ExternalVendorCode/openwrt
1
0
Fork 0
mirror of https://github.com/openwrt/openwrt.git synced 2024-12-27 01:11:14 +00:00
Code Issues Actions 4 Packages Projects Releases Wiki Activity
d24bdaa794
openwrt/package/libs/openssl/patches/160-disable_doc_tests.patch

59 lines
1.5 KiB
Diff
Raw Normal View History

openssl: refresh patches SVN-Revision: 19368
2010-01-28 19:27:53 +00:00
--- a/Makefile
+++ b/Makefile
openssl: update to 1.0.2i Drop 302-fix_no_cmac_build.patch, it has been applied upstream. Security fixes: * (Severity: High) OCSP Status Request extension unbounded memory growth (CVE-2016-6304) * (Severity: Moderate) SSL_peek() hang on empty record (CVE-2016-6305) * 10 Low severity issues Security advisory: https://www.openssl.org/news/secadv/20160922.txt Changelog: https://www.openssl.org/news/cl102.txt Signed-off-by: Magnus Kroken <mkroken@gmail.com> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2016-09-24 09:36:49 +00:00
@@ -139,7 +139,7 @@ FIPSCANLIB=
openssl 1.0.1 update patch This patch updates openssl to 1.0.1 and refreshes all patches. Signed-off-by: Peter Wagner <tripolar@gmx.at> SVN-Revision: 30984
2012-03-18 19:46:01 +00:00
BASEADDR=0xFB00000
openssl: update to 0.9.8j. thanks puchu. - addresses CVE-2008-5077 SVN-Revision: 14102
2009-01-19 09:50:41 +00:00
update openssl to 0.9.8k (#4846) SVN-Revision: 15106
2009-04-04 18:30:56 +00:00
-DIRS= crypto ssl engines apps test tools
+DIRS= crypto ssl engines apps tools
openssl: update to 1.0.0c Signed-off-by: Peter Wagner <tripolar@gmx.at> SVN-Revision: 25348
2011-02-03 18:45:35 +00:00
ENGDIRS= ccgost
add openssl SVN-Revision: 3931
2006-06-11 00:41:05 +00:00
SHLIBDIRS= crypto ssl
openssl: update to 1.0.2i Drop 302-fix_no_cmac_build.patch, it has been applied upstream. Security fixes: * (Severity: High) OCSP Status Request extension unbounded memory growth (CVE-2016-6304) * (Severity: Moderate) SSL_peek() hang on empty record (CVE-2016-6305) * 10 Low severity issues Security advisory: https://www.openssl.org/news/secadv/20160922.txt Changelog: https://www.openssl.org/news/cl102.txt Signed-off-by: Magnus Kroken <mkroken@gmail.com> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2016-09-24 09:36:49 +00:00
@@ -157,7 +157,7 @@ SDIRS= \
add openssl SVN-Revision: 3931
2006-06-11 00:41:05 +00:00
# tests to perform. "alltests" is a special word indicating that all tests
# should be performed.
-TESTS = alltests
update openssl to 0.9.8k (#4846) SVN-Revision: 15106
2009-04-04 18:30:56 +00:00
+TESTS =
add openssl SVN-Revision: 3931
2006-06-11 00:41:05 +00:00
MAKEFILE= Makefile
openssl: update to 1.0.2i Drop 302-fix_no_cmac_build.patch, it has been applied upstream. Security fixes: * (Severity: High) OCSP Status Request extension unbounded memory growth (CVE-2016-6304) * (Severity: Moderate) SSL_peek() hang on empty record (CVE-2016-6305) * 10 Low severity issues Security advisory: https://www.openssl.org/news/secadv/20160922.txt Changelog: https://www.openssl.org/news/cl102.txt Signed-off-by: Magnus Kroken <mkroken@gmail.com> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2016-09-24 09:36:49 +00:00
@@ -171,7 +171,7 @@ SHELL=/bin/sh
add openssl SVN-Revision: 3931
2006-06-11 00:41:05 +00:00
TOP= .
ONEDIRS=out tmp
-EDIRS= times doc bugs util include certs ms shlib mt demos perl sf dep VMS
+EDIRS= times bugs util include certs ms shlib mt demos perl sf dep VMS
WDIRS= windows
LIBS= libcrypto.a libssl.a
SHARED_CRYPTO=libcrypto$(SHLIB_EXT)
openssl: update to version 1.0.2k This fixes the following security problems: CVE-2017-3731: Truncated packet could crash via OOB read CVE-2017-3732: BN_mod_exp may produce incorrect results on x86_64 CVE-2016-7055: Montgomery multiplication may produce incorrect results Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-01-27 22:36:45 +00:00
@@ -276,7 +276,7 @@ reflect:
add openssl SVN-Revision: 3931
2006-06-11 00:41:05 +00:00
sub_all: build_all
openssl: update to v1.0.2d (CVE-2015-1793) During certificate verification, OpenSSL (starting from version 1.0.1n and 1.0.2b) will attempt to find an alternative certificate chain if the first attempt to build such a chain fails. An error in the implementation of this logic can mean that an attacker could cause certain checks on untrusted certificates to be bypassed, such as the CA flag, enabling them to use a valid leaf certificate to act as a CA and "issue" an invalid certificate. This issue will impact any application that verifies certificates including SSL/TLS/DTLS clients and SSL/TLS/DTLS servers using client authentication. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 46285
2015-07-09 13:04:27 +00:00
add openssl SVN-Revision: 3931
2006-06-11 00:41:05 +00:00
-build_all: build_libs build_apps build_tests build_tools
+build_all: build_libs build_apps build_tools
openssl: 1.0.2b (hey, we made it nearly 3 months this time!) Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 45946
2015-06-11 20:28:44 +00:00
build_libs: build_libcrypto build_libssl openssl.pc
add openssl SVN-Revision: 3931
2006-06-11 00:41:05 +00:00
openssl: update to version 1.0.2l Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2017-07-24 23:17:56 +00:00
@@ -542,7 +542,7 @@ dist:
openssl: update to 1.0.2f (fixes CVE-2016-0701, CVE-2015-3197) Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 48531
2016-01-28 18:20:06 +00:00
@$(MAKE) SDIRS='$(SDIRS)' clean
@$(MAKE) TAR='$(TAR)' TARFLAGS='$(TARFLAGS)' $(DISTTARVARS) tar
add openssl SVN-Revision: 3931
2006-06-11 00:41:05 +00:00
-install: all install_docs install_sw
+install: all install_sw
install_sw:
@$(PERL) $(TOP)/util/mkdir-p.pl $(INSTALL_PREFIX)$(INSTALLTOP)/bin \
openssl: refresh patches SVN-Revision: 19368
2010-01-28 19:27:53 +00:00
--- a/Makefile.org
+++ b/Makefile.org
openssl: update to version 1.0.2l Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2017-07-24 23:17:56 +00:00
@@ -540,7 +540,7 @@ dist:
openssl: update to 1.0.2f (fixes CVE-2016-0701, CVE-2015-3197) Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 48531
2016-01-28 18:20:06 +00:00
@$(MAKE) SDIRS='$(SDIRS)' clean
@$(MAKE) TAR='$(TAR)' TARFLAGS='$(TARFLAGS)' $(DISTTARVARS) tar
Really disable doc generation, increases install time SVN-Revision: 4725
2006-09-02 08:38:39 +00:00
-install: all install_docs install_sw
+install: all install_sw
install_sw:
@$(PERL) $(TOP)/util/mkdir-p.pl $(INSTALL_PREFIX)$(INSTALLTOP)/bin \
Reference in New Issue Copy Permalink