Hello community, here is the log from the commit of package openssl for openSUSE:11.4 checked in at Fri Feb 24 16:01:00 CET 2012.
-------- --- old-versions/11.4/UPDATES/all/openssl/openssl.changes 2012-02-02 08:23:19.000000000 +0100 +++ 11.4/openssl/openssl.changes 2012-02-24 04:12:14.000000000 +0100 @@ -1,0 +2,6 @@ +Fri Feb 24 02:52:14 UTC 2012 - [email protected] + +- fix bug[bnc#748738] - Tolerate bad MIME headers in openssl's + asn1 parser. + +------------------------------------------------------------------- calling whatdependson for 11.4-i586 New: ---- Bug748738_Tolerate_bad_MIME_headers.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ openssl.spec ++++++ --- /var/tmp/diff_new_pack.MiHKcT/_old 2012-02-24 16:00:34.000000000 +0100 +++ /var/tmp/diff_new_pack.MiHKcT/_new 2012-02-24 16:00:34.000000000 +0100 @@ -31,7 +31,7 @@ Obsoletes: openssl-64bit %endif Version: 1.0.0c -Release: 18.<RELEASE25> +Release: 18.<RELEASE27> Summary: Secure Sockets and Transport Layer Security Url: http://www.openssl.org/ Source: http://www.%{name}.org/source/%{name}-%{version}.tar.bz2 @@ -56,6 +56,7 @@ Patch24: CVE-2011-4619.patch Patch25: CVE-2012-0027.patch Patch26: CVE-2012-0050.patch +Patch27: Bug748738_Tolerate_bad_MIME_headers.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -199,6 +200,7 @@ %patch24 -p1 %patch25 -p1 %patch26 -p1 +%patch27 -p1 cp -p %{S:10} . echo "adding/overwriting some entries in the 'table' hash in Configure" # $dso_scheme:$shared_target:$shared_cflag:$shared_ldflag:$shared_extension:$ranlib:$arflags ++++++ Bug748738_Tolerate_bad_MIME_headers.patch ++++++ Index: openssl-1.0.0g/crypto/asn1/asn_mime.c =================================================================== --- openssl-1.0.0g.orig/crypto/asn1/asn_mime.c +++ openssl-1.0.0g/crypto/asn1/asn_mime.c @@ -858,6 +858,10 @@ static int mime_hdr_addparam(MIME_HEADER static int mime_hdr_cmp(const MIME_HEADER * const *a, const MIME_HEADER * const *b) { + if ((*a)->name == NULL || (*b)->name == NULL) + return (*a)->name - (*b)->name < 0 ? -1 : + (*a)->name - (*b)->name > 0 ? 1 : 0; + return(strcmp((*a)->name, (*b)->name)); } continue with "q"... Remember to have fun... -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
