[source] openssl: update to 1.0.2n

LEDE Commits lede-commits at lists.infradead.org
Fri Dec 8 01:48:10 PST 2017


jow pushed a commit to source.git, branch master:
https://git.lede-project.org/55e70c8b72dbb8e812ceb790bf08543d69fce86e

commit 55e70c8b72dbb8e812ceb790bf08543d69fce86e
Author: Peter Wagner <tripolar at gmx.at>
AuthorDate: Fri Dec 8 06:23:26 2017 +0100

    openssl: update to 1.0.2n
    
    add no-ssl3-method again as 1.0.2n compiles without the ssl3-method(s)
    
    Fixes CVEs: CVE-2017-3737, CVE-2017-3738
    
    Signed-off-by: Peter Wagner <tripolar at gmx.at>
---
 package/libs/openssl/Makefile | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/package/libs/openssl/Makefile b/package/libs/openssl/Makefile
index db20b7e..b75aa45 100644
--- a/package/libs/openssl/Makefile
+++ b/package/libs/openssl/Makefile
@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=openssl
 PKG_BASE:=1.0.2
-PKG_BUGFIX:=m
+PKG_BUGFIX:=n
 PKG_VERSION:=$(PKG_BASE)$(PKG_BUGFIX)
 PKG_RELEASE:=1
 PKG_USE_MIPS16:=0
@@ -24,7 +24,7 @@ PKG_SOURCE_URL:= \
 	http://gd.tuwien.ac.at/infosys/security/openssl/source/ \
 	http://www.openssl.org/source/ \
 	http://www.openssl.org/source/old/$(PKG_BASE)/
-PKG_HASH:=8c6ff15ec6b319b50788f42c7abc2890c08ba5a1cdcd3810eb9092deada37b0f
+PKG_HASH:=370babb75f278c39e0c50e8c4e7493bc0f18db6867478341a832a982fd15a8fe
 
 PKG_LICENSE:=OpenSSL
 PKG_LICENSE_FILES:=LICENSE
@@ -123,7 +123,7 @@ ifndef CONFIG_OPENSSL_WITH_EC2M
 endif
 
 ifndef CONFIG_OPENSSL_WITH_SSL3
-  OPENSSL_OPTIONS += no-ssl3
+  OPENSSL_OPTIONS += no-ssl3 no-ssl3-method
 endif
 
 ifndef CONFIG_OPENSSL_HARDWARE_SUPPORT



More information about the lede-commits mailing list