openssl/bsc936563_hack.patch

Index: openssl-1.0.2c/crypto/ec/Makefile
===================================================================
--- openssl-1.0.2c.orig/crypto/ec/Makefile
+++ openssl-1.0.2c/crypto/ec/Makefile
@@ -10,7 +10,7 @@ CFLAG=-g
 MAKEFILE=	Makefile
 AR=		ar r
 
-CFLAGS= $(INCLUDES) $(CFLAG)
+CFLAGS= $(INCLUDES) $(CFLAG) -O0
 ASFLAGS= $(INCLUDES) $(ASFLAG)
 AFLAGS= $(ASFLAGS)
Accepting request 315685 from Base:System - update to 1.0.2d * fixes CVE-2015-1793 (bsc#936746) Alternate chains certificate forgery During certificate verfification, OpenSSL will attempt to find an alternative certificate chain if the first attempt to build such a chain fails. An error in the implementation of this logic can mean that an attacker could cause certain checks on untrusted certificates to be bypassed, such as the CA flag, enabling them to use a valid leaf certificate to act as a CA and "issue" an invalid certificate. - drop openssl-fix_invalid_manpage_name.patch (upstream) (forwarded request 315682 from vitezslav_cizek) OBS-URL: https://build.opensuse.org/request/show/315685 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/openssl?expand=0&rev=128 2015-07-12 22:51:54 +02:00			`Index: openssl-1.0.2c/crypto/ec/Makefile`
			`===================================================================`
			`--- openssl-1.0.2c.orig/crypto/ec/Makefile`
			`+++ openssl-1.0.2c/crypto/ec/Makefile`
			`@@ -10,7 +10,7 @@ CFLAG=-g`
			`MAKEFILE= Makefile`
			`AR= ar r`

			`-CFLAGS= $(INCLUDES) $(CFLAG)`
			`+CFLAGS= $(INCLUDES) $(CFLAG) -O0`
			`ASFLAGS= $(INCLUDES) $(ASFLAG)`
			`AFLAGS= $(ASFLAGS)`