/[smeserver]/rpms/openssl/sme8/openssl.spec
ViewVC logotype

Diff of /rpms/openssl/sme8/openssl.spec

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph | View Patch Patch

Revision 1.1 by wellsi, Tue Feb 18 03:03:10 2014 UTC Revision 1.4 by charliebrady, Tue Sep 2 22:22:35 2014 UTC
# Line 21  Line 21 
21  Summary: The OpenSSL toolkit  Summary: The OpenSSL toolkit
22  Name: openssl  Name: openssl
23  Version: 0.9.8e  Version: 0.9.8e
24  Release: 27%{?dist}.1  Release: 28%{?dist}
25  # The tarball is based on the openssl-fips-1.2.0-test.tar.gz tarball  # The tarball is based on the openssl-fips-1.2.0-test.tar.gz tarball
26  Source: openssl-fips-%{version}-usa.tar.bz2  Source: openssl-fips-%{version}-usa.tar.bz2
27  Source1: hobble-openssl  Source1: hobble-openssl
# Line 94  Patch104: openssl-fips-0.9.8e-cve-2012-2 Line 94  Patch104: openssl-fips-0.9.8e-cve-2012-2
94  Patch105: openssl-fips-0.9.8e-secure-getenv.patch  Patch105: openssl-fips-0.9.8e-secure-getenv.patch
95  Patch106: openssl-fips-0.9.8e-cve-2013-0166.patch  Patch106: openssl-fips-0.9.8e-cve-2013-0166.patch
96  Patch107: openssl-fips-0.9.8e-cve-2013-0169.patch  Patch107: openssl-fips-0.9.8e-cve-2013-0169.patch
97    Patch108: openssl-fips-0.9.8e-cve-2014-0224.patch
98    Patch109: openssl-fips-0.9.8e-cve-2014-0221.patch
99    Patch110: openssl-fips-0.9.8e-cve-2014-3505.patch
100    Patch111: openssl-fips-0.9.8e-cve-2014-3506.patch
101    Patch112: openssl-fips-0.9.8e-cve-2014-3508.patch
102    Patch113: openssl-fips-0.9.8e-cve-2014-3510.patch
103    
104  License: BSDish  License: BSDish
105  Group: System Environment/Libraries  Group: System Environment/Libraries
# Line 195  from other formats to the formats used b Line 201  from other formats to the formats used b
201  %patch105 -p1 -b .secure-getenv  %patch105 -p1 -b .secure-getenv
202  %patch106 -p1 -b .ocsp-dos  %patch106 -p1 -b .ocsp-dos
203  %patch107 -p1 -b .lucky13  %patch107 -p1 -b .lucky13
204    %patch108 -p1 -b .keying-mitm
205    %patch109 -p1 -b .dtls-recursion
206    %patch110 -p1 -b .dtls-doublefree
207    %patch111 -p1 -b .dtls-sizechecks
208    %patch112 -p1 -b .oid-handling
209    %patch113 -p1 -b .adh-dos
210    
211  # Modify the various perl scripts to reference perl in the right location.  # Modify the various perl scripts to reference perl in the right location.
212  perl util/perlpath.pl `dirname %{__perl}`  perl util/perlpath.pl `dirname %{__perl}`
# Line 448  rm -rf $RPM_BUILD_ROOT/%{_bindir}/openss Line 460  rm -rf $RPM_BUILD_ROOT/%{_bindir}/openss
460  %postun -p /sbin/ldconfig  %postun -p /sbin/ldconfig
461    
462  %changelog  %changelog
463    * Tue Sep  2 2014 Charlie Brady <charlie_brady@mitel.com> 0.9.8e-28.el5.sme
464    - update with ca-bundle.crt from SME 9 [SME: 8208]
465    
466    * Fri Aug  8 2014 Tomas Mraz <tmraz@redhat.com> 0.9.8e-27.4
467    - fix CVE-2014-0221 - recursion in DTLS code leading to DoS
468    - fix CVE-2014-3505 - doublefree in DTLS packet processing
469    - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
470    - fix CVE-2014-3508 - fix OID handling to avoid information leak
471    - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS
472    
473    * Tue Jun  3 2014 Tomas Mraz <tmraz@redhat.com> 0.9.8e-27.3
474    - fix for CVE-2014-0224 - SSL/TLS MITM vulnerability
475    
476  * Tue Jan 28 2014 Tomas Mraz <tmraz@redhat.com> 0.9.8e-27.1  * Tue Jan 28 2014 Tomas Mraz <tmraz@redhat.com> 0.9.8e-27.1
477  - replace expired GlobalSign Root CA certificate in ca-bundle.crt  - replace expired GlobalSign Root CA certificate in ca-bundle.crt
478    

Legend:
Removed lines/characters  
Changed lines/characters
  Added lines/characters
admin@koozali.org
 ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed