From dff8b6b52495c3e5f9f6294c22b71a6c414d12b854cf395f1f818cd03895c168 Mon Sep 17 00:00:00 2001 From: Otto Hollmann Date: Wed, 20 Sep 2023 07:23:48 +0000 Subject: [PATCH] Accepting request 1112471 from home:ohollmann:branches:security:tls - Update to 3.1.3: * Fix POLY1305 MAC implementation corrupting XMM registers on Windows (CVE-2023-4807) OBS-URL: https://build.opensuse.org/request/show/1112471 OBS-URL: https://build.opensuse.org/package/show/security:tls/openssl-3?expand=0&rev=72 --- openssl-3.1.2.tar.gz | 3 --- openssl-3.1.2.tar.gz.asc | 16 ---------------- openssl-3.1.3.tar.gz | 3 +++ openssl-3.1.3.tar.gz.asc | 16 ++++++++++++++++ openssl-3.changes | 7 +++++++ openssl-3.spec | 2 +- 6 files changed, 27 insertions(+), 20 deletions(-) delete mode 100644 openssl-3.1.2.tar.gz delete mode 100644 openssl-3.1.2.tar.gz.asc create mode 100644 openssl-3.1.3.tar.gz create mode 100644 openssl-3.1.3.tar.gz.asc diff --git a/openssl-3.1.2.tar.gz b/openssl-3.1.2.tar.gz deleted file mode 100644 index 7e89a45..0000000 --- a/openssl-3.1.2.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:a0ce69b8b97ea6a35b96875235aa453b966ba3cba8af2de23657d8b6767d6539 -size 15560427 diff --git a/openssl-3.1.2.tar.gz.asc b/openssl-3.1.2.tar.gz.asc deleted file mode 100644 index 5ad8d78..0000000 --- a/openssl-3.1.2.tar.gz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCAAdFiEE78CkZ9YTy4PH7W0w2JTizos9efUFAmTJCnoACgkQ2JTizos9 -efWm6BAAlWsMaugtkRw0yj9CcVwNwXU5gjMksmMFousL3pnuQSqP0lSi4Eq+tRpX -x1bZjlR2tVjaLEiW18fk1iHo7OvVEqkoJRmPkysekB32hfjUTUdor7WPtksIYM3Y -nudC7mBcqITxB0s16egkFU90zeBGA3QXdvyklTZoa1OD3sUCOY95Skug929RtgqE -8Z5Wp45N87OtEJK9t8QVdURKdDoRWPMtCD27/ki0TkNX0n2cIbtAqe6eORLZCxIF -UwRvum2lQHWpAm0XfvLySYhD21bNh4dtwIdkaJPKsPkFH03l4JahTRfccQP4Sbs3 -1u4/2j8yDzmr6h5RZG9XV5kg60WAz8AIwBXVSCEzTF51Raq5kL0YBkkr016NTwM+ -BS8ZSGoAcg3gvGyVzJaEG6CLOw5D2WwB2plk+94DKwyjTgb/PZLjwh0ee8YsWxAi -1COeJvERmEdMRjLj2FTcBC9eR1KkHyccsKOYZBXI3fny8b2twQadiGJyOKYGKdqm -GoYdbPNFNy0x96NlVtdIbXkZ5LciB5HnJbs2BZ9WghAvAotrqUWWSvxu0Me8TK+U -5JeaEWGCLG93j6fo7eNlrw3w2gAzOFYmIiOM/tCfNoFwHF/nNCgybF37tr6V9Hnl -UtTOlC0XChotoWcbZ1p8U6/NPAlgXUAdUThY6fEHDQyu3jyzwdw= -=zN9M ------END PGP SIGNATURE----- diff --git a/openssl-3.1.3.tar.gz b/openssl-3.1.3.tar.gz new file mode 100644 index 0000000..dbfb54e --- /dev/null +++ b/openssl-3.1.3.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:f0316a2ebd89e7f2352976445458689f80302093788c466692fb2a188b2eacf6 +size 15561739 diff --git a/openssl-3.1.3.tar.gz.asc b/openssl-3.1.3.tar.gz.asc new file mode 100644 index 0000000..599205b --- /dev/null +++ b/openssl-3.1.3.tar.gz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEE78CkZ9YTy4PH7W0w2JTizos9efUFAmUJm9kACgkQ2JTizos9 +efVDjA//fWXk1Jl8hJVf2A0IJsBgQNQdU5MlradtVvNG+EBICM5KewLSuD9yJIEx +DlfcxHkr48DL463Q2BN/dSDFwSMPx+MAU40OxSl40oTyuGLiMu7g94DpDtMf7eb7 +nA1RggMQHRh/EqZa9VYKsfBIipCvIeIKBi3GhHXmCdGWFT4iY/7gQ6Lk3jS0yMS3 +9kzX/9GbBTUC5c3Cw2WL26QW5L+AfHgXnkWn137/2uhE28WMQGcn4uBkf9kKvweY +J1fxLQxVu0OmUjdJZ+OcmxsTNx4XVCUlE34Grbv/KZgUbvkWn12iaFDBYyGq0u6C +4mov7YX8nSSeVoMxcBiuR2iVW+EfIpighsbeDdxdr9EzMIHmj0tFzT8lrB1yuYQq +847QxcHyezhuzqa+lmDgp+nO0POXixY33uCVhD8W7VC6ZiZ7DzJLXEEYZZnm9D2t +vsv1U5EnaQBf3lOqivLYurn/h06ILVMqayutG1iii9TXyZvdgqsvk/3oUFGF5Gmx +35Du6lhmtM4RV4nPC2hwMrhmiGXt1EWo2MGJqNJM6zWVm10fhajgzseEXO1gprcH +JrGN6chumoJqiuWGMJLkY+Pdp7rUa10hBobnoeLpGXy5QW7B/qElVH9eHiJO6OLH +wzXd7gqiw0lFwkq273nXmyWLLmaNzK9ls6iHiJiBjfqr2XJ2Kp0= +=S8rI +-----END PGP SIGNATURE----- diff --git a/openssl-3.changes b/openssl-3.changes index 8894e04..bc707f2 100644 --- a/openssl-3.changes +++ b/openssl-3.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Tue Sep 19 14:17:56 UTC 2023 - Otto Hollmann + +- Update to 3.1.3: + * Fix POLY1305 MAC implementation corrupting XMM registers on + Windows (CVE-2023-4807) + ------------------------------------------------------------------- Tue Aug 1 15:24:46 UTC 2023 - Pedro Monreal diff --git a/openssl-3.spec b/openssl-3.spec index a416c39..c7880ba 100644 --- a/openssl-3.spec +++ b/openssl-3.spec @@ -22,7 +22,7 @@ %define man_suffix 3ssl Name: openssl-3 # Don't forget to update the version in the "openssl" meta-package! -Version: 3.1.2 +Version: 3.1.3 Release: 0 Summary: Secure Sockets and Transport Layer Security License: Apache-2.0