public inbox for ipfire-scm@lists.ipfire.org
 help / color / mirror / Atom feed
* [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 78c3ea61b29ed527e4854f2f03ca0614888f5dd1
@ 2016-09-26 13:41 git
  0 siblings, 0 replies; only message in thread
From: git @ 2016-09-26 13:41 UTC (permalink / raw)
  To: ipfire-scm

[-- Attachment #1: Type: text/plain, Size: 2304 bytes --]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  78c3ea61b29ed527e4854f2f03ca0614888f5dd1 (commit)
      from  def1ad3e948a8473c2443985b234180238aaf66a (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 78c3ea61b29ed527e4854f2f03ca0614888f5dd1
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date:   Mon Sep 26 14:37:20 2016 +0100

    openssl: Update to 1.0.2j
    
    Missing CRL sanity check (CVE-2016-7052)
    ========================================
    
    Severity: Moderate
    
    This issue only affects OpenSSL 1.0.2i, released on 22nd September 2016.
    
    A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.
    
    OpenSSL 1.0.2i users should upgrade to 1.0.2j
    
    The issue was reported to OpenSSL on 22nd September 2016 by Bruce Stephens and
    Thomas Jakobi. The fix was developed by Matt Caswell of the OpenSSL development
    team.
    
    https://www.openssl.org/news/secadv/20160926.txt
    
    Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 lfs/openssl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

Difference in files:
diff --git a/lfs/openssl b/lfs/openssl
index d0ed4d3..0405a77 100644
--- a/lfs/openssl
+++ b/lfs/openssl
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.0.2i
+VER        = 1.0.2j
 
 THISAPP    = openssl-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -87,7 +87,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_MD5 = 678374e63f8df456a697d3e5e5a931fb
+$(DL_FILE)_MD5 = 96322138f0b69e61b7212bc53d5e912b
 
 install : $(TARGET)
 


hooks/post-receive
--
IPFire 2.x development tree

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2016-09-26 13:41 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2016-09-26 13:41 [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 78c3ea61b29ed527e4854f2f03ca0614888f5dd1 git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox