/[smeserver]/rpms/openssl/sme8/openssl.spec
ViewVC logotype

Diff of /rpms/openssl/sme8/openssl.spec

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph | View Patch Patch

Revision 1.4 by charliebrady, Tue Sep 2 22:22:35 2014 UTC Revision 1.7 by vip-ire, Thu Jan 15 08:49:13 2015 UTC
# Line 21  Line 21 
21  Summary: The OpenSSL toolkit  Summary: The OpenSSL toolkit
22  Name: openssl  Name: openssl
23  Version: 0.9.8e  Version: 0.9.8e
24  Release: 28%{?dist}  Release: 32.1%{?dist}
25  # The tarball is based on the openssl-fips-1.2.0-test.tar.gz tarball  # The tarball is based on the openssl-fips-1.2.0-test.tar.gz tarball
26  Source: openssl-fips-%{version}-usa.tar.bz2  Source: openssl-fips-%{version}-usa.tar.bz2
27  Source1: hobble-openssl  Source1: hobble-openssl
# Line 100  Patch110: openssl-fips-0.9.8e-cve-2014-3 Line 100  Patch110: openssl-fips-0.9.8e-cve-2014-3
100  Patch111: openssl-fips-0.9.8e-cve-2014-3506.patch  Patch111: openssl-fips-0.9.8e-cve-2014-3506.patch
101  Patch112: openssl-fips-0.9.8e-cve-2014-3508.patch  Patch112: openssl-fips-0.9.8e-cve-2014-3508.patch
102  Patch113: openssl-fips-0.9.8e-cve-2014-3510.patch  Patch113: openssl-fips-0.9.8e-cve-2014-3510.patch
103    Patch114: openssl-fips-0.9.8e-fallback-scsv.patch
104    Patch115: openssl-fips-0.9.8e-x509-store-lock.patch
105    
106  License: BSDish  License: BSDish
107  Group: System Environment/Libraries  Group: System Environment/Libraries
# Line 207  from other formats to the formats used b Line 209  from other formats to the formats used b
209  %patch111 -p1 -b .dtls-sizechecks  %patch111 -p1 -b .dtls-sizechecks
210  %patch112 -p1 -b .oid-handling  %patch112 -p1 -b .oid-handling
211  %patch113 -p1 -b .adh-dos  %patch113 -p1 -b .adh-dos
212    %patch114 -p1 -b .fallback-scsv
213    %patch115 -p1 -b .lock
214    
215  # Modify the various perl scripts to reference perl in the right location.  # Modify the various perl scripts to reference perl in the right location.
216  perl util/perlpath.pl `dirname %{__perl}`  perl util/perlpath.pl `dirname %{__perl}`
# Line 460  rm -rf $RPM_BUILD_ROOT/%{_bindir}/openss Line 464  rm -rf $RPM_BUILD_ROOT/%{_bindir}/openss
464  %postun -p /sbin/ldconfig  %postun -p /sbin/ldconfig
465    
466  %changelog  %changelog
467  * Tue Sep  2 2014 Charlie Brady <charlie_brady@mitel.com> 0.9.8e-28.el5.sme  * Thu Jan 15 2015 Daniel Berteaud <daniel@firewall-services.com 0.9.8e-32.1.sme
468  - update with ca-bundle.crt from SME 9 [SME: 8208]  - update with ca-bundle.crt from SME 9 [SME: 8799]
469    
470  * Fri Aug  8 2014 Tomas Mraz <tmraz@redhat.com> 0.9.8e-27.4  * Wed Dec 17 2014 Tomas Mraz <tmraz@redhat.com> 0.9.8e-32
471    - properly lock X509_STORE accesses (#1168938)
472    
473    * Wed Oct 15 2014 Tomas Mraz <tmraz@redhat.com> 0.9.8e-31
474    - add support for fallback SCSV to partially mitigate CVE-2014-3566
475      (padding attack on SSL3)
476    
477    * Fri Aug  8 2014 Tomas Mraz <tmraz@redhat.com> 0.9.8e-30
478  - fix CVE-2014-0221 - recursion in DTLS code leading to DoS  - fix CVE-2014-0221 - recursion in DTLS code leading to DoS
479  - fix CVE-2014-3505 - doublefree in DTLS packet processing  - fix CVE-2014-3505 - doublefree in DTLS packet processing
480  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
481  - fix CVE-2014-3508 - fix OID handling to avoid information leak  - fix CVE-2014-3508 - fix OID handling to avoid information leak
482  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS
483    
484  * Tue Jun  3 2014 Tomas Mraz <tmraz@redhat.com> 0.9.8e-27.3  * Mon Jun  2 2014 Tomas Mraz <tmraz@redhat.com> 0.9.8e-29
485  - fix for CVE-2014-0224 - SSL/TLS MITM vulnerability  - fix for CVE-2014-0224 - SSL/TLS MITM vulnerability
486    
487  * Tue Jan 28 2014 Tomas Mraz <tmraz@redhat.com> 0.9.8e-27.1  * Tue Jan 28 2014 Tomas Mraz <tmraz@redhat.com> 0.9.8e-28
488  - replace expired GlobalSign Root CA certificate in ca-bundle.crt  - replace expired GlobalSign Root CA certificate in ca-bundle.crt
489    
490  * Mon Feb 25 2013 Tomas Mraz <tmraz@redhat.com> 0.9.8e-27  * Mon Feb 25 2013 Tomas Mraz <tmraz@redhat.com> 0.9.8e-27


Legend:
Removed lines/characters  
Changed lines/characters
  Added lines/characters

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed