE-2009-0591.patch
openssl-CVE-2009-0789.patch
New:
----
openssl-0.9.8k.tar.bz2
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ openssl.spec ++++++
--- /var/tmp/diff_new_pack.HZftKH/_old 2009-07-09 10:31:55.000000000 +0200
+++ /var/tmp/diff_new_pack.HZftKH/_new 2009-07-09 10:31:55.000000000 +0200
@@ -1,5 +1,5 @@
#
-# spec file for package openssl (Version 0.9.8h)
+# spec file for package openssl (Version 0.9.8k)
#
# Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
@@ -22,7 +22,7 @@
BuildRequires: bc ed zlib-devel
%define ssletcdir %{_sysconfdir}/ssl
%define num_version %(echo "%{version}" | sed -e "s+[a-zA-Z]++g; s+_.*++g")
-License: BSD 3-Clause
+License: BSD 3-clause (or similar)
Group: Productivity/Networking/Security
Provides: ssl
AutoReqProv: on
@@ -31,8 +31,8 @@
Obsoletes: openssl-64bit
%endif
#
-Version: 0.9.8h
-Release: 32
+Version: 0.9.8k
+Release: 1
Summary: Secure Sockets and Transport Layer Security
Url: http://www.openssl.org/
Source: http://www.%{name}.org/source/%{name}-%{version}.tar.bz2
@@ -51,10 +51,6 @@
%ifarch s390x
Patch9: disable-optimization-for-s390x.diff
%endif
-Patch10: openssl-CVE-2008-5077.patch
-Patch11: openssl-CVE-2009-0590.patch
-Patch12: openssl-CVE-2009-0591.patch
-Patch13: openssl-CVE-2009-0789.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
%description
@@ -87,7 +83,7 @@
Paul C. Sutton