From: Michael Tremer <michael.tremer@ipfire.org>
Date: Sat, 21 Jan 2012 12:22:18 +0000 (+0100)
Subject: openssl: Update to 1.0.0g.
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7438ebb844dfdba3edd8104973f6665f5d6dffeb;p=ipfire-3.x.git

openssl: Update to 1.0.0g.

Bug #10001: This release fixed a DTLS DoS issue which was
recently introduced by the fix for CVE-2011-4109.
---

diff --git a/openssl/openssl.nm b/openssl/openssl.nm
index 4c27b89f0..f221603bf 100644
--- a/openssl/openssl.nm
+++ b/openssl/openssl.nm
@@ -4,8 +4,8 @@
 ###############################################################################
 
 name       = openssl
-version    = 1.0.0f
-release    = 2
+version    = 1.0.0g
+release    = 1
 
 maintainer = Michael Tremer <michael.tremer@ipfire.org>
 groups     = System/Libraries
diff --git a/openssl/patches/openssl-1.0.0f-version.patch b/openssl/patches/openssl-1.0.0g-version.patch
similarity index 57%
rename from openssl/patches/openssl-1.0.0f-version.patch
rename to openssl/patches/openssl-1.0.0g-version.patch
index 6c67a5ea3..55aa0c021 100644
--- a/openssl/patches/openssl-1.0.0f-version.patch
+++ b/openssl/patches/openssl-1.0.0g-version.patch
@@ -1,22 +1,22 @@
-diff -up openssl-1.0.0f/crypto/opensslv.h.version openssl-1.0.0f/crypto/opensslv.h
---- openssl-1.0.0f/crypto/opensslv.h.version	2012-01-05 13:28:32.000000000 +0100
-+++ openssl-1.0.0f/crypto/opensslv.h	2012-01-05 13:29:37.000000000 +0100
+diff -up openssl-1.0.0g/crypto/opensslv.h.version openssl-1.0.0g/crypto/opensslv.h
+--- openssl-1.0.0g/crypto/opensslv.h.version	2012-01-19 14:50:50.094028047 +0100
++++ openssl-1.0.0g/crypto/opensslv.h	2012-01-19 14:51:48.655529671 +0100
 @@ -25,7 +25,8 @@
   * (Prior to 0.9.5a beta1, a different scheme was used: MMNNFFRBB for
   *  major minor fix final patch/beta)
   */
--#define OPENSSL_VERSION_NUMBER	0x1000006fL
+-#define OPENSSL_VERSION_NUMBER	0x1000007fL
 +/* we have to keep the version number to not break the abi */
 +#define OPENSSL_VERSION_NUMBER	0x10000003
  #ifdef OPENSSL_FIPS
- #define OPENSSL_VERSION_TEXT	"OpenSSL 1.0.0f-fips 4 Jan 2012"
+ #define OPENSSL_VERSION_TEXT	"OpenSSL 1.0.0g-fips 18 Jan 2012"
  #else
 @@ -83,7 +84,7 @@
   * should only keep the versions that are binary compatible with the current.
   */
  #define SHLIB_VERSION_HISTORY ""
 -#define SHLIB_VERSION_NUMBER "1.0.0"
-+#define SHLIB_VERSION_NUMBER "1.0.0f"
++#define SHLIB_VERSION_NUMBER "1.0.0g"
  
  
  #endif /* HEADER_OPENSSLV_H */