openssl: Update to 1.0.0g.

Bug #10001: This release fixed a DTLS DoS issue which was
recently introduced by the fix for CVE-2011-4109.

diff --git a/openssl/openssl.nm b/openssl/openssl.nm
index 4c27b89f00d28f1aca7536639242d8898a25a354..f221603bfe064b0381994007a2c6bf8032248189 100644 (file)
--- a/openssl/openssl.nm
+++ b/openssl/openssl.nm
@@ -4,8 +4,8 @@
 ###############################################################################
 
 name       = openssl
-version    = 1.0.0f
-release    = 2
+version    = 1.0.0g
+release    = 1
 
 maintainer = Michael Tremer <michael.tremer@ipfire.org>
 groups     = System/Libraries

diff --git a/openssl/patches/openssl-1.0.0f-version.patch b/openssl/patches/openssl-1.0.0g-version.patch
similarity index 57%
rename from openssl/patches/openssl-1.0.0f-version.patch
rename to openssl/patches/openssl-1.0.0g-version.patch
index 6c67a5ea3431fbe279d2a28d6251b3dfc1c629b4..55aa0c021240b67cd4e1653891ffe35625f47a8a 100644 (file)
--- a/openssl/patches/openssl-1.0.0f-version.patch
+++ b/openssl/patches/openssl-1.0.0g-version.patch
@@ -1,22 +1,22 @@
-diff -up openssl-1.0.0f/crypto/opensslv.h.version openssl-1.0.0f/crypto/opensslv.h
---- openssl-1.0.0f/crypto/opensslv.h.version   2012-01-05 13:28:32.000000000 +0100
-+++ openssl-1.0.0f/crypto/opensslv.h   2012-01-05 13:29:37.000000000 +0100
+diff -up openssl-1.0.0g/crypto/opensslv.h.version openssl-1.0.0g/crypto/opensslv.h
+--- openssl-1.0.0g/crypto/opensslv.h.version   2012-01-19 14:50:50.094028047 +0100
++++ openssl-1.0.0g/crypto/opensslv.h   2012-01-19 14:51:48.655529671 +0100
 @@ -25,7 +25,8 @@
   * (Prior to 0.9.5a beta1, a different scheme was used: MMNNFFRBB for
   *  major minor fix final patch/beta)
   */
--#define OPENSSL_VERSION_NUMBER        0x1000006fL
+-#define OPENSSL_VERSION_NUMBER        0x1000007fL
 +/* we have to keep the version number to not break the abi */
 +#define OPENSSL_VERSION_NUMBER        0x10000003
  #ifdef OPENSSL_FIPS
- #define OPENSSL_VERSION_TEXT  "OpenSSL 1.0.0f-fips 4 Jan 2012"
+ #define OPENSSL_VERSION_TEXT  "OpenSSL 1.0.0g-fips 18 Jan 2012"
  #else
 @@ -83,7 +84,7 @@
   * should only keep the versions that are binary compatible with the current.
   */
  #define SHLIB_VERSION_HISTORY ""
 -#define SHLIB_VERSION_NUMBER "1.0.0"
-+#define SHLIB_VERSION_NUMBER "1.0.0f"
++#define SHLIB_VERSION_NUMBER "1.0.0g"
  
  
  #endif /* HEADER_OPENSSLV_H */