[Pkg-openssl-changes] r692 - openssl/branches/1.0.1/debian

[Kurt Roeckx]

Author: kroeckx
Date: 2014-10-15 17:11:59 +0000 (Wed, 15 Oct 2014)
New Revision: 692

Modified:
   openssl/branches/1.0.1/debian/changelog
   openssl/branches/1.0.1/debian/rules
Log:
New upstream release and disable SSLv3


Modified: openssl/branches/1.0.1/debian/changelog
===================================================================
--- openssl/branches/1.0.1/debian/changelog	2014-08-11 19:42:27 UTC (rev 691)
+++ openssl/branches/1.0.1/debian/changelog	2014-10-15 17:11:59 UTC (rev 692)
@@ -1,3 +1,14 @@
+openssl (1.0.1i-3) unstable; urgency=medium
+
+  * New upstream release
+    - Fixes CVE-2014-3513
+    - Fixes CVE-2014-3567
+    - Add Fallback SCSV support to mitigate CVE-2014-3566
+    - Disables SSLv3 because of CVE-2014-3566
+    - Fixes CVE-2014-3568
+
+ -- Kurt Roeckx <kurt at roeckx.be>  Wed, 15 Oct 2014 19:06:38 +0200
+
 openssl (1.0.1i-2) unstable; urgency=medium
 
   * Fix assembler for ppc64le (Closes: #745657)

Modified: openssl/branches/1.0.1/debian/rules
===================================================================
--- openssl/branches/1.0.1/debian/rules	2014-08-11 19:42:27 UTC (rev 691)
+++ openssl/branches/1.0.1/debian/rules	2014-10-15 17:11:59 UTC (rev 692)
@@ -26,7 +26,7 @@
 	export CROSS_COMPILE ?= $(DEB_HOST_GNU_TYPE)-
 endif
 
-CONFARGS  = --prefix=/usr --openssldir=/usr/lib/ssl --libdir=lib/$(DEB_HOST_MULTIARCH) no-idea no-mdc2 no-rc5 no-zlib  enable-tlsext no-ssl2
+CONFARGS  = --prefix=/usr --openssldir=/usr/lib/ssl --libdir=lib/$(DEB_HOST_MULTIARCH) no-idea no-mdc2 no-rc5 no-zlib  enable-tlsext no-ssl2 no-ssl3
 OPT_alpha = ev4 ev5
 OPT_i386  = i586 i686/cmov
 ARCHOPTS  = OPT_$(DEB_HOST_ARCH)