openSUSE Build Service

Stephan Kulow (coolo) accepted request 229715 from

Shawn Chang (shawn2012) about 10 years ago (revision 111)

- openssl-gcc-attributes.patch 
  * annotate memory allocation wrappers with attribute(alloc_size)
    so the compiler can tell us if it knows they are being misused
  * OPENSSL_showfatal is annotated with attribute printf to detect
    format string problems.
- It is time to try to disable SSLv2 again, it was tried a while
  ago but broke too many things, nowadays Debian, Ubuntu, the BSDs
  all have disabled it, most components are already fixed.
  I will fix the remaining fallout if any. (email me) (forwarded request 229674 from elvigia)

Stephan Kulow (coolo) accepted request 229370 from

Marcus Meissner (msmeissn) about 10 years ago (revision 110)

- update to 1.0.1g:
  * fix for critical TLS heartbeat read overrun (CVE-2014-0160) (bnc#872299)
  * Fix for Recovering OpenSSL ECDSA Nonces (CVE-2014-0076) (bnc#869945)
  * Workaround for the "TLS hang bug" (see FAQ and PR#2771)
- remove CVE-2014-0076.patch
- openssl.keyring: upstream changed to:
  pub  4096R/FA40E9E2 2005-03-19 Dr Stephen N Henson <steve@openssl.org>
  uid                            Dr Stephen Henson <shenson@drh-consultancy.co.uk>
  uid                            Dr Stephen Henson <shenson@opensslfoundation.com>

Stephan Kulow (coolo) accepted request 227508 from

Stephan Kulow (coolo) about 10 years ago (revision 109)

Fix bug[ bnc#869945] CVE-2014-0076: openssl: Recovering OpenSSL ECDSA Nonces Using the FLUSH+RELOAD Cache Side-channel Attack; Add file: CVE-2014-0076.patch (forwarded request 227417 from shawn2012)

Stephan Kulow (coolo) accepted request 224423 from

Marcus Meissner (msmeissn) about 10 years ago (revision 108)

additional changes required for FIPS validation( from Fedora repo); Add patch file: openssl-1.0.1e-new-fips-reqs.patch (forwarded request 224375 from shawn2012)

Stephan Kulow (coolo) accepted request 213629 from

Shawn Chang (shawn2012) over 10 years ago (revision 107)

Remove GCC option -O3 for compiliation issue of ARM version; Modify: openssl.spec (forwarded request 213627 from shawn2012)

Stephan Kulow (coolo) accepted request 213132 from

Shawn Chang (shawn2012) over 10 years ago (revision 106)

Fixed bnc#857850, openssl doesn't load engine; Modify file: openssl.spec (forwarded request 213131 from shawn2012)

Tomáš Chvátal (scarabeus_factory) accepted request 212714 from

Dirk Mueller (dirkmueller) over 10 years ago (revision 105)

Fixed bnc#857203, openssl: crash in DTLS renegotiation after packet loss; Add file: CVE-2013-6450.patch (forwarded request 212653 from shawn2012)

Stephan Kulow (coolo) accepted request 212087 from

Dr. Werner Fink (WernerFink) over 10 years ago (revision 104)

Fixed bnc#856687, openssl: crash when using TLS 1.2; Add file: CVE-2013-6449.patch (forwarded request 212077 from shawn2012)

Stephan Kulow (coolo) accepted request 211421 from

Marcus Meissner (msmeissn) over 10 years ago (revision 103)

- compression_methods_switch.patch: setenv might not be successful
  if a surrounding library or application filters it, like e.g. sudo.
  As setenv() does not seem to be useful anyway, remove it.
  bnc#849377 (forwarded request 211400 from msmeissn)

Stephan Kulow (coolo) accepted request 210985 from

Shawn Chang (shawn2012) over 10 years ago (revision 102)

Adjust the installation path; Modify files: README-FIPS.txt openssl.spec (forwarded request 210984 from shawn2012)

Stephan Kulow (coolo) committed over 10 years ago (revision 101)

osc copypac from project:openSUSE:Factory package:openssl revision:99

Stephan Kulow (coolo) accepted request 208487 from

Marcus Meissner (msmeissn) over 10 years ago (revision 100)

Patches for OpenSSL FIPS-140-2/3 certification; Add patch files: openssl-1.0.1e-fips.patch, openssl-1.0.1e-fips-ec.patch,openssl-1.0.1e-fips-ctor.patch (forwarded request 208378 from shawn2012)

Tomáš Chvátal (scarabeus_factory) accepted request 204475 from

Shawn Chang (shawn2012) over 10 years ago (revision 99)

 (forwarded request 204370 from elvigia)

Tomáš Chvátal (scarabeus_factory) accepted request 203428 from

Cristian Rodríguez (elvigia) over 10 years ago (revision 98)

- openssl-1.0.1c-ipv6-apps.patch: 
  Support ipv6 in the openssl s_client / s_server commandline app. (forwarded request 203361 from msmeissn)

Stephan Kulow (coolo) accepted request 201094 from

Marcus Meissner (msmeissn) over 10 years ago (revision 97)

- VPN openconnect problem (DTLS handshake failed)
  (git 9fe4603b8, bnc#822642, openssl ticket#2984) (forwarded request 201079 from dmacvicar)

Adrian Schröter (adrianSuSE) committed over 10 years ago (revision 96)

Split 13.1 from Factory

Stephan Kulow (coolo) accepted request 197451 from

Dr. Werner Fink (WernerFink) over 10 years ago (revision 95)

Fix armv6l arch (armv7 was previously used to build armv6 which lead to illegal instruction when used) (forwarded request 197443 from Guillaume_G)

Tomáš Chvátal (scarabeus_factory) accepted request 186710 from

Tomáš Chvátal (scarabeus_factory) almost 11 years ago (revision 94)

Fix bug[ bnc#832833] openssl ssl_set_cert_masks() is broken; Add patch file: SSL_get_certificate-broken.patch (forwarded request 186693 from shawn2012)

Stephan Kulow (coolo) accepted request 185827 from

Dr. Werner Fink (WernerFink) almost 11 years ago (revision 93)

- 0005-libssl-Hide-library-private-symbols.patch: hide 
  private symbols, this *only* applies to libssl where
  it is straightforward to do so as applications should
  not be using any of the symbols declared/defined in headers
  that the library does not install.
  A separate patch MAY be provided in the future for libcrypto
  where things are much more complicated and threfore requires
  careful testing. (forwarded request 185819 from elvigia)

Stephan Kulow (coolo) accepted request 184582 from

Marcus Meissner (msmeissn) almost 11 years ago (revision 92)

- compression_methods_switch.patch: Disable compression by default to
  avoid the CRIME attack (CVE-2012-4929 bnc#793420)
  Can be override by setting environment variable
      OPENSSL_NO_DEFAULT_ZLIB=no

Places

Revisions of openssl

Places