forked from pool/openssl
66d6e48709
NOTE:
I submitted perl-Net-SSLeay 1.64 update to devel:languages:perl which
fixes its regression.
- updated openssl to 1.0.1h (bnc#880891):
- CVE-2014-0224: Fix for SSL/TLS MITM flaw. An attacker using a carefully crafted
handshake can force the use of weak keying material in OpenSSL
SSL/TLS clients and servers.
- CVE-2014-0221: Fix DTLS recursion flaw. By sending an invalid DTLS handshake to an
OpenSSL DTLS client the code can be made to recurse eventually crashing
in a DoS attack.
- CVE-2014-0195: Fix DTLS invalid fragment vulnerability. A buffer
overrun attack can be triggered by sending invalid DTLS fragments to
an OpenSSL DTLS client or server. This is potentially exploitable to
run arbitrary code on a vulnerable client or server.
- CVE-2014-3470: Fix bug in TLS code where clients enable anonymous
ECDH ciphersuites are subject to a denial of service attack.
- openssl-buffreelistbug-aka-CVE-2010-5298.patch: removed, upstream
- CVE-2014-0198.patch: removed, upstream
- 0009-Fix-double-frees.patch: removed, upstream
- 0012-Fix-eckey_priv_encode.patch: removed, upstream
- 0017-Double-free-in-i2o_ECPublicKey.patch: removed, upstream
- 0018-fix-coverity-issues-966593-966596.patch: removed, upstream
- 0020-Initialize-num-properly.patch: removed, upstream
- 0022-bignum-allow-concurrent-BN_MONT_CTX_set_locked.patch: removed, upstream
- 0023-evp-prevent-underflow-in-base64-decoding.patch: removed, upstream
- 0024-Fixed-NULL-pointer-dereference-in-PKCS7_dataDecode-r.patch: removed, upstream
- 0025-fix-coverity-issue-966597-error-line-is-not-always-i.patch: removed, upstream
- 0001-libcrypto-Hide-library-private-symbols.patch: disabled heartbeat testcase
- openssl-1.0.1c-ipv6-apps.patch: refreshed
- openssl-fix-pod-syntax.diff: some stuff merged upstream, refreshed
- Added new SUSE default cipher suite
openssl-1.0.1e-add-suse-default-cipher.patch
OBS-URL: https://build.opensuse.org/request/show/236989
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/openssl?expand=0&rev=118
|
||
|---|---|---|
| .gitattributes | ||
| .gitignore | ||
| 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch | ||
| 0001-libcrypto-Hide-library-private-symbols.patch | ||
| 0005-libssl-Hide-library-private-symbols.patch | ||
| baselibs.conf | ||
| bug610223.patch | ||
| compression_methods_switch.patch | ||
| merge_from_0.9.8k.patch | ||
| openssl-1.0.0-c_rehash-compat.diff | ||
| openssl-1.0.1c-default-paths.patch | ||
| openssl-1.0.1c-ipv6-apps.patch | ||
| openssl-1.0.1e-add-suse-default-cipher-header.patch | ||
| openssl-1.0.1e-add-suse-default-cipher.patch | ||
| openssl-1.0.1e-add-test-suse-default-cipher-suite.patch | ||
| openssl-1.0.1e-fips-ctor.patch | ||
| openssl-1.0.1e-fips-ec.patch | ||
| openssl-1.0.1e-fips.patch | ||
| openssl-1.0.1e-new-fips-reqs.patch | ||
| openssl-1.0.1e-truststore.diff | ||
| openssl-1.0.1h.tar.gz | ||
| openssl-1.0.1h.tar.gz.asc | ||
| openssl-fips-hidden.patch | ||
| openssl-fix-pod-syntax.diff | ||
| openssl-gcc-attributes.patch | ||
| openssl-libssl-noweakciphers.patch | ||
| openssl-no-egd.patch | ||
| openssl-ocloexec.patch | ||
| openssl-pkgconfig.patch | ||
| openssl.changes | ||
| openssl.keyring | ||
| openssl.spec | ||
| openssl.test | ||
| README-FIPS.txt | ||
| README.SuSE | ||
| VIA_padlock_support_on_64systems.patch | ||
Please note that the man pages for the openssl libraries and tools have been placed in a package on its own right: openssl-doc Please install the openssl-doc package if you need the man pages, HTML documentation or sample C programs. The C header files and static libraries have also been extracted, they can now be found in the openssl-devel package. Your SuSE Team.