forked from pool/openssl
6a3418284a
- Add upstream patches fixing coverity scan issues: * 0018-fix-coverity-issues-966593-966596.patch * 0020-Initialize-num-properly.patch * 0022-bignum-allow-concurrent-BN_MONT_CTX_set_locked.patch * 0023-evp-prevent-underflow-in-base64-decoding.patch * 0024-Fixed-NULL-pointer-dereference-in-PKCS7_dataDecode-r.patch * 0025-fix-coverity-issue-966597-error-line-is-not-always-i.patch - Update 0001-libcrypto-Hide-library-private-symbols.patch to cover more private symbols, now 98% complete and probably not much more can be done to fix the rest of the ill-defined API. - openssl-fips-hidden.patch new, hides private symbols added by the FIPS patches. - openssl-no-egd.patch disable the EGD (entropy gathering daemon) interface, we have no EGD in the distro and obtaining entropy from a place other than /dev/*random, the hardware rng or the openSSL internal PRNG is an extremely bad & dangerous idea. - use secure_getenv instead of getenv everywhere. (forwarded request 233217 from elvigia) OBS-URL: https://build.opensuse.org/request/show/233553 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/openssl?expand=0&rev=117 |
||
---|---|---|
.gitattributes | ||
.gitignore | ||
0001-Axe-builtin-printf-implementation-use-glibc-instead.patch | ||
0001-libcrypto-Hide-library-private-symbols.patch | ||
0005-libssl-Hide-library-private-symbols.patch | ||
0009-Fix-double-frees.patch | ||
0012-Fix-eckey_priv_encode.patch | ||
0017-Double-free-in-i2o_ECPublicKey.patch | ||
0018-fix-coverity-issues-966593-966596.patch | ||
0020-Initialize-num-properly.patch | ||
0022-bignum-allow-concurrent-BN_MONT_CTX_set_locked.patch | ||
0023-evp-prevent-underflow-in-base64-decoding.patch | ||
0024-Fixed-NULL-pointer-dereference-in-PKCS7_dataDecode-r.patch | ||
0025-fix-coverity-issue-966597-error-line-is-not-always-i.patch | ||
baselibs.conf | ||
bug610223.patch | ||
compression_methods_switch.patch | ||
CVE-2014-0198.patch | ||
merge_from_0.9.8k.patch | ||
openssl-1.0.0-c_rehash-compat.diff | ||
openssl-1.0.1c-default-paths.patch | ||
openssl-1.0.1c-ipv6-apps.patch | ||
openssl-1.0.1e-fips-ctor.patch | ||
openssl-1.0.1e-fips-ec.patch | ||
openssl-1.0.1e-fips.patch | ||
openssl-1.0.1e-new-fips-reqs.patch | ||
openssl-1.0.1e-truststore.diff | ||
openssl-1.0.1g.tar.gz | ||
openssl-1.0.1g.tar.gz.asc | ||
openssl-buffreelistbug-aka-CVE-2010-5298.patch | ||
openssl-fips-hidden.patch | ||
openssl-fix-pod-syntax.diff | ||
openssl-gcc-attributes.patch | ||
openssl-libssl-noweakciphers.patch | ||
openssl-no-egd.patch | ||
openssl-ocloexec.patch | ||
openssl-pkgconfig.patch | ||
openssl.changes | ||
openssl.keyring | ||
openssl.spec | ||
openssl.test | ||
README-FIPS.txt | ||
README.SuSE | ||
VIA_padlock_support_on_64systems.patch |
Please note that the man pages for the openssl libraries and tools have been placed in a package on its own right: openssl-doc Please install the openssl-doc package if you need the man pages, HTML documentation or sample C programs. The C header files and static libraries have also been extracted, they can now be found in the openssl-devel package. Your SuSE Team.