Browse Source

update: openssl-0.9.8k-5vl6.i686

git-svn-id: http://trac.vinelinux.org/repos/projects/specs@597 ec354946-7b23-47d6-9f5a-488ba84defc7
iwaim 15 years ago
parent
commit
44ad8c9873
1 changed files with 11 additions and 1 deletions
  1. 11 1
      o/openssl/openssl-vl.spec

+ 11 - 1
o/openssl/openssl-vl.spec

@@ -1,7 +1,7 @@
 %define build_compat32 %{?_with_compat32:1}%{!?_with_compat32:0}
 %define soversion 6
 %define version 0.9.8k
-%define release 3%{_dist_release}
+%define release 5%{_dist_release}
 
 Summary: Secure Sockets Layer Toolkit
 Name: openssl
@@ -18,6 +18,8 @@ Patch4: openssl-0.9.8a-enginesdir.patch
 
 # security fix
 Patch10: openssl-0.9.8k-dtls-dos.patch
+Patch11: openssl-0.9.8-CVE-2009-4355.patch
+Patch12: openssl-0.9.8k_CVE-2009-3555.patch
 
 License: BSDish
 Group: System Environment/Libraries
@@ -84,6 +86,8 @@ supported by OpenSSL.
 
 # security fix
 %patch10 -p1 -b .dtls-dos
+%patch11 -p1 -b .CVE-2009-4355
+%patch12 -p1 -b .CVE-2009-3555
 
 chmod 644 FAQ LICENSE CHANGES NEWS INSTALL README
 chmod 644 doc/README doc/c-indentation.el doc/openssl.txt
@@ -292,6 +296,12 @@ rm -f $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/openssl.pc.tmp
 %postun -n compat32-%{name} -p /sbin/ldconfig
 
 %changelog
+* Sun Jan 17 2010 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 0.9.8k-5
+- add patch12 for fix CVE-2009-3555 (renegotiation)
+
+* Fri Jan 15 2010 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 0.9.8k-4
+- add patch11 for fix CVE-2009-4355 (memory leak)
+
 * Tue Jun 23 2009 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 0.9.8k-3
 - add patch10 to fix CVE-2009-1377, 78, 79 (from fc11)