diff --git a/hobble-openssl b/hobble-openssl index d00a843..c95cf2d 100755 --- a/hobble-openssl +++ b/hobble-openssl @@ -17,7 +17,7 @@ for c in `find crypto/evp -name "*_r5.c" -o -name "*_i.c" -o -name "*_mdc2.c" `; echo Destroying $c > $c done -for h in `find include crypto ssl apps test -name "*.h"` ; do +for h in `find crypto ssl apps test -name "*.h"` ; do echo Removing IDEA, MDC2, and RC5 references from $h cat $h | \ awk 'BEGIN {ech=1;} \ diff --git a/openssl.spec b/openssl.spec index 51807db..eb92e11 100644 --- a/openssl.spec +++ b/openssl.spec @@ -5,7 +5,7 @@ Summary: Secure Sockets Layer Toolkit Name: openssl Version: 0.9.6 -Release: 8 +Release: 9 Source: openssl-%{version}-usa.tar.bz2 Source1: hobble-openssl Source2: Makefile.certificate @@ -26,6 +26,8 @@ Patch9: openssl-crt.patch Patch10: openssl-setugid.patch Patch11: openssl-zero-premaster.patch Patch12: openssl-0.9.6-memmove.patch +Patch13: openssl096a-prng.patch +Patch14: openssl096a-prng-2.patch License: BSDish Group: System Environment/Libraries URL: http://www.openssl.org/ @@ -95,6 +97,12 @@ popd %patch10 -p1 -b .setugid %patch11 -p1 -b .zero-premaster %patch12 -p1 -b .memmove +pushd crypto/rand +%patch13 -p0 -b .rand +popd +pushd doc/crypto +%patch14 -p0 -b .rand-2 +popd chmod 644 FAQ LICENSE CHANGES NEWS INSTALL README chmod 644 doc/README doc/c-indentation.el doc/openssl.txt @@ -271,6 +279,9 @@ popd %postun -p /sbin/ldconfig %changelog +* Wed Jul 11 2001 Nalin Dahyabhai +- add patches to fix PRNG flaws, supplied by Bodo Moeller and the OpenSSL Group + * Fri Jun 1 2001 Nalin Dahyabhai - change two memcpy() calls to memmove()