From patchwork Tue Apr 21 13:43:38 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Arne Fitzenreiter X-Patchwork-Id: 2990 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4964Xv1HL7z3xQy for ; Tue, 21 Apr 2020 13:43:59 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail02.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4964Xs3v1Nz1D6; Tue, 21 Apr 2020 13:43:57 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4964Xr5Xycz2yZc; Tue, 21 Apr 2020 13:43:56 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4964Xq4kqfz2xn1 for ; Tue, 21 Apr 2020 13:43:55 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPSA id 4964Xp5rD9z1D6; Tue, 21 Apr 2020 13:43:54 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1587476635; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc; bh=S3OpCtAvS3ONWeQWeOrWnzjiKziQYlR9U2XgAA+5VbU=; b=gSLlZ0S/pxY7FA818yekZIGBVyUKd3DP7vL9RJpAKTl+L4cN9SXanLDh4r/0qhxfMzVXmd u10EO9JCAFJPsMBw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1587476635; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc; bh=S3OpCtAvS3ONWeQWeOrWnzjiKziQYlR9U2XgAA+5VbU=; b=LHn1jhhZ1PVdHt1zYjL48e3+F2b3d7lWsTZHJ0P8GewLMu/WPj7HcyYrnb9Ao4xLt704tz fOWP8sK1TVTht1RDZWMowiHIdmExgj52L9yO8axPkC9rYpNoc7dSOPMF+NZ5Q67/tBCQOX Dn/4iWx2R1NXlL+bgWu09R4bQM0FxjA9IMUqJpr+fkHBZ4jadiyMb5X68zuchdb+/YqcGH LJayn1qe8+pMW08J8fb/SYF6F0wA7FxcbNitrk3e8wBEG5VlXDuljimoz8DkPDesLchjmQ Q66POqOwBzAu9WeoVJB7l1VNGt6Z2HUZjmc25zleTv5L8IC3/fYNBcT11GNmOg== From: Arne Fitzenreiter To: development@lists.ipfire.org Subject: [PATCH] openssl: update to 1.1.1g Date: Tue, 21 Apr 2020 15:43:38 +0200 Message-Id: <20200421134338.29148-1-arne_f@ipfire.org> Authentication-Results: mail01.ipfire.org; auth=pass smtp.mailfrom=arne_f@ipfire.org X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFire development talk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Arne Fitzenreiter Errors-To: development-bounces@lists.ipfire.org Sender: "Development" CVE-2020-1967 (OpenSSL advisory) [High severity] 21 April 2020: Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. https://www.openssl.org/news/secadv/20200421.txt Signed-off-by: Arne Fitzenreiter --- lfs/openssl | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/openssl b/lfs/openssl index 06b999a15..8fe3c2856 100644 --- a/lfs/openssl +++ b/lfs/openssl @@ -24,7 +24,7 @@ include Config -VER = 1.1.1f +VER = 1.1.1g THISAPP = openssl-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -87,7 +87,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 3f486f2f4435ef14b81814dbbc7b48bb +$(DL_FILE)_MD5 = 76766e98997660138cdaf13a187bd234 install : $(TARGET)