From mboxrd@z Thu Jan  1 00:00:00 1970
From: git@ipfire.org
To: ipfire-scm@lists.ipfire.org
Subject: [git.ipfire.org] IPFire 2.x development tree branch, next, updated.
 78c3ea61b29ed527e4854f2f03ca0614888f5dd1
Date: Mon, 26 Sep 2016 14:41:29 +0100
Message-ID: <20160926134129.883951078E81@git01.ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============4182759553908714422=="
List-Id: <ipfire-scm.lists.ipfire.org>

--===============4182759553908714422==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  78c3ea61b29ed527e4854f2f03ca0614888f5dd1 (commit)
      from  def1ad3e948a8473c2443985b234180238aaf66a (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 78c3ea61b29ed527e4854f2f03ca0614888f5dd1
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date:   Mon Sep 26 14:37:20 2016 +0100

    openssl: Update to 1.0.2j
   =20
    Missing CRL sanity check (CVE-2016-7052)
    =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
   =20
    Severity: Moderate
   =20
    This issue only affects OpenSSL 1.0.2i, released on 22nd September 2016.
   =20
    A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.
   =20
    OpenSSL 1.0.2i users should upgrade to 1.0.2j
   =20
    The issue was reported to OpenSSL on 22nd September 2016 by Bruce Stephen=
s and
    Thomas Jakobi. The fix was developed by Matt Caswell of the OpenSSL devel=
opment
    team.
   =20
    https://www.openssl.org/news/secadv/20160926.txt
   =20
    Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 lfs/openssl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

Difference in files:
diff --git a/lfs/openssl b/lfs/openssl
index d0ed4d3..0405a77 100644
--- a/lfs/openssl
+++ b/lfs/openssl
@@ -24,7 +24,7 @@
=20
 include Config
=20
-VER        =3D 1.0.2i
+VER        =3D 1.0.2j
=20
 THISAPP    =3D openssl-$(VER)
 DL_FILE    =3D $(THISAPP).tar.gz
@@ -87,7 +87,7 @@ objects =3D $(DL_FILE)
=20
 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE)
=20
-$(DL_FILE)_MD5 =3D 678374e63f8df456a697d3e5e5a931fb
+$(DL_FILE)_MD5 =3D 96322138f0b69e61b7212bc53d5e912b
=20
 install : $(TARGET)
=20


hooks/post-receive
--
IPFire 2.x development tree

--===============4182759553908714422==--