Import 1.1.1k
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Sebastian Andrzej Siewior
3 years ago
|
0 |
openssl (1.1.1k-1) UNRELEASED; urgency=medium
|
|
1 |
|
|
2 |
* New upstream version.
|
|
3 |
- CVE-2021-3450 (CA certificate check bypass with X509_V_FLAG_X509_STRICT).
|
|
4 |
- CVE-2021-3449 (NULL pointer deref in signature_algorithms processing).
|
|
5 |
|
|
6 |
-- Sebastian Andrzej Siewior <sebastian@breakpoint.cc> Thu, 25 Mar 2021 21:36:26 +0100
|
|
7 |
|
| 0 | 8 |
openssl (1.1.1j-1) unstable; urgency=medium
|
| 1 | 9 |
|
| 2 | 10 |
* New upstream version.
|
| 6 | 6 |
1 file changed, 14 insertions(+), 6 deletions(-)
|
| 7 | 7 |
|
| 8 | 8 |
diff --git a/tools/c_rehash.in b/tools/c_rehash.in
|
| 9 | |
index 421fd892086f..5ad1ab1d655f 100644
|
|
9 |
index fa7c6c9fef91..a7e538a72d7d 100644
|
| 10 | 10 |
--- a/tools/c_rehash.in
|
| 11 | 11 |
+++ b/tools/c_rehash.in
|
| 12 | 12 |
@@ -17,8 +17,6 @@ my $prefix = {- quotify1($config{prefix}) -};
|
|
| 45 | 45 |
sub link_hash_cert {
|
| 46 | 46 |
my $fname = $_[0];
|
| 47 | 47 |
+ my $x509hash = $_[1] || '-subject_hash';
|
| 48 | |
$fname =~ s/'/'\\''/g;
|
|
48 |
$fname =~ s/\"/\\\"/g;
|
| 49 | 49 |
my ($hash, $fprint) = `"$openssl" x509 $x509hash -fingerprint -noout -in "$fname"`;
|
| 50 | 50 |
chomp $hash;
|
| 51 | 51 |
@@ -198,10 +196,20 @@ sub link_hash_cert {
|
| 7 | 7 |
2 files changed, 6 insertions(+), 3 deletions(-)
|
| 8 | 8 |
|
| 9 | 9 |
diff --git a/Configurations/unix-Makefile.tmpl b/Configurations/unix-Makefile.tmpl
|
| 10 | |
index 3a24d551359b..d0c90cb2546c 100644
|
|
10 |
index 41648c952667..e013d464bd73 100644
|
| 11 | 11 |
--- a/Configurations/unix-Makefile.tmpl
|
| 12 | 12 |
+++ b/Configurations/unix-Makefile.tmpl
|
| 13 | 13 |
@@ -281,7 +281,8 @@ HTMLDIR=$(DOCDIR)/html
|