update to OpenSSL 1.0.2p

- Client DoS due to large DH parameter (CVE-2018-0732)
- Cache timing vulnerability in RSA Key Generation (CVE-2018-0737)
This commit is contained in:
sthen 2018-08-15 13:19:00 +00:00
parent c2c91d4ff1
commit d7eb206082
4 changed files with 7 additions and 21 deletions

View File

@ -1,13 +1,13 @@
# $OpenBSD: Makefile,v 1.30 2018/03/29 19:32:33 sthen Exp $
# $OpenBSD: Makefile,v 1.31 2018/08/15 13:19:00 sthen Exp $
COMMENT= TLS/SSL library and tools
PORTROACH= limit:^1\.0\.
V= 1.0.2o
V= 1.0.2p
DISTNAME= openssl-$V
PKGNAME= openssl-$V
SHLIBVER= 5.2
SHLIBVER= 5.3
SHARED_LIBS= crypto ${SHLIBVER} \
ssl ${SHLIBVER}

View File

@ -1,2 +1,2 @@
SHA256 (openssl-1.0.2o.tar.gz) = 7D9clxS6D9RctOCHMB6xM2wxfg0gtXWhJQUEcOgInk0=
SIZE (openssl-1.0.2o.tar.gz) = 5329472
SHA256 (openssl-1.0.2p.tar.gz) = UKmOB7Gonrj2qZR38mLfccb6e+93303IMCWihFyCfQA=
SIZE (openssl-1.0.2p.tar.gz) = 5338192

View File

@ -1,15 +0,0 @@
$OpenBSD: patch-util_domd,v 1.1 2018/05/15 15:15:05 visa Exp $
Fix make depend on gcc architectures.
Index: util/domd
--- util/domd.orig
+++ util/domd
@@ -17,6 +17,7 @@ cp Makefile.save Makefile
# fake the presence of Kerberos
touch $TOP/krb5.h
if ${MAKEDEPEND} --version 2>&1 | grep "clang" > /dev/null ||
+ ${MAKEDEPEND} --version 2>&1 | grep "GCC" > /dev/null ||
echo $MAKEDEPEND | grep "gcc" > /dev/null; then
args=""
while [ $# -gt 0 ]; do

View File

@ -1,4 +1,4 @@
@comment $OpenBSD: PLIST,v 1.12 2017/11/02 22:52:29 sthen Exp $
@comment $OpenBSD: PLIST,v 1.13 2018/08/15 13:19:00 sthen Exp $
@bin bin/eopenssl
include/eopenssl/
include/eopenssl/openssl/
@ -1432,6 +1432,7 @@ lib/eopenssl/man/man3/
@man lib/eopenssl/man/man3/SSL_get_servername.3
@man lib/eopenssl/man/man3/SSL_get_servername_type.3
@man lib/eopenssl/man/man3/SSL_get_session.3
@man lib/eopenssl/man/man3/SSL_get_shared_ciphers.3
@man lib/eopenssl/man/man3/SSL_get_shared_curve.3
@man lib/eopenssl/man/man3/SSL_get_shutdown.3
@man lib/eopenssl/man/man3/SSL_get_ssl_method.3