rpms/openssl
8
1
Fork 1
Code Issues Pull Requests Releases Activity

import CS openssl-3.5.7-1.el9

Browse Source
This commit is contained in:
AlmaLinux RelEng Bot 2026-08-24 09:53:26 -04:00
parent b9cde2ea9a
commit 10bd1fbfa2
5 changed files with 36 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.gitignore vendored
View File

@ -1 +1 @@
SOURCES/openssl-3.5.5.tar.gz
SOURCES/openssl-3.5.7.tar.gz

2
.openssl.metadata
View File

@ -1 +1 @@
72a5ebbdd30bc28a66f069e2d50c66a007c324d2 SOURCES/openssl-3.5.5.tar.gz
53d331880fbde8e6fe25870d5325a61201f6264d SOURCES/openssl-3.5.7.tar.gz

2
SOURCES/0006-RH-Add-support-for-PROFILE-SYSTEM-system-default-cip.patch
View File

@ -317,7 +317,7 @@ index 9874e6bad6..76b6befbad 100644
+#endif
ADD_TEST(test_default_cipherlist_explicit);
ADD_TEST(test_default_cipherlist_clear);
ADD_TEST(test_stdname_cipherlist);
#ifndef OPENSSL_NO_TLS1_3
--
2.52.0

14
SOURCES/0100-RHEL9-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
View File

@ -1,4 +1,4 @@
From c63599ee9708d543205a9173207ee7167315c624 Mon Sep 17 00:00:00 2001
From d0f984a8c5d943402f38043ff6898b1b06364bc5 Mon Sep 17 00:00:00 2001
From: Clemens Lang <cllang@redhat.com>
Date: Tue, 1 Mar 2022 15:44:18 +0100
Subject: [PATCH] Allow SHA1 in seclevel 2 if rh-allow-sha1-signatures = yes
@ -156,19 +156,19 @@ index 4b74ee1a34..5f089de107 100644
return ssl_security(s, op, secbits, nid, x);
else
diff --git a/test/recipes/25-test_verify.t b/test/recipes/25-test_verify.t
index 700bbd849c..2de1d76b5e 100644
index ab8cdff..84421cc 100644
--- a/test/recipes/25-test_verify.t
+++ b/test/recipes/25-test_verify.t
@@ -29,7 +29,7 @@ sub verify {
@@ -30,7 +30,7 @@ sub verify {
run(app([@args]));
}
-plan tests => 203;
+plan tests => 202;
-plan tests => 204;
+plan tests => 203;
# Canonical success
ok(verify("ee-cert", "sslserver", ["root-cert"], ["ca-cert"]),
@@ -387,8 +387,9 @@ ok(verify("ee-pss-sha1-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "0"
@@ -485,8 +485,9 @@ ok(verify("ee-pss-sha1-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "0"
ok(verify("ee-pss-sha256-cert", "", ["root-cert"], ["ca-cert"], ),
"CA with PSS signature using SHA256");
@ -181,4 +181,4 @@ index 700bbd849c..2de1d76b5e 100644
ok(verify("ee-pss-sha256-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "2"),
"PSS signature using SHA256 and auth level 2");
--
2.35.1
2.54.0

27
SPECS/openssl.spec
View File

@ -28,7 +28,7 @@ print(string.sub(hash, 0, 16))
Summary: Utilities from the general purpose cryptography library with TLS implementation
Name: openssl
Version: 3.5.5
Version: 3.5.7
Release: 1%{?dist}
Epoch: 1
Source0: openssl-%{version}.tar.gz
@ -456,6 +456,31 @@ ln -s /etc/crypto-policies/back-ends/openssl_fips.config $RPM_BUILD_ROOT%{_sysco
%ldconfig_scriptlets libs
%changelog
* Fri Jun 12 2026 Pavol Žáčik <pzacik@redhat.com> - 1:3.5.7-1
- Rebase to OpenSSL 3.5.7
Resolves: RHEL-179700
Resolves: RHEL-179695
Resolves: RHEL-179692
Resolves: RHEL-179687
Resolves: RHEL-179677
Resolves: RHEL-179660
Resolves: RHEL-179634
Resolves: RHEL-179555
Resolves: RHEL-179551
Resolves: RHEL-179548
Resolves: RHEL-179543
Resolves: RHEL-179540
Resolves: RHEL-179284
Resolves: RHEL-179275
* Wed May 13 2026 Pavol Žáčik <pzacik@redhat.com> - 1:3.5.5-3
- Fix CVE-2026-28390
Resolves: RHEL-165870
* Thu Apr 09 2026 Pavol Žáčik <pzacik@redhat.com> - 1:3.5.5-2
- Fix CVE-2026-31790
Resolves: RHEL-161586
* Tue Jan 27 2026 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
- Rebase to OpenSSL 3.5.5
Resolves: RHEL-136895