Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-1.9.git;a=commitdiff;h=c2668067c802f989e47538c7890955571de5b2bf
commit c2668067c802f989e47538c7890955571de5b2bf Author: kikadf <[email protected]> Date: Mon May 5 18:07:05 2014 +0200 openssl-1.0.1-5arcturus4-x86_64 * Fix CVE-2014-0198 diff --git a/source/base/openssl/CVE-2014-0198.patch b/source/base/openssl/CVE-2014-0198.patch new file mode 100644 index 0000000..f8e3444 --- /dev/null +++ b/source/base/openssl/CVE-2014-0198.patch @@ -0,0 +1,19 @@ +Description: fix denial of service via null pointer dereference +Origin: vendor, http://anoncvs.estpak.ee/cgi-bin/cgit/openbsd-src/commit/lib/libssl?id=e76e308f1fab2253ab5b4ef52a1865c5ffecdf21 +Bug: http://rt.openssl.org/Ticket/Display.html?user=guest&pass=guest&id=3321 + +Index: openssl-1.0.1f/ssl/s3_pkt.c +=================================================================== +--- openssl-1.0.1f.orig/ssl/s3_pkt.c 2014-05-02 15:00:28.216467809 -0400 ++++ openssl-1.0.1f/ssl/s3_pkt.c 2014-05-02 15:02:06.192469397 -0400 +@@ -657,6 +657,10 @@ + if (i <= 0) + return(i); + /* if it went, fall through and send more stuff */ ++ /* we may have released our buffer, so get it again */ ++ if (wb->buf == NULL) ++ if (!ssl3_setup_write_buffer(s)) ++ return -1; + } + + if (len == 0 && !create_empty_fragment) diff --git a/source/base/openssl/FrugalBuild b/source/base/openssl/FrugalBuild index d0e2508..773ee51 100644 --- a/source/base/openssl/FrugalBuild +++ b/source/base/openssl/FrugalBuild @@ -1,11 +1,12 @@ # Compiling Time: 0.84 SBU +# Contributor: kikadf <[email protected]> # Contributor: Miklos Vajna <[email protected]> # Maintainer: voroskoi <[email protected]> pkgname=openssl pkgver=1.0.1 pkgextraver=g -pkgrel=5arcturus3 +pkgrel=5arcturus4 pkgdesc="The Open Source toolkit for Secure Sockets Layer and Transport Layer Security" url="http://www.openssl.org/source/"; groups=('base' 'chroot-core') @@ -18,8 +19,8 @@ source=($url$pkgname-$pkgver$pkgextraver.tar.gz \ signatures=("$source.asc" '' '') # FSA fix *** -source=(${source[@]} CVE-2010-5298.patch) -signatures=(${signatures[@]} '') +source=(${source[@]} CVE-2010-5298.patch CVE-2014-0198.patch) +signatures=(${signatures[@]} '' '') # *********** build() _______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
