[openwrt/openwrt] openssl: bump to 1.1.1j

[LEDE Commits]

ynezz pushed a commit to openwrt/openwrt.git, branch master:
https://git.openwrt.org/482c9ff289c65480c8e7340e1740db24c62f91df

commit 482c9ff289c65480c8e7340e1740db24c62f91df
Author: Eneas U de Queiroz <cotequeiroz at gmail.com>
AuthorDate: Tue Feb 16 23:21:36 2021 -0300

    openssl: bump to 1.1.1j
    
    This fixes 4 security vulnerabilities/bugs:
    
    - CVE-2021-2839 - SSLv2 vulnerability. Openssl 1.1.1 does not support
      SSLv2, but the affected functions still exist. Considered just a bug.
    
    - CVE-2021-2840 - calls EVP_CipherUpdate, EVP_EncryptUpdate and
      EVP_DecryptUpdate may overflow the output length argument in some
      cases where the input length is close to the maximum permissable
      length for an integer on the platform. In such cases the return value
      from the function call will be 1 (indicating success), but the output
      length value will be negative.
    
    - CVE-2021-2841 - The X509_issuer_and_serial_hash() function attempts to
      create a unique hash value based on the issuer and serial number data
      contained within an X509 certificate. However it was failing to
      correctly handle any errors that may occur while parsing the issuer
      field (which might occur if the issuer field is maliciously
      constructed). This may subsequently result in a NULL pointer deref and
      a crash leading to a potential denial of service attack.
    
    - Fixed SRP_Calc_client_key so that it runs in constant time. This could
      be exploited in a side channel attack to recover the password.
    
    The 3 CVEs above are currently awaiting analysis.
    
    Signed-off-by: Eneas U de Queiroz <cotequeiroz at gmail.com>
---
 package/libs/openssl/Makefile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/package/libs/openssl/Makefile b/package/libs/openssl/Makefile
index 714ce2059a..4fb4cb2784 100644
--- a/package/libs/openssl/Makefile
+++ b/package/libs/openssl/Makefile
@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=openssl
 PKG_BASE:=1.1.1
-PKG_BUGFIX:=i
+PKG_BUGFIX:=j
 PKG_VERSION:=$(PKG_BASE)$(PKG_BUGFIX)
 PKG_RELEASE:=1
 PKG_USE_MIPS16:=0
@@ -24,7 +24,7 @@ PKG_SOURCE_URL:= \
 	ftp://ftp.pca.dfn.de/pub/tools/net/openssl/source/ \
 	http://www.openssl.org/source/ \
 	http://www.openssl.org/source/old/$(PKG_BASE)/
-PKG_HASH:=e8be6a35fe41d10603c3cc635e93289ed00bf34b79671a3a4de64fcee00d5242
+PKG_HASH:=aaf2fcb575cdf6491b98ab4829abf78a3dec8402b8b81efc8f23c00d443981bf
 
 PKG_LICENSE:=OpenSSL
 PKG_LICENSE_FILES:=LICENSE