[pkgsrc/pkgsrc-2012Q1]: pkgsrc/security/openssl Pullup ticket #3782 - request...

[tron <tron%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/57603cdc0892
branches:  pkgsrc-2012Q1
changeset: 602097:57603cdc0892
user:      tron <tron%pkgsrc.org@localhost>
date:      Fri May 11 14:56:49 2012 +0000

description:
Pullup ticket #3782 - requested by taca
security/openssl: security update

Revisions pulled up:
- security/openssl/Makefile                                     1.167
- security/openssl/distinfo                                     1.89

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Fri May 11 13:27:27 UTC 2012

   Modified Files:
        pkgsrc/security/openssl: Makefile distinfo

   Log Message:
   Update openssl to 0.9.8x.

    OpenSSL CHANGES
    _______________

    Changes between 0.9.8w and 0.9.8x [10 May 2012]

     *) Sanity check record length before skipping explicit IV in DTLS
        to fix DoS attack.

        Thanks to Codenomicon for discovering this issue using Fuzz-o-Matic
        fuzzing as a service testing platform.
        (CVE-2012-2333)
        [Steve Henson]

     *) Initialise tkeylen properly when encrypting CMS messages.
        Thanks to Solar Designer of Openwall for reporting this issue.
        [Steve Henson]

diffstat:

 security/openssl/Makefile |  4 ++--
 security/openssl/distinfo |  8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diffs (30 lines):

diff -r bbcd2a48a436 -r 57603cdc0892 security/openssl/Makefile
--- a/security/openssl/Makefile Fri May 11 14:45:51 2012 +0000
+++ b/security/openssl/Makefile Fri May 11 14:56:49 2012 +0000
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.164.2.2 2012/04/24 07:47:28 sbd Exp $
+# $NetBSD: Makefile,v 1.164.2.3 2012/05/11 14:56:49 tron Exp $
 
 OPENSSL_SNAPSHOT?=     # empty
 OPENSSL_STABLE?=       # empty
-OPENSSL_VERS?=         0.9.8w
+OPENSSL_VERS?=         0.9.8x
 
 .if empty(OPENSSL_SNAPSHOT)
 DISTNAME=      openssl-${OPENSSL_VERS}
diff -r bbcd2a48a436 -r 57603cdc0892 security/openssl/distinfo
--- a/security/openssl/distinfo Fri May 11 14:45:51 2012 +0000
+++ b/security/openssl/distinfo Fri May 11 14:56:49 2012 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.86.2.2 2012/04/24 07:47:28 sbd Exp $
+$NetBSD: distinfo,v 1.86.2.3 2012/05/11 14:56:49 tron Exp $
 
-SHA1 (openssl-0.9.8w.tar.gz) = 6dd276534f87aaca4bee679537fef3aaa6b43069
-RMD160 (openssl-0.9.8w.tar.gz) = 6904c2b85a199b8ec0262ba7d52adbbe7e8df351
-Size (openssl-0.9.8w.tar.gz) = 3782900 bytes
+SHA1 (openssl-0.9.8x.tar.gz) = 8c3be5160513c0af1e558d3f932390ecb16f59e9
+RMD160 (openssl-0.9.8x.tar.gz) = 18a805c177af1667a05104e87acbff97a420864c
+Size (openssl-0.9.8x.tar.gz) = 3782486 bytes
 SHA1 (patch-aa) = eb25505e8a745eb5ba85f857b0f9302fd5e9bda1
 SHA1 (patch-ac) = 6ff4a20440666f5c520837e10547091e1bee2208
 SHA1 (patch-ad) = bb86ac463fc4ab8b485df5f1a4fb9c13c1fc41c3