pool/openssl
SHA256
3
0
Fork 2
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 232653 from Base:System

Browse Source 
Fixed bug[ bnc#876282], CVE-2014-0198 openssl: OpenSSL NULL pointer dereference in do_ssl3_write; Add file: CVE-2014-0198.patch (forwarded request 232650 from shawn2012)

OBS-URL: https://build.opensuse.org/request/show/232653
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/openssl?expand=0&rev=115
This commit is contained in:
Stephan Kulow 2014-05-06 11:39:32 +00:00 committed by Git OBS Bridge
parent 0bb9b0ad33
commit 191f308eaf
3 changed files with 23 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
CVE-2014-0198.patch Normal file
View File

@ -0,0 +1,15 @@
Index: openssl-1.0.1g/ssl/s3_pkt.c
===================================================================
--- openssl-1.0.1g.orig/ssl/s3_pkt.c
+++ openssl-1.0.1g/ssl/s3_pkt.c
@@ -657,6 +657,10 @@ static int do_ssl3_write(SSL *s, int typ
if (i <= 0)
return(i);
/* if it went, fall through and send more stuff */
+ /* we may have released our buffer, so get it again */
+ if (wb->buf == NULL)
+ if (!ssl3_setup_write_buffer(s))
+ return -1;
}
if (len == 0 && !create_empty_fragment)

6
openssl.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Mon May 5 06:45:19 UTC 2014 - citypw@gmail.com
- Fixed bug[ bnc#876282], CVE-2014-0198 openssl: OpenSSL NULL pointer dereference in do_ssl3_write
Add file: CVE-2014-0198.patch
-------------------------------------------------------------------
Sun Apr 20 00:53:34 UTC 2014 - crrodriguez@opensuse.org

2
openssl.spec
View File

@ -67,6 +67,7 @@ Patch18: openssl-1.0.1e-new-fips-reqs.patch
Patch19: openssl-gcc-attributes.patch
Patch20: openssl-buffreelistbug-aka-CVE-2010-5298.patch
Patch21: openssl-libssl-noweakciphers.patch
Patch22: CVE-2014-0198.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
%description
@ -175,6 +176,7 @@ this package's base documentation.
%patch19 -p1
%patch20 -p1
%patch21 -p1
%patch22 -p1
cp -p %{S:10} .
cp -p %{S:11} .
echo "adding/overwriting some entries in the 'table' hash in Configure"