diff options
author | fredb <fredb@pkgsrc.org> | 2002-08-10 04:50:31 +0000 |
---|---|---|
committer | fredb <fredb@pkgsrc.org> | 2002-08-10 04:50:31 +0000 |
commit | d5e2ea6e6860c9a59e833f1ab67b73eb61d5bfda (patch) | |
tree | 0bf028b4dd8a881d7400938e7367616fe8668bfe /security/openssl/distinfo | |
parent | 9fa64dec3b098f174ec1e505394e5ca3b01a8907 (diff) | |
download | pkgsrc-d5e2ea6e6860c9a59e833f1ab67b73eb61d5bfda.tar.gz |
Update to 0.9.6g. The most significant change is this proof against
a stunning DoS vulnerability, fixed in 0.9.6f:
*) Use proper error handling instead of 'assertions' in buffer
overflow checks added in 0.9.6e. This prevents DoS (the
assertions could call abort()).
[Arne Ansper <arne@ats.cyber.ee>, Bodo Moeller]
Regenerate the netbsd patch. This is now a clean diff against the
vendor tag, with version-number-only changes elided.
Partially revert "crypto/dist/openssl/crypto/rand/randfile.c", version
1.4 (via additional pkgsrc patch), to give this a shot to compile on
NetBSD-1.4.2 and earlier, which had no strlcpy() or strlcat().
Assemble the shared library without "-Bsymbolic", mainly to give this
a shot at linking on NetBSD-a.out (untested).
Diffstat (limited to 'security/openssl/distinfo')
-rw-r--r-- | security/openssl/distinfo | 17 |
1 files changed, 9 insertions, 8 deletions
diff --git a/security/openssl/distinfo b/security/openssl/distinfo index 82342fb5dac..070e093db7c 100644 --- a/security/openssl/distinfo +++ b/security/openssl/distinfo @@ -1,12 +1,13 @@ -$NetBSD: distinfo,v 1.10 2002/08/07 10:30:53 fredb Exp $ +$NetBSD: distinfo,v 1.11 2002/08/10 04:50:32 fredb Exp $ -SHA1 (openssl-0.9.6e.tar.gz) = b9eefc560058fc06ad2e24c22d477424ad37fe0d -Size (openssl-0.9.6e.tar.gz) = 2158566 bytes -SHA1 (openssl-0.9.6e-20020804-netbsd.patch.gz) = 0981460c471d4b30504927fb4173e5eaccd3ba82 -Size (openssl-0.9.6e-20020804-netbsd.patch.gz) = 28234 bytes -SHA1 (patch-aa) = 959928efc089555d2189c9f5e54b9e598cc34bd1 +SHA1 (openssl-0.9.6g.tar.gz) = 5b3cdad1d33134c97f659a8ad5dbf4ca4cf3d9c8 +Size (openssl-0.9.6g.tar.gz) = 2170570 bytes +SHA1 (openssl-0.9.6g-20020810-netbsd.patch.gz) = 37cf5db32ba045b8a23af71ea95ab2f90b886e46 +Size (openssl-0.9.6g-20020810-netbsd.patch.gz) = 27608 bytes +SHA1 (patch-aa) = c4766edba4704374ae67d75c2f9454bc70782eea SHA1 (patch-ab) = 9bdac032996bd97834b00cb661f79c00dc31bac1 -SHA1 (patch-ac) = 11d459aa2e7fe0c4d59285db25b74b8b06396c36 +SHA1 (patch-ac) = 7d63a98d7df20065da443084f41413eb98911b14 SHA1 (patch-ad) = ee8283d5537edce1bb60470c616ebabfda0aa084 SHA1 (patch-ae) = f4bf6ae5aa41b55d9978376e4e50ee10c10dd288 -SHA1 (patch-af) = bffccbde6871b7e279c565671308a5740534449e +SHA1 (patch-af) = fd470396c5f54ea2d333df44504c03e7c6c8dc96 +SHA1 (patch-ag) = be064cc8207512e91bccfe7968758b88cb29e966 |