Message ID | 20200421134338.29148-1-arne_f@ipfire.org |
---|---|
State | Accepted |
Commit | 9ec0fca91d237fffe686b2a23fa5cd1dac731fd3 |
Headers |
Return-Path: <development-bounces@lists.ipfire.org> Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4964Xv1HL7z3xQy for <patchwork@web04.haj.ipfire.org>; Tue, 21 Apr 2020 13:43:59 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail02.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4964Xs3v1Nz1D6; Tue, 21 Apr 2020 13:43:57 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4964Xr5Xycz2yZc; Tue, 21 Apr 2020 13:43:56 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4964Xq4kqfz2xn1 for <development@lists.ipfire.org>; Tue, 21 Apr 2020 13:43:55 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPSA id 4964Xp5rD9z1D6; Tue, 21 Apr 2020 13:43:54 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1587476635; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc; bh=S3OpCtAvS3ONWeQWeOrWnzjiKziQYlR9U2XgAA+5VbU=; b=gSLlZ0S/pxY7FA818yekZIGBVyUKd3DP7vL9RJpAKTl+L4cN9SXanLDh4r/0qhxfMzVXmd u10EO9JCAFJPsMBw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1587476635; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc; bh=S3OpCtAvS3ONWeQWeOrWnzjiKziQYlR9U2XgAA+5VbU=; b=LHn1jhhZ1PVdHt1zYjL48e3+F2b3d7lWsTZHJ0P8GewLMu/WPj7HcyYrnb9Ao4xLt704tz fOWP8sK1TVTht1RDZWMowiHIdmExgj52L9yO8axPkC9rYpNoc7dSOPMF+NZ5Q67/tBCQOX Dn/4iWx2R1NXlL+bgWu09R4bQM0FxjA9IMUqJpr+fkHBZ4jadiyMb5X68zuchdb+/YqcGH LJayn1qe8+pMW08J8fb/SYF6F0wA7FxcbNitrk3e8wBEG5VlXDuljimoz8DkPDesLchjmQ Q66POqOwBzAu9WeoVJB7l1VNGt6Z2HUZjmc25zleTv5L8IC3/fYNBcT11GNmOg== From: Arne Fitzenreiter <arne_f@ipfire.org> To: development@lists.ipfire.org Subject: [PATCH] openssl: update to 1.1.1g Date: Tue, 21 Apr 2020 15:43:38 +0200 Message-Id: <20200421134338.29148-1-arne_f@ipfire.org> Authentication-Results: mail01.ipfire.org; auth=pass smtp.mailfrom=arne_f@ipfire.org X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFire development talk <development.lists.ipfire.org> List-Unsubscribe: <https://lists.ipfire.org/mailman/options/development>, <mailto:development-request@lists.ipfire.org?subject=unsubscribe> List-Archive: <http://lists.ipfire.org/pipermail/development/> List-Post: <mailto:development@lists.ipfire.org> List-Help: <mailto:development-request@lists.ipfire.org?subject=help> List-Subscribe: <https://lists.ipfire.org/mailman/listinfo/development>, <mailto:development-request@lists.ipfire.org?subject=subscribe> Cc: Arne Fitzenreiter <arne_f@ipfire.org> Errors-To: development-bounces@lists.ipfire.org Sender: "Development" <development-bounces@lists.ipfire.org> |
Series |
openssl: update to 1.1.1g
|
|
Commit Message
Arne Fitzenreiter
April 21, 2020, 1:43 p.m. UTC
CVE-2020-1967 (OpenSSL advisory) [High severity] 21 April 2020:
Server or client applications that call the SSL_check_chain()
function during or after a TLS 1.3 handshake may crash due
to a NULL pointer dereference as a result of incorrect handling
of the "signature_algorithms_cert" TLS extension.
The crash occurs if an invalid or unrecognised signature algorithm
is received from the peer. This could be exploited by a malicious
peer in a Denial of Service attack.
https://www.openssl.org/news/secadv/20200421.txt
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
---
lfs/openssl | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
Comments
Hello Arne, Thank you very much for patching this so quickly. Best, -Michael > On 21 Apr 2020, at 14:43, Arne Fitzenreiter <arne_f@ipfire.org> wrote: > > CVE-2020-1967 (OpenSSL advisory) [High severity] 21 April 2020: > Server or client applications that call the SSL_check_chain() > function during or after a TLS 1.3 handshake may crash due > to a NULL pointer dereference as a result of incorrect handling > of the "signature_algorithms_cert" TLS extension. > The crash occurs if an invalid or unrecognised signature algorithm > is received from the peer. This could be exploited by a malicious > peer in a Denial of Service attack. > https://www.openssl.org/news/secadv/20200421.txt > > Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org> > --- > lfs/openssl | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > diff --git a/lfs/openssl b/lfs/openssl > index 06b999a15..8fe3c2856 100644 > --- a/lfs/openssl > +++ b/lfs/openssl > @@ -24,7 +24,7 @@ > > include Config > > -VER = 1.1.1f > +VER = 1.1.1g > > THISAPP = openssl-$(VER) > DL_FILE = $(THISAPP).tar.gz > @@ -87,7 +87,7 @@ objects = $(DL_FILE) > > $(DL_FILE) = $(DL_FROM)/$(DL_FILE) > > -$(DL_FILE)_MD5 = 3f486f2f4435ef14b81814dbbc7b48bb > +$(DL_FILE)_MD5 = 76766e98997660138cdaf13a187bd234 > > install : $(TARGET) > > -- > 2.17.1 >
diff --git a/lfs/openssl b/lfs/openssl index 06b999a15..8fe3c2856 100644 --- a/lfs/openssl +++ b/lfs/openssl @@ -24,7 +24,7 @@ include Config -VER = 1.1.1f +VER = 1.1.1g THISAPP = openssl-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -87,7 +87,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 3f486f2f4435ef14b81814dbbc7b48bb +$(DL_FILE)_MD5 = 76766e98997660138cdaf13a187bd234 install : $(TARGET)