2a3bc4b5dd
openSUSE Security Update: openssl: update to version 1.0.1h
Description:
The openssl library was updated to version 1.0.1h fixing various security
issues and bugs:
Security issues fixed:
- CVE-2014-0224: Fix for SSL/TLS MITM flaw. An attacker using a carefully
crafted handshake can force the use of weak keying material in OpenSSL
SSL/TLS clients and servers.
- CVE-2014-0221: Fix DTLS recursion flaw. By sending an invalid DTLS
handshake to an OpenSSL DTLS client the code can be made to recurse
eventually crashing in a DoS attack.
- CVE-2014-0195: Fix DTLS invalid fragment vulnerability. A buffer
overrun attack can be triggered by sending invalid DTLS fragments to an
OpenSSL DTLS client or server. This is potentially exploitable to run
arbitrary code on a vulnerable client or server.
- CVE-2014-3470: Fix bug in TLS code where clients enable anonymous ECDH
ciphersuites are subject to a denial of service attack.
Bump PKGREVISION.
14 lines
394 B
Makefile
14 lines
394 B
Makefile
# $NetBSD: Makefile,v 1.9 2014/06/06 09:53:29 obache Exp $
|
|
|
|
DISTNAME= suse_openssl-${SUSE_VERSION}
|
|
PKGREVISION= 8
|
|
CATEGORIES= emulators
|
|
RPMUPDPKGS+= libopenssl1_0_0-1.0.1h-11.48.1.${SUSE_ARCH}
|
|
|
|
MAINTAINER= pkgsrc-users@NetBSD.org
|
|
COMMENT= Linux compatibility package for OpenSSL
|
|
|
|
EMUL_MODULES.linux= base
|
|
|
|
.include "../../emulators/suse131_linux/Makefile.common"
|
|
.include "../../mk/bsd.pkg.mk"
|