[Pkg-openssl-changes] r840 - in openssl/branches/jessie_backports/debian: . patches

[Kurt Roeckx]

Author: kroeckx
Date: 2016-09-22 19:26:13 +0000 (Thu, 22 Sep 2016)
New Revision: 840

Removed:
   openssl/branches/jessie_backports/debian/patches/ca.patch
Modified:
   openssl/branches/jessie_backports/debian/changelog
   openssl/branches/jessie_backports/debian/patches/engines-path.patch
   openssl/branches/jessie_backports/debian/patches/series
Log:
Changes from unstable.


Modified: openssl/branches/jessie_backports/debian/changelog
===================================================================
--- openssl/branches/jessie_backports/debian/changelog	2016-09-22 18:14:18 UTC (rev 839)
+++ openssl/branches/jessie_backports/debian/changelog	2016-09-22 19:26:13 UTC (rev 840)
@@ -1,3 +1,23 @@
+openssl (1.0.2i-1~bpo8+1) jessie-backports; urgency=medium
+
+  * New upstream version
+    - Fix CVE-2016-2177
+    - Fix CVE-2016-2178
+    - Fix CVE-2016-2179
+    - Fix CVE-2016-2180
+    - Fix CVE-2016-2181
+    - Fix CVE-2016-2182
+    - Fix CVE-2016-2183
+    - Fix CVE-2016-6302
+    - Fix CVE-2016-6303
+    - Fix CVE-2016-6304
+    - Fix CVE-2016-6306
+  * Drop ca.patch, option is now documented upstream
+  * Update engines-path.patch to also update the libcrypto.pc, now that that
+    has an enginesdir in it.
+
+ -- Kurt Roeckx <kurt at roeckx.be>  Thu, 22 Sep 2016 21:21:00 +0200
+
 openssl (1.0.2h-1~bpo8+2) jessie-backports; urgency=medium
 
   * move the symbols SRP_VBASE_get1_by_user, SRP_user_pwd_free from

Deleted: openssl/branches/jessie_backports/debian/patches/ca.patch
===================================================================
--- openssl/branches/jessie_backports/debian/patches/ca.patch	2016-09-22 18:14:18 UTC (rev 839)
+++ openssl/branches/jessie_backports/debian/patches/ca.patch	2016-09-22 19:26:13 UTC (rev 840)
@@ -1,22 +0,0 @@
----
- apps/CA.pl.in |    2 ++
- 1 file changed, 2 insertions(+)
-
---- a/apps/CA.pl.in
-+++ b/apps/CA.pl.in
-@@ -65,6 +65,7 @@ if(defined $ENV{OPENSSL}) {
- foreach (@ARGV) {
- 	if ( /^(-\?|-h|-help)$/ ) {
- 	    print STDERR "usage: CA -newcert|-newreq|-newreq-nodes|-newca|-sign|-verify\n";
-+	    print STDERR "usage: CA -signcert certfile keyfile|-newcert|-newreq|-newca|-sign|-verify\n";
- 	    exit 0;
- 	} elsif (/^-newcert$/) {
- 	    # create a certificate
-@@ -165,6 +166,7 @@ foreach (@ARGV) {
- 	} else {
- 	    print STDERR "Unknown arg $_\n";
- 	    print STDERR "usage: CA -newcert|-newreq|-newreq-nodes|-newca|-sign|-verify\n";
-+	    print STDERR "usage: CA -signcert certfile keyfile|-newcert|-newreq|-newca|-sign|-verify\n";
- 	    exit 1;
- 	}
- }

Modified: openssl/branches/jessie_backports/debian/patches/engines-path.patch
===================================================================
--- openssl/branches/jessie_backports/debian/patches/engines-path.patch	2016-09-22 18:14:18 UTC (rev 839)
+++ openssl/branches/jessie_backports/debian/patches/engines-path.patch	2016-09-22 19:26:13 UTC (rev 840)
@@ -1,8 +1,17 @@
-Index: openssl-1.0.2~beta3/Makefile.org
+Index: openssl-1.0.2i/Makefile.org
 ===================================================================
---- openssl-1.0.2~beta3.orig/Makefile.org
-+++ openssl-1.0.2~beta3/Makefile.org
-@@ -541,7 +541,7 @@ install: all install_docs install_sw
+--- openssl-1.0.2i.orig/Makefile.org
++++ openssl-1.0.2i/Makefile.org
+@@ -368,7 +368,7 @@ libcrypto.pc: Makefile
+ 	    echo 'exec_prefix=$${prefix}'; \
+ 	    echo 'libdir=$${exec_prefix}/$(LIBDIR)'; \
+ 	    echo 'includedir=$${prefix}/include'; \
+-	    echo 'enginesdir=$${libdir}/engines'; \
++	    echo 'enginesdir=$${libdir}/openssl-1.0.0/engines'; \
+ 	    echo ''; \
+ 	    echo 'Name: OpenSSL-libcrypto'; \
+ 	    echo 'Description: OpenSSL cryptography library'; \
+@@ -536,7 +536,7 @@ install: all install_docs install_sw
  install_sw:
  	@$(PERL) $(TOP)/util/mkdir-p.pl $(INSTALL_PREFIX)$(INSTALLTOP)/bin \
  		$(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR) \
@@ -11,10 +20,10 @@
  		$(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/pkgconfig \
  		$(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl \
  		$(INSTALL_PREFIX)$(OPENSSLDIR)/misc \
-Index: openssl-1.0.2~beta3/engines/Makefile
+Index: openssl-1.0.2i/engines/Makefile
 ===================================================================
---- openssl-1.0.2~beta3.orig/engines/Makefile
-+++ openssl-1.0.2~beta3/engines/Makefile
+--- openssl-1.0.2i.orig/engines/Makefile
++++ openssl-1.0.2i/engines/Makefile
 @@ -107,13 +107,13 @@ install:
  	@[ -n "$(INSTALLTOP)" ] # should be set by top Makefile...
  	@if [ -n "$(SHARED_LIBS)" ]; then \
@@ -45,11 +54,11 @@
  		done; \
  	fi
  	@target=install; $(RECURSIVE_MAKE)
-Index: openssl-1.0.2~beta3/Configure
+Index: openssl-1.0.2i/Configure
 ===================================================================
---- openssl-1.0.2~beta3.orig/Configure
-+++ openssl-1.0.2~beta3/Configure
-@@ -1893,7 +1893,7 @@ while (<IN>)
+--- openssl-1.0.2i.orig/Configure
++++ openssl-1.0.2i/Configure
+@@ -1969,7 +1969,7 @@ while (<IN>)
  		}
  	elsif	(/^#define\s+ENGINESDIR/)
  		{
@@ -58,10 +67,10 @@
  		$foo =~ s/\\/\\\\/g;
  		print OUT "#define ENGINESDIR \"$foo\"\n";
  		}
-Index: openssl-1.0.2~beta3/engines/ccgost/Makefile
+Index: openssl-1.0.2i/engines/ccgost/Makefile
 ===================================================================
---- openssl-1.0.2~beta3.orig/engines/ccgost/Makefile
-+++ openssl-1.0.2~beta3/engines/ccgost/Makefile
+--- openssl-1.0.2i.orig/engines/ccgost/Makefile
++++ openssl-1.0.2i/engines/ccgost/Makefile
 @@ -47,7 +47,7 @@ install:
  		pfx=lib; \
  		if expr "$(PLATFORM)" : "Cygwin" >/dev/null; then \

Modified: openssl/branches/jessie_backports/debian/patches/series
===================================================================
--- openssl/branches/jessie_backports/debian/patches/series	2016-09-22 18:14:18 UTC (rev 839)
+++ openssl/branches/jessie_backports/debian/patches/series	2016-09-22 19:26:13 UTC (rev 840)
@@ -1,4 +1,3 @@
-ca.patch
 config-hurd.patch
 debian-targets.patch
 engines-path.patch