auto-import changelog data from openssl-0.9.6-16.src.rpm
Wed Mar 19 2003 Nalin Dahyabhai <nalin@redhat.com> 0.9.6-16 - add backported patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's attack (CAN-2003-0131) Mon Mar 17 2003 Nalin Dahyabhai <nalin@redhat.com> 0.9.6-15 - add patch to enable RSA blinding by default, closing a timing attack (CAN-2003-0147) Wed Feb 19 2003 Nalin Dahyabhai <nalin@redhat.com> 0.9.6-14 - add fix to guard against attempts to allocate negative amounts of memory - add patch for CAN-2003-0078, fixing a timing attack
This commit is contained in:
parent
4d0009045f
commit
840a8b5bb7
46
openssl.spec
46
openssl.spec
@ -5,7 +5,7 @@
|
|||||||
Summary: Secure Sockets Layer Toolkit
|
Summary: Secure Sockets Layer Toolkit
|
||||||
Name: openssl
|
Name: openssl
|
||||||
Version: 0.9.6
|
Version: 0.9.6
|
||||||
Release: 13.0p
|
Release: 16
|
||||||
Source: openssl-%{version}-usa.tar.bz2
|
Source: openssl-%{version}-usa.tar.bz2
|
||||||
Source1: hobble-openssl
|
Source1: hobble-openssl
|
||||||
Source2: Makefile.certificate
|
Source2: Makefile.certificate
|
||||||
@ -30,19 +30,16 @@ Patch13: openssl096a-prng.patch
|
|||||||
Patch14: openssl096a-prng-2.patch
|
Patch14: openssl096a-prng-2.patch
|
||||||
Patch15: openssl-0.9.6b-sec.patch
|
Patch15: openssl-0.9.6b-sec.patch
|
||||||
Patch16: openssl-0.9.6c-asn.patch.3
|
Patch16: openssl-0.9.6c-asn.patch.3
|
||||||
|
Patch17: openssl-0.9.6-malloc-negative.patch
|
||||||
|
Patch18: openssl-0.9.6-vaudenay.patch
|
||||||
|
Patch19: openssl-sec3-blinding-0.9.6b.patch
|
||||||
|
Patch20: openssl-0.9.6-klima-pokorny-rosa.patch
|
||||||
License: BSDish
|
License: BSDish
|
||||||
Group: System Environment/Libraries
|
Group: System Environment/Libraries
|
||||||
URL: http://www.openssl.org/
|
URL: http://www.openssl.org/
|
||||||
BuildRoot: %{_tmppath}/%{name}-%{version}-root
|
BuildRoot: %{_tmppath}/%{name}-%{version}-root
|
||||||
BuildPreReq: perl, python-devel, unzip
|
BuildPreReq: perl, python-devel, unzip
|
||||||
|
|
||||||
# the gcc-2.96 compiler on ppc has some optimization problems.
|
|
||||||
# gcc296ppc is true in this case.
|
|
||||||
%define gcc296ppc 0
|
|
||||||
%ifarch ppc ppc64
|
|
||||||
%define gcc296ppc %(gcc -v 2>&1 1>/dev/null|grep -qF 2.96 && echo 1 || echo 0)
|
|
||||||
%endif
|
|
||||||
|
|
||||||
%description
|
%description
|
||||||
The OpenSSL certificate management tool and the shared libraries that
|
The OpenSSL certificate management tool and the shared libraries that
|
||||||
provide various cryptographic algorithms and protocols.
|
provide various cryptographic algorithms and protocols.
|
||||||
@ -107,13 +104,19 @@ popd
|
|||||||
%patch11 -p1 -b .zero-premaster
|
%patch11 -p1 -b .zero-premaster
|
||||||
%patch12 -p1 -b .memmove
|
%patch12 -p1 -b .memmove
|
||||||
pushd crypto/rand
|
pushd crypto/rand
|
||||||
%patch13 -p0 -b .rand
|
%patch13 -p0 -b .prng
|
||||||
popd
|
popd
|
||||||
pushd doc/crypto
|
pushd doc/crypto
|
||||||
%patch14 -p0 -b .rand-2
|
%patch14 -p0 -b .prng-2
|
||||||
popd
|
popd
|
||||||
%patch15 -p0 -b .sec
|
%patch15 -p0 -b .sec
|
||||||
%patch16 -p1 -b .asn
|
%patch16 -p1 -b .asn
|
||||||
|
%patch17 -p1 -b .malloc-negative
|
||||||
|
%patch18 -p1 -b .vaudenay
|
||||||
|
%patch19 -p0 -b .sec3-blinding
|
||||||
|
pushd ssl
|
||||||
|
%patch20 -p0 -b .klima-pokorny-rosa
|
||||||
|
popd
|
||||||
|
|
||||||
chmod 644 FAQ LICENSE CHANGES NEWS INSTALL README
|
chmod 644 FAQ LICENSE CHANGES NEWS INSTALL README
|
||||||
chmod 644 doc/README doc/c-indentation.el doc/openssl.txt
|
chmod 644 doc/README doc/c-indentation.el doc/openssl.txt
|
||||||
@ -126,11 +129,6 @@ ln -sf ../../crypto/opensslconf.h include/openssl/
|
|||||||
ln -sf ../../ssl/ssl.h include/openssl/
|
ln -sf ../../ssl/ssl.h include/openssl/
|
||||||
|
|
||||||
%build
|
%build
|
||||||
|
|
||||||
%if %{gcc296ppc}
|
|
||||||
RPM_OPT_FLAGS="$RPM_OPT_FLAGS -O1"
|
|
||||||
%endif
|
|
||||||
|
|
||||||
PATH=${PATH}:${PWD}/bin
|
PATH=${PATH}:${PWD}/bin
|
||||||
TOPDIR=${PWD}
|
TOPDIR=${PWD}
|
||||||
LD_LIBRARY_PATH=${TOPDIR}:${PATH} ; export LD_LIBRARY_PATH
|
LD_LIBRARY_PATH=${TOPDIR}:${PATH} ; export LD_LIBRARY_PATH
|
||||||
@ -298,6 +296,18 @@ popd
|
|||||||
%postun -p /sbin/ldconfig
|
%postun -p /sbin/ldconfig
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Wed Mar 19 2003 Nalin Dahyabhai <nalin@redhat.com> 0.9.6-16
|
||||||
|
- add backported patch to harden against Klima-Pokorny-Rosa extension
|
||||||
|
of Bleichenbacher's attack (CAN-2003-0131)
|
||||||
|
|
||||||
|
* Mon Mar 17 2003 Nalin Dahyabhai <nalin@redhat.com> 0.9.6-15
|
||||||
|
- add patch to enable RSA blinding by default, closing a timing attack
|
||||||
|
(CAN-2003-0147)
|
||||||
|
|
||||||
|
* Wed Feb 19 2003 Nalin Dahyabhai <nalin@redhat.com> 0.9.6-14
|
||||||
|
- add fix to guard against attempts to allocate negative amounts of memory
|
||||||
|
- add patch for CAN-2003-0078, fixing a timing attack
|
||||||
|
|
||||||
* Thu Aug 1 2002 Nalin Dahyabhai <nalin@redhat.com> 0.9.6-13
|
* Thu Aug 1 2002 Nalin Dahyabhai <nalin@redhat.com> 0.9.6-13
|
||||||
- update asn patch to fix accidental reversal of a logic check
|
- update asn patch to fix accidental reversal of a logic check
|
||||||
|
|
||||||
@ -452,13 +462,13 @@ popd
|
|||||||
- run ldconfig directly in post/postun
|
- run ldconfig directly in post/postun
|
||||||
- add FAQ
|
- add FAQ
|
||||||
|
|
||||||
* Sat Dec 18 1999 Bernhard Rosenkrdnzer <bero@redhat.de>
|
* Sat Dec 18 1999 Bernhard Rosenkr)Bänzer <bero@redhat.de>
|
||||||
- Fix build on non-x86 platforms
|
- Fix build on non-x86 platforms
|
||||||
|
|
||||||
* Fri Nov 12 1999 Bernhard Rosenkrdnzer <bero@redhat.de>
|
* Fri Nov 12 1999 Bernhard Rosenkr)Bänzer <bero@redhat.de>
|
||||||
- move /usr/share/ssl/* from -devel to main package
|
- move /usr/share/ssl/* from -devel to main package
|
||||||
|
|
||||||
* Tue Oct 26 1999 Bernhard Rosenkrdnzer <bero@redhat.de>
|
* Tue Oct 26 1999 Bernhard Rosenkr)Bänzer <bero@redhat.de>
|
||||||
- inital packaging
|
- inital packaging
|
||||||
- changes from base:
|
- changes from base:
|
||||||
- Move /usr/local/ssl to /usr/share/ssl for FHS compliance
|
- Move /usr/local/ssl to /usr/share/ssl for FHS compliance
|
||||||
|
Loading…
Reference in New Issue
Block a user