openssl: Update to 1.1.0j

  *) Timing vulnerability in DSA signature generation

     The OpenSSL DSA signature algorithm has been shown to be vulnerable to a
     timing side channel attack. An attacker could use variations in the signing
     algorithm to recover the private key.

     This issue was reported to OpenSSL on 16th October 2018 by Samuel Weiser.
     (CVE-2018-0734)
     [Paul Dale]

  *) Timing vulnerability in ECDSA signature generation

     The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a
     timing side channel attack. An attacker could use variations in the signing
     algorithm to recover the private key.

     This issue was reported to OpenSSL on 25th October 2018 by Samuel Weiser.
     (CVE-2018-0735)
     [Paul Dale]

  *) Add coordinate blinding for EC_POINT and implement projective
     coordinate blinding for generic prime curves as a countermeasure to
     chosen point SCA attacks.
     [Sohaib ul Hassan, Nicola Tuveri, Billy Bob Brumley]

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/config/rootfiles/common/openssl b/config/rootfiles/common/openssl
index 8b26c4b429a80d67a3ba8b0191b5fe4ab19d6c35..f7d6f2fb5b02501fda89d616acea6ae1aeab390b 100644 (file)
--- a/config/rootfiles/common/openssl
+++ b/config/rootfiles/common/openssl
@@ -1654,7 +1654,10 @@ usr/lib/libssl.so.1.1
 #usr/share/doc/openssl/html/man3/OCSP_resp_get0_certs.html
 #usr/share/doc/openssl/html/man3/OCSP_resp_get0_id.html
 #usr/share/doc/openssl/html/man3/OCSP_resp_get0_produced_at.html
+#usr/share/doc/openssl/html/man3/OCSP_resp_get0_respdata.html
+#usr/share/doc/openssl/html/man3/OCSP_resp_get0_signature.html
 #usr/share/doc/openssl/html/man3/OCSP_resp_get0_signer.html
+#usr/share/doc/openssl/html/man3/OCSP_resp_get0_tbs_sigalg.html
 #usr/share/doc/openssl/html/man3/OCSP_response_create.html
 #usr/share/doc/openssl/html/man3/OCSP_response_get1_basic.html
 #usr/share/doc/openssl/html/man3/OCSP_response_status.html
@@ -1676,6 +1679,7 @@ usr/lib/libssl.so.1.1
 #usr/share/doc/openssl/html/man3/OPENSSL_LH_stats.html
 #usr/share/doc/openssl/html/man3/OPENSSL_LH_stats_bio.html
 #usr/share/doc/openssl/html/man3/OPENSSL_VERSION_NUMBER.html
+#usr/share/doc/openssl/html/man3/OPENSSL_VERSION_TEXT.html
 #usr/share/doc/openssl/html/man3/OPENSSL_atexit.html
 #usr/share/doc/openssl/html/man3/OPENSSL_buf2hexstr.html
 #usr/share/doc/openssl/html/man3/OPENSSL_cleanse.html

diff --git a/lfs/openssl b/lfs/openssl
index 94a08b97db45a301013e6fa05bf10e3cd792f84e..d7a616ff240ef45718148a2e5b45ee8f2b9b562d 100644 (file)
--- a/lfs/openssl
+++ b/lfs/openssl
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.1.0i
+VER        = 1.1.0j
 
 THISAPP    = openssl-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -87,7 +87,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_MD5 = 9495126aafd2659d357ea66a969c3fe1
+$(DL_FILE)_MD5 = b4ca5b78ae6ae79da80790b30dbedbdc
 
 install : $(TARGET)