forked from pool/openssl-1_1
Pedro Monreal Gonzalez
18ecb7a582
- Security fix: [bsc#1227138, CVE-2024-5535] * SSL_select_next_proto buffer overread * Add openssl-CVE-2024-5535.patch - Apply "openssl-CVE-2024-4741.patch" to fix a use-after-free security vulnerability. Calling the function SSL_free_buffers() potentially caused memory to be accessed that was previously freed in some situations and a malicious attacker could attempt to engineer a stituation where this occurs to facilitate a denial-of-service attack. [CVE-2024-4741, bsc#1225551] OBS-URL: https://build.opensuse.org/package/show/security:tls/openssl-1_1?expand=0&rev=164
14 lines
609 B
Diff
14 lines
609 B
Diff
Index: openssl-1.1.1f/Configurations/unix-Makefile.tmpl
|
|
===================================================================
|
|
--- openssl-1.1.1f.orig/Configurations/unix-Makefile.tmpl 2020-03-31 16:07:11.764502217 +0200
|
|
+++ openssl-1.1.1f/Configurations/unix-Makefile.tmpl 2020-03-31 16:07:45.036664229 +0200
|
|
@@ -544,7 +544,7 @@ install_sw: install_dev install_engines
|
|
|
|
uninstall_sw: uninstall_runtime uninstall_engines uninstall_dev
|
|
|
|
-install_docs: install_man_docs install_html_docs
|
|
+install_docs: install_man_docs
|
|
|
|
uninstall_docs: uninstall_man_docs uninstall_html_docs
|
|
$(RM) -r "$(DESTDIR)$(DOCDIR)"
|