Package: Source Package: openssl (1.0.1k-3) and Version: openssl 1.0.1k
We are planning to upgrade the openssl version to 1.0.1k on our system and we
are using the Source Package: openssl (1.0.1k-3).
We are facing the following 2 error
1. while patching the patch files located in debian/patches/
man-section.patch
patching file Makefile.org
Hunk #1 succeeded at 160 (offset 26 lines).
Hunk #2 succeeded at 627 (offset 20 lines).
misordered hunks! output would be garbled
Hunk #3 FAILED at 633.
1 out of 3 hunks FAILED -- saving rejects to file Makefile.org.rej
2. While compiling , it fails in the s2_srvr.c
Looks like ../debian/patches/0006-Fix-reachable-assert-in-SSLv2-servers.patch
adding the extra braces at following line.
#if 1
/* If a bad decrypt, continue with protocol but with a
* random master secret (Bleichenbacher attack) */
- if ((i < 0) ||
- ((!is_export && (i != EVP_CIPHER_key_length(c)))
- || (is_export && ((i != ek) || (s->s2->tmp.clear+(unsigned
int)i !=
- (unsigned int)EVP_CIPHER_key_length(c))))))
+ if ((i < 0) || ((!is_export && i != EVP_CIPHER_key_length(c))
+ || (is_export && i != ek))) {
{
ERR_clear_error();
if (is_export)
i=ek;
else
i=EVP_CIPHER_key_length(c);
- if (RAND_pseudo_bytes(p,i) <= 0)
+ if (RAND_pseudo_bytes(&p[s->s2->tmp.clear], i) <= 0)
return 0;
}
#else
Kind request you to provide the support/solution for this as soon as possible.
Thanks and Regards,
Nilesh
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Disclaimer~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Information contained and transmitted by this e-mail is confidential and
proprietary to IGATE and its affiliates and is intended for use only by the
recipient. If you are not the intended recipient, you are hereby notified that
any dissemination, distribution, copying or use of this e-mail is strictly
prohibited and you are requested to delete this e-mail immediately and notify
the originator or [email protected] <mailto:[email protected]>. IGATE does
not enter into any agreement with any party by e-mail. Any views expressed by
an individual do not necessarily reflect the view of IGATE. IGATE is not
responsible for the consequences of any actions taken on the basis of
information provided, through this email. The contents of an attachment to this
e-mail may contain software viruses, which could damage your own computer
system. While IGATE has taken every reasonable precaution to minimise this
risk, we cannot accept liability for any damage which you sustain as a result
of software viruses. You should carry out your own virus checks before opening
an attachment. To know more about IGATE please visit www.igate.com
<http://www.igate.com>.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~