From patchwork Fri Mar 4 00:58:41 2016 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Mohammed Berdai X-Patchwork-Id: 591705 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from arrakis.dune.hu (caladan.dune.hu [78.24.191.180]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id D3DFB141B6F for ; Fri, 4 Mar 2016 11:58:56 +1100 (AEDT) Authentication-Results: ozlabs.org; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.b=DG9qjynD; dkim-atps=neutral Received: from arrakis.dune.hu (localhost [127.0.0.1]) by arrakis.dune.hu (Postfix) with ESMTP id 27C34B91608; Fri, 4 Mar 2016 01:58:50 +0100 (CET) X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on arrakis.dune.hu X-Spam-Level: X-Spam-Status: No, score=0.0 required=5.0 tests=FREEMAIL_FROM, T_DKIM_INVALID autolearn=unavailable autolearn_force=no version=3.4.1 Received: from arrakis.dune.hu (localhost [127.0.0.1]) by arrakis.dune.hu (Postfix) with ESMTP; Fri, 4 Mar 2016 01:58:50 +0100 (CET) Received: from arrakis.dune.hu (localhost [127.0.0.1]) by arrakis.dune.hu (Postfix) with ESMTP id D3ED0B91604 for ; Fri, 4 Mar 2016 01:58:48 +0100 (CET) X-policyd-weight: NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5 CL_IP_EQ_HELO_IP=-2 (check from: .gmail. - helo: .mail-wm0-f52.google. - helo-domain: .google.) FROM/MX_MATCHES_HELO(DOMAIN)=-2; rate: -7 Received: from mail-wm0-f52.google.com (mail-wm0-f52.google.com [74.125.82.52]) by arrakis.dune.hu (Postfix) with ESMTPS for ; Fri, 4 Mar 2016 01:58:48 +0100 (CET) Received: by mail-wm0-f52.google.com with SMTP id l68so11624882wml.1 for ; Thu, 03 Mar 2016 16:58:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:subject:to:message-id:date:user-agent:mime-version :content-transfer-encoding; bh=VTUIVNxY0dzF6+sLwepz/b4kWIY9SxVYt624YeDeRcc=; b=DG9qjynDbqwhQFDUQNUDGCeV8Yh29yTpWWC90/i7sFWvEt03EXr3U8tuYzx+3SnyAk SxLglezq0KpYy7Y+EMYttFzF/feedUJbYoCo5RMNcpkBsJOBRV4fiBo58+vJR51H+szp l/DfKnezrBUGO1aRpZn87Tuv3/elSDmNEDlaGAr+T2vMKew+bt2HJmcxdcW8J7nq/LJA yo60DlU2sN9nWjIBQAGAvc9HGP0ZKqQMPaqx9plkNIBdmo9qN/xrjX5biRcoBL/Jc+b2 ZUOmceYdCGUXC830fUeX3oGf/9D+gQwKPkxeSUYeey4n9O7K626GxEbBjuXYMvbYvBOW ZRZg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:subject:to:message-id:date:user-agent :mime-version:content-transfer-encoding; bh=VTUIVNxY0dzF6+sLwepz/b4kWIY9SxVYt624YeDeRcc=; b=dt24rfhevB4nfEccZpp0NR+UWXhdFfd5E76c/Kn4O+wSsBBz3VUlV8nxdJJUIDYgxI VgvB+7nF52OnzKri0nG4Z3jZ9zZcDISQ4tncbCr4+hz2X/gq6O58iPwhhygJmVEkrKC3 a32aiOgEfjBPkTplBXW9RkDTjuyn/7Mvk3RXb8Z7+hZFvBr0RUiu74skZsZQyn4eELIf QYvgT/cmAs0v7PlMY6Ntx6AYtXKYFUh1ZSEUUbuyNc1ryNKH/DUwqIBs8MnXTiB/+07h CTLLV5TNh47/X72lLFg26/aWbzJPWZ6uEqvbVrc2aSC9/FoinV9sMoZ+fu5OEws9EQv+ r4kA== X-Gm-Message-State: AD7BkJKb6ZemsXMs8NQugyxkf2BDFb3WwbUIK410G6e59h1oAtORyMCS57GNpNVN4Mgx2w== X-Received: by 10.194.175.33 with SMTP id bx1mr5909069wjc.104.1457053127797; Thu, 03 Mar 2016 16:58:47 -0800 (PST) Received: from [192.168.1.67] ([41.249.64.12]) by smtp.gmail.com with ESMTPSA id da6sm904109wjb.24.2016.03.03.16.58.46 for (version=TLSv1/SSLv3 cipher=OTHER); Thu, 03 Mar 2016 16:58:46 -0800 (PST) From: Mohammed Berdai To: openwrt-devel@lists.openwrt.org Message-ID: <56D8DDC1.5050000@gmail.com> Date: Fri, 4 Mar 2016 00:58:41 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 Subject: [OpenWrt-Devel] BB: openssl: update to 1.0.2g (8 CVEs) X-BeenThere: openwrt-devel@lists.openwrt.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: OpenWrt Development List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: openwrt-devel-bounces@lists.openwrt.org Sender: "openwrt-devel" CVE-2016-0702 CVE-2016-0703 CVE-2016-0704 CVE-2016-0705 CVE-2016-0797 CVE-2016-0798 CVE-2016-0799 CVE-2016-0800 Signed-off-by: Mohammed Berdai diff --git a/package/libs/openssl/Makefile b/package/libs/openssl/Makefile index 1ea0ea2..872586b 100644 --- a/package/libs/openssl/Makefile +++ b/package/libs/openssl/Makefile @@ -1,5 +1,5 @@ # -# Copyright (C) 2006-2015 OpenWrt.org +# Copyright (C) 2006-2016 OpenWrt.org # # This is free software, licensed under the GNU General Public License v2. # See /LICENSE for more information. @@ -8,7 +8,7 @@ include $(TOPDIR)/rules.mk PKG_NAME:=openssl -PKG_VERSION:=1.0.2f +PKG_VERSION:=1.0.2g PKG_RELEASE:=1 PKG_USE_MIPS16:=0 @@ -18,7 +18,7 @@ PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz PKG_SOURCE_URL:=http://www.openssl.org/source/ \ ftp://ftp.funet.fi/pub/crypt/mirrors/ftp.openssl.org/source \ ftp://ftp.sunet.se/pub/security/tools/net/openssl/source/ -PKG_MD5SUM:=b3bf73f507172be9292ea2a8c28b659d +PKG_MD5SUM:=f3c710c045cdee5fd114feb69feba7aa PKG_LICENSE:=SSLEAY OPENSSL PKG_LICENSE_FILES:=LICENSE