Accepting request 987301 from home:jsikes:branches:security:tls

Fixed CVE-2022-2097. Enjoy!

OBS-URL: https://build.opensuse.org/request/show/987301
OBS-URL: https://build.opensuse.org/package/show/security:tls/openssl-1_1?expand=0&rev=117

openssl-1.1.1p.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:bf61b62aaa66c7c7639942a94de4c9ae8280c08f17d4eac2e44644d9fc8ace6f
-size 9860217

openssl-1.1.1p.tar.gz.asc

@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCAAdFiEEhlersmDwVrHlGQg52cTSbQ5gRJEFAmKxyiAACgkQ2cTSbQ5g
-RJGkrggAkfuOBBTxu+Kgc7znFvkXbbIMCTNloeJW+38rsnFa6FxNJfmqJPysCna3
-Bbtp4cugStmQ2wDJlbe6PRo13PxPbKMeejKVgyk+2A8Mlx5iiFt8/qAtjUFQk6iF
-67vGBzmfQOeSBMAFbTwge5kqUW7qpURAVB8JlNbPXaEGW67hMJXI8WqYMWw5uGhI
-KFCyUn/HcpbVXiZt3nWIrdoacvCo7qAENApYKnnTvsHVzIvlxY1XBiJ5Zx0n6Twx
-kFrTzeWJ87SCSfKwYza+ugbGQxSOfwFnFEU4a+/T9reNqt8H0ujHNsq6ShzAicrq
-eSLJ2AQCVqclGWBB/HpSK6EHsNebBw==
-=0eV0
------END PGP SIGNATURE-----

openssl-1.1.1q.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d7939ce614029cdff0b6c20f0e2e5703158a489a72b2507b8bd51bf8c8fd10ca
+size 9864061

openssl-1.1.1q.tar.gz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=SRWo
+-----END PGP SIGNATURE-----

openssl-1_1.changes

@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Thu Jul  7 02:17:23 UTC 2022 - Jason Sikes <jsikes@suse.com>
+
+- update to 1.1.1q:
+  * [CVE-2022-2097, bsc#1201099]
+  * Addresses situations where AES OCB fails to encrypt some bytes
+
 -------------------------------------------------------------------
 Tue Jun 28 14:19:34 UTC 2022 - Andreas Schwab <schwab@suse.de>
 

openssl-1_1.spec

@@ -41,7 +41,7 @@
 %define _rname  openssl
 Name:           openssl-1_1
 # Don't forget to update the version in the "openssl" package!
-Version:        1.1.1p
+Version:        1.1.1q
 Release:        0
 Summary:        Secure Sockets and Transport Layer Security
 License:        OpenSSL