OpenPKG CVS Repository http://cvs.openpkg.org/ ____________________________________________________________________________
Server: cvs.openpkg.org Name: Ralf S. Engelschall Root: /e/openpkg/cvs Email: [EMAIL PROTECTED] Module: openpkg-src openpkg-web openpkg$ Date: 01-Oct-2003 22:12:20 Branch: HEAD Handle: 2003100121121702 Modified files: openpkg-re/vcheck vc.openssl openpkg-src/openssl openssl.patch openssl.spec openpkg-web news.txt Log: upgrading package: openssl 0.9.7b -> 0.9.7c Summary: Revision Changes Path 1.13 +1 -1 openpkg-re/vcheck/vc.openssl 1.13 +63 -68 openpkg-src/openssl/openssl.patch 1.48 +2 -2 openpkg-src/openssl/openssl.spec 1.6812 +1 -0 openpkg-web/news.txt ____________________________________________________________________________ patch -p0 <<'@@ .' Index: openpkg-re/vcheck/vc.openssl ============================================================================ $ cvs diff -u -r1.12 -r1.13 vc.openssl --- openpkg-re/vcheck/vc.openssl 11 Apr 2003 07:33:50 -0000 1.12 +++ openpkg-re/vcheck/vc.openssl 1 Oct 2003 20:12:17 -0000 1.13 @@ -2,7 +2,7 @@ } prog openssl = { - version = 0.9.7b + version = 0.9.7c url = ftp://ftp.openssl.org/source/ regex = openssl-(\d+\.\d+\.\d+[a-z]?)\.tar\.gz } @@ . patch -p0 <<'@@ .' Index: openpkg-src/openssl/openssl.patch ============================================================================ $ cvs diff -u -r1.12 -r1.13 openssl.patch --- openpkg-src/openssl/openssl.patch 30 Sep 2003 12:44:31 -0000 1.12 +++ openpkg-src/openssl/openssl.patch 1 Oct 2003 20:12:19 -0000 1.13 @@ -1,5 +1,6 @@ ---- crypto/bn/bn_prime.pl.orig Wed Feb 16 14:24:06 2000 -+++ crypto/bn/bn_prime.pl Wed Aug 6 10:49:34 2003 +Index: crypto/bn/bn_prime.pl +--- crypto/bn/bn_prime.pl.orig 2000-02-16 14:24:06.000000000 +0100 ++++ crypto/bn/bn_prime.pl 2003-10-01 22:06:50.000000000 +0200 @@ -11,7 +11,7 @@ $p+=2; $s=int(sqrt($p)); @@ -9,69 +10,63 @@ { next loop if (($p%$primes[$i]) == 0); } - ------------------------------------------------------------------------------ - -Security Bugfixes -OpenPKG-SA-2003.044-openssl -http://www.openssl.org/news/secadv_20030930.txt -CAN-2003-0543, CAN-2003-0544, CAN-2003-0545 - ---- crypto/asn1/asn1_lib.c Sun Sep 28 14:20:55 2003 -+++ crypto/asn1/asn1_lib.c Fri Sep 26 13:51:38 2003 -@@ -104,10 +104,12 @@ - l<<=7L; - l|= *(p++)&0x7f; - if (--max == 0) goto err; -+ if (l > (INT_MAX >> 7L)) goto err; - } - l<<=7L; - l|= *(p++)&0x7f; - tag=(int)l; -+ if (--max == 0) goto err; - } - else - { ---- crypto/asn1/tasn_dec.c Sun Sep 28 14:20:55 2003 -+++ crypto/asn1/tasn_dec.c Fri Sep 26 13:51:38 2003 -@@ -691,6 +691,7 @@ - - int asn1_ex_c2i(ASN1_VALUE **pval, unsigned char *cont, int len, int utype, char *free_cont, const ASN1_ITEM *it) - { -+ ASN1_VALUE **opval = NULL; - ASN1_STRING *stmp; - ASN1_TYPE *typ = NULL; - int ret = 0; -@@ -705,6 +706,7 @@ - *pval = (ASN1_VALUE *)typ; - } else typ = (ASN1_TYPE *)*pval; - if(utype != typ->type) ASN1_TYPE_set(typ, utype, NULL); -+ opval = pval; - pval = (ASN1_VALUE **)&typ->value.ptr; - } - switch(utype) { -@@ -796,7 +798,12 @@ - - ret = 1; - err: -- if(!ret) ASN1_TYPE_free(typ); -+ if(!ret) -+ { -+ ASN1_TYPE_free(typ); -+ if (opval) -+ *opval = NULL; -+ } - return ret; - } - ---- crypto/x509/x509_vfy.c Sun Sep 28 14:20:55 2003 -+++ crypto/x509/x509_vfy.c Fri Sep 26 13:51:38 2003 -@@ -674,7 +674,7 @@ - ok=(*cb)(0,ctx); - if (!ok) goto end; - } -- if (X509_verify(xs,pkey) <= 0) -+ else if (X509_verify(xs,pkey) <= 0) - /* XXX For the final trusted self-signed cert, - * this is a waste of time. That check should - * optional so that e.g. 'openssl x509' can be +Index: doc/crypto/des_modes.pod +--- doc/crypto/des_modes.pod.orig 2002-03-05 16:30:13.000000000 +0100 ++++ doc/crypto/des_modes.pod 2003-10-01 22:06:50.000000000 +0200 +@@ -2,7 +2,7 @@ + + =head1 NAME + +-Modes of DES - the variants of DES and other crypto algorithms of OpenSSL ++des_modes - the variants of DES and other crypto algorithms of OpenSSL + + =head1 DESCRIPTION + +Index: doc/crypto/ui.pod +--- doc/crypto/ui.pod.orig 2001-10-25 18:55:17.000000000 +0200 ++++ doc/crypto/ui.pod 2003-10-01 22:07:42.000000000 +0200 +@@ -5,7 +5,7 @@ + UI_new, UI_new_method, UI_free, UI_add_input_string, UI_dup_input_string, + UI_add_verify_string, UI_dup_verify_string, UI_add_input_boolean, + UI_dup_input_boolean, UI_add_info_string, UI_dup_info_string, +-UI_add_error_string, UI_dup_error_string, UI_construct_prompt ++UI_add_error_string, UI_dup_error_string, UI_construct_prompt, + UI_add_user_data, UI_get0_user_data, UI_get0_result, UI_process, + UI_ctrl, UI_set_default_method, UI_get_default_method, UI_get_method, + UI_set_method, UI_OpenSSL, ERR_load_UI_strings - New User Interface +Index: doc/crypto/EVP_DigestInit.pod +--- doc/crypto/EVP_DigestInit.pod.orig 2002-07-18 20:55:04.000000000 +0200 ++++ doc/crypto/EVP_DigestInit.pod 2003-10-01 22:08:09.000000000 +0200 +@@ -4,7 +4,7 @@ + + EVP_MD_CTX_init, EVP_MD_CTX_create, EVP_DigestInit_ex, EVP_DigestUpdate, + EVP_DigestFinal_ex, EVP_MD_CTX_cleanup, EVP_MD_CTX_destroy, EVP_MAX_MD_SIZE, +-EVP_MD_CTX_copy_ex EVP_MD_CTX_copy, EVP_MD_type, EVP_MD_pkey_type, EVP_MD_size, ++EVP_MD_CTX_copy_ex, EVP_MD_CTX_copy, EVP_MD_type, EVP_MD_pkey_type, EVP_MD_size, + EVP_MD_block_size, EVP_MD_CTX_md, EVP_MD_CTX_size, EVP_MD_CTX_block_size, EVP_MD_CTX_type, + EVP_md_null, EVP_md2, EVP_md5, EVP_sha, EVP_sha1, EVP_dss, EVP_dss1, EVP_mdc2, + EVP_ripemd160, EVP_get_digestbyname, EVP_get_digestbynid, EVP_get_digestbyobj - +Index: Makefile.ssl +--- Makefile.ssl.orig 2003-09-30 14:38:13.000000000 +0200 ++++ Makefile.ssl 2003-10-01 22:06:50.000000000 +0200 +@@ -834,7 +834,7 @@ + fi; \ + fi + cp openssl.pc $(INSTALL_PREFIX)$(INSTALLTOP)/lib/pkgconfig +- chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/pkgconfig ++ chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/pkgconfig/openssl.pc + + install_docs: + @$(PERL) $(TOP)/util/mkdir-p.pl \ +Index: Makefile.org +--- Makefile.org.orig 2003-08-11 11:37:17.000000000 +0200 ++++ Makefile.org 2003-10-01 22:06:50.000000000 +0200 +@@ -832,7 +832,7 @@ + fi; \ + fi + cp openssl.pc $(INSTALL_PREFIX)$(INSTALLTOP)/lib/pkgconfig +- chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/pkgconfig ++ chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/pkgconfig/openssl.pc + + install_docs: + @$(PERL) $(TOP)/util/mkdir-p.pl \ @@ . patch -p0 <<'@@ .' Index: openpkg-src/openssl/openssl.spec ============================================================================ $ cvs diff -u -r1.47 -r1.48 openssl.spec --- openpkg-src/openssl/openssl.spec 30 Sep 2003 12:44:31 -0000 1.47 +++ openpkg-src/openssl/openssl.spec 1 Oct 2003 20:12:19 -0000 1.48 @@ -32,8 +32,8 @@ Distribution: OpenPKG [CORE] Group: Cryptography License: BSD-style -Version: 0.9.7b -Release: 20030930 +Version: 0.9.7c +Release: 20031001 # package options %option with_zlib no @@ . patch -p0 <<'@@ .' Index: openpkg-web/news.txt ============================================================================ $ cvs diff -u -r1.6811 -r1.6812 news.txt --- openpkg-web/news.txt 1 Oct 2003 16:04:10 -0000 1.6811 +++ openpkg-web/news.txt 1 Oct 2003 20:12:18 -0000 1.6812 @@ -1,3 +1,4 @@ +01-Oct-2003: Upgraded package: P<openssl-0.9.7c-20031001> 01-Oct-2003: Upgraded package: P<qpopper-4.0.5-20031001> 01-Oct-2003: Upgraded package: P<rdist-7.0.0a10-20031001> 01-Oct-2003: Upgraded package: P<spambouncer-1.7.20031001-20031001> @@ . ______________________________________________________________________ The OpenPKG Project www.openpkg.org CVS Repository Commit List [EMAIL PROTECTED]