[Pkg-openssl-changes] r666 - in openssl/branches/1.0.1/debian: . patches

[Kurt Roeckx]

Author: kroeckx
Date: 2014-06-05 17:10:43 +0000 (Thu, 05 Jun 2014)
New Revision: 666

Added:
   openssl/branches/1.0.1/debian/patches/disable_heartbeat_test.patch
Modified:
   openssl/branches/1.0.1/debian/changelog
   openssl/branches/1.0.1/debian/patches/series
Log:
New upstream version.


Modified: openssl/branches/1.0.1/debian/changelog
===================================================================
--- openssl/branches/1.0.1/debian/changelog	2014-05-12 21:25:58 UTC (rev 665)
+++ openssl/branches/1.0.1/debian/changelog	2014-06-05 17:10:43 UTC (rev 666)
@@ -1,3 +1,15 @@
+openssl (1.0.1h-1) unstable; urgency=high
+
+  * New upstream release
+    - Fix CVE-2014-0224
+    - Fix CVE-2014-0221
+    - Fix CVE-2014-0195
+    - Fix CVE-2014-3470
+    - Drop patch git_snapshot.patch
+  * Disable the heartbeat test since it fails to build.
+
+ -- Kurt Roeckx <kurt at roeckx.be>  Thu, 05 Jun 2014 18:42:05 +0200
+
 openssl (1.0.1g-4) unstable; urgency=medium
 
   * Update to git snapshot

Added: openssl/branches/1.0.1/debian/patches/disable_heartbeat_test.patch
===================================================================
--- openssl/branches/1.0.1/debian/patches/disable_heartbeat_test.patch	                        (rev 0)
+++ openssl/branches/1.0.1/debian/patches/disable_heartbeat_test.patch	2014-06-05 17:10:43 UTC (rev 666)
@@ -0,0 +1,27 @@
+From: Kurt Roeckx <kurt at roeckx.be>
+Subject: Disable heartbeat test
+
+It fails to link, probably because it's using internal symbols.
+
+Index: openssl-1.0.1h/test/Makefile
+===================================================================
+--- openssl-1.0.1h.orig/test/Makefile
++++ openssl-1.0.1h/test/Makefile
+@@ -75,7 +75,7 @@ EXE=	$(BNTEST)$(EXE_EXT) $(ECTEST)$(EXE_
+ 	$(RANDTEST)$(EXE_EXT) $(DHTEST)$(EXE_EXT) $(ENGINETEST)$(EXE_EXT) \
+ 	$(BFTEST)$(EXE_EXT) $(CASTTEST)$(EXE_EXT) $(SSLTEST)$(EXE_EXT) $(EXPTEST)$(EXE_EXT) $(DSATEST)$(EXE_EXT) $(RSATEST)$(EXE_EXT) \
+ 	$(EVPTEST)$(EXE_EXT) $(IGETEST)$(EXE_EXT) $(JPAKETEST)$(EXE_EXT) $(SRPTEST)$(EXE_EXT) \
+-	$(ASN1TEST)$(EXE_EXT) $(HEARTBEATTEST)$(EXE_EXT)
++	$(ASN1TEST)$(EXE_EXT)
+ 
+ # $(METHTEST)$(EXE_EXT)
+ 
+@@ -140,7 +140,7 @@ alltests: \
+ 	test_enc test_x509 test_rsa test_crl test_sid \
+ 	test_gen test_req test_pkcs7 test_verify test_dh test_dsa \
+ 	test_ss test_ca test_engine test_evp test_ssl test_tsa test_ige \
+-	test_jpake test_srp test_cms test_heartbeat
++	test_jpake test_srp test_cms
+ 
+ test_evp:
+ 	../util/shlib_wrap.sh ./$(EVPTEST) evptests.txt

Modified: openssl/branches/1.0.1/debian/patches/series
===================================================================
--- openssl/branches/1.0.1/debian/patches/series	2014-05-12 21:25:58 UTC (rev 665)
+++ openssl/branches/1.0.1/debian/patches/series	2014-06-05 17:10:43 UTC (rev 666)
@@ -21,4 +21,4 @@
 #padlock_conf.patch
 defaults.patch
 openssl_fix_for_x32.patch
-git_snapshot.patch
+disable_heartbeat_test.patch