From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Wed, 12 Feb 2025 21:31:06 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1tiJNy-001ZYI-3B for lore@lore.pengutronix.de; Wed, 12 Feb 2025 21:31:06 +0100 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1tiJNy-0006Qg-5a; Wed, 12 Feb 2025 21:31:06 +0100 Received: from mail-dbaeur03on2134.outbound.protection.outlook.com ([40.107.104.134] helo=EUR03-DBA-obe.outbound.protection.outlook.com) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1tiJNo-0006Ph-Ln for ptxdist@pengutronix.de; Wed, 12 Feb 2025 21:30:57 +0100 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=tZSjNtmuwK7SNSVhOASjpvDLYrpZRGG+qKq4LCXymkq5DALNh/hMc76h5/8tSFkIgeftDDfxN04kaIJ5Vv9PxJGJwPvIe1O5tEFmQqIPWmioTnt5iMmLzVfKTiL6UG0hrg63LpvbSFg3GcTHO61uU3xKKpV1GMB/KTAoFvyNQrJ1voaruU/SlCXzkQbkpqgbtmb/OlWD3iUKJPUF+n8RSFQprz/4sLbox7j1PVoiMOaHsnGqGm9rE+BEHyU64XQ0Es4gfLC6CmBownuvwxbiGmvS6mPQObZhmfg+Hq1TAcwxuxfyxYBmeGCCUwfDyYn+ItA2Avkch2UcP1oQHTCJUA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=YJ99Ca1gTEKgN2q/9RcuTSNuaD6BPR7OnVvMixNhwyg=; b=kOfBu/oKUJ53WCZ/jcPmkFqcxUvzfnJVsh9HhwWUPzbTL/JvbSmppvMJ6MLQwlYI+ND+HfRoN8WmobVbWlYN+ux8aLwfCvKFarUf/JQJhID/hw2hhHFF05d96pU9Uxq01yvdolakQDen908GD5sYRxy4FZKs24Io3DnxCoQ26rnQq7lvWIKczDgwyKTV8L05n+NIMnCZ5b4tePeng3AUVwYdtBGmSNz9m7SYvW3Cqjgaq3D860WjsP6+cttXAGkshFX+Lm4hkfRuN13RXoe/xXOGT65oVxPACODOWxo+OB0oagF605xs4lfDI1/29u/9tJq+hiepEsnHisMRxUdMYA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=YJ99Ca1gTEKgN2q/9RcuTSNuaD6BPR7OnVvMixNhwyg=; b=Nh1X2EEVAhiaudUGqIuEhVzSbn5m24XnrHT00ByMv/axqcvRAkMUvUcPdOlolPCuzQAH2cPAK0iqj8zCiFQrli1V56MtDGUmkOP1ajklJfwju5Pl27mkiZhbcmco/jtkccp3czyApRSlp0y5r7lUXTQPmzeTRXY2QYrb5j3jhwc= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=t2data.com; Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by DB9P251MB0689.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:335::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8445.13; Wed, 12 Feb 2025 20:30:54 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::fe8d:f825:5b29:2903]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::fe8d:f825:5b29:2903%4]) with mapi id 15.20.8422.015; Wed, 12 Feb 2025 20:30:54 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Wed, 12 Feb 2025 21:30:48 +0100 Message-Id: <20250212203048.2967157-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.34.1 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GV2PEPF00007577.SWEP280.PROD.OUTLOOK.COM (2603:10a6:158:401::3f8) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|DB9P251MB0689:EE_ X-MS-Office365-Filtering-Correlation-Id: 01e2a335-7f62-4fc5-009e-08dd4ba42664 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|1800799024|52116014|376014|366016|38350700014; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?sup7hvrTePy8UYxKDRJ98jGhFhSL0uPLUzcRk+PD7ArYuYxo1gxpTHrbA8Uw?= =?us-ascii?Q?aZQPpOW0pHp6urpt24GURMpqoW3Zqb/xmy23NsxnfN9YsLr30V+HCW6c283q?= =?us-ascii?Q?j4lTHsCR6yNi6WfNf/SQW0Wvklw9snZY/RVKmwV1impbsvX1xT334EeIgSWK?= =?us-ascii?Q?DkZ3tRAJLkbZ9AjsKyB+gxiPcxfXzNYVObX54g9VIt3+MYE+lw1m0imJZTDD?= =?us-ascii?Q?q2Wkx6RHlkJFdGIEunAxZjmJndAR1TrLTzj+JGf2nUyCwHsJ3AIMcRHEVnc8?= =?us-ascii?Q?weOtloGevFztTQgjq6NFyML2iHr7RBR35las2iepmtBkc0SyVO+6/8E8kT7b?= =?us-ascii?Q?YzcAo+Db2VUqu5elWqEyca/xcUEDHeV8cVwT9yVuXdAZkldfBY6ztp8qCJda?= =?us-ascii?Q?oN4zzFG/CqUby41uqoPm7Q1NniMxIil4a0kJ9+V8hFWnItfXTPafRFisu6Za?= =?us-ascii?Q?rTRFU1w7x8q/JMYaEJlbg/qSnHFl4DJzR47f/Lz4a3eabqGVPV50wCEmfdwD?= =?us-ascii?Q?sn9aywURJVmmZtqDRKCuKtM0kaBn7WgIvEIpyl1wKgp/sYwUgrJqHiuU/NME?= =?us-ascii?Q?TZkx6azjFcF5GFLB0oCbI7P6YI5jWh6iJInTQPzaD0Cn8G5majap4pQk0Cuv?= =?us-ascii?Q?aHickzeaS89dndBnU2l+h9VQ96946DTGYEH6mRrgPhulRLnnLVqg89zULmAU?= =?us-ascii?Q?wyZzHTCz7IETJNxDXtFFrQrxWHyaiQtR8Cm1H9WFHMkZp0bT6ALlcqhkoYZg?= =?us-ascii?Q?dBzEEvfqXqfVOm54ebj7fcnS5huHq2yGiwN/Wmv4oxdUsBZ0qcxH0hlpaaT8?= =?us-ascii?Q?Pn22jCykZW2DPaJ397mit1OUQ4qAg7AO59XKuANasakksxhcMMTiq+93165W?= =?us-ascii?Q?Mh0YvU53Mg8HP7LULci164WojXMLzaFGJ7FRSfqENsswKTvGFbqTnyCLvyCr?= =?us-ascii?Q?xYIO0MiOKJ6LJkD0nnCOexorE0n5qQwakJoCOKbz537iE2/mpPvM6p4KRDUU?= =?us-ascii?Q?kxo2OCHy0jaQmFv54Cb44E6/QeZ1DcmTo720CJNh37KlD9FxVfy8cZrTmC58?= =?us-ascii?Q?J8BrEL0CFs+jJW35rGFvvuThOtk+uMK5wEyiv5/0EoMhjULIthUxBXzfQpZl?= =?us-ascii?Q?7Gi7ShMEsP4rRqyEDavG7Ih6HkVJS3qDLF8W2izn8m5SaKrgBLigCKRGrpXC?= =?us-ascii?Q?D0v8YbitUC6ERx9Yvk8cugp/OjVsS4uRiUKvdYwMM1RkIK4+YVqd+HcdXIGS?= =?us-ascii?Q?SwncVBG5Dwg91tXnnxMDGmPKwSSw55ZnLM76ws9sa61w3E8o/t9EfZFpooaa?= =?us-ascii?Q?lS7aeRPxOfbanbwBSbNEDd36NoFG5Sk5fPAO4lcqJfBcK4LFAF+VRk4W4pV0?= =?us-ascii?Q?e3LYbCMxN08jhMqr86/y1z2XxTZ/2t+KcXad3lANDWH1T1WYPRbXGZoo1NIt?= =?us-ascii?Q?U8BgIUp5wpiWnVhJcfQZxFEUTth/eW6Q?= X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(1800799024)(52116014)(376014)(366016)(38350700014); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?NLGKfP3J/on+NLrknHxgAaMXW/8F+8ItQuwJ3DkffeZcqlc70XsFAJa1HeFB?= =?us-ascii?Q?hVCjH1M9yiJiIm6UNd4YvZdviz2FcTnoFe83jvqO7Jtxvja5tt8ZEtuWCKE2?= =?us-ascii?Q?M/WbYjClfQJkbvbnF6ZSNqtN2ObcD1G7GsUErIkaKxbHbTDfiRGh+Hywg01e?= =?us-ascii?Q?UxRW81mYRJFep3XLJBcP1Ub9PnxjWyBTZzrYgpYESHB9baIZabsJYN0XPw6R?= =?us-ascii?Q?JDdHzzN8zlYXBFsw7XJ/2osSpYyDbIlk1MNq7O9II+oE9gyP3QhisC0p7Ple?= =?us-ascii?Q?eapfX6RYq2ZVZo/E2FTTTzb26nABDnQLEZUlVUXsPF8d0ash2U2VWllGvKo/?= =?us-ascii?Q?cp5HjllfEb6hBZfMiSkJCe8oB2cdawJDVwOoj3vH9Vzc0dBXjXk8LdZswRqZ?= =?us-ascii?Q?X4xJjzRGjbPm4cIqyKuReaXU9thlY8Y3IqrUdxFuYDYq+B+E2+PZmOVaJYKp?= =?us-ascii?Q?nbKXDjWe0atpVfAK08WBJG78EC+GqCOCAN47v+qqzAZ2NwvHWGLzNvwuO9ts?= =?us-ascii?Q?GdrEkN+Ki/yEzIN9mBxcQrm6DQXZBf0NSD6YJcp8iF1a3V8VFfBouFmae6di?= =?us-ascii?Q?USuM4yMoOlKl6e8ANI/kEhPB4fbflc4zV/UZnj//HrNJIST48tKBU2P5AgcZ?= =?us-ascii?Q?R8HAOVxpc+KBbvl4LYj0E9eks0lBLomTEwXgllRt2BRJg+wX3NdT5eDiG9xF?= =?us-ascii?Q?21ECynzDv68+JBOth5sv1YB7yQeTbVghRbQKzDfThE5S7heiwVEfqidz8vIY?= =?us-ascii?Q?dQZjWPdT0V6uc2gH6QTT+CNZJ0MN30E6IZtXywR6UCRAZMiXbxNHNxhvtmcw?= =?us-ascii?Q?EP5c6SIHCVLYFmCrghntboKgYRZPWCj0bGD51q5bdN5JoUbChGML2qRDXxRI?= =?us-ascii?Q?BkWKmdEfoUIn0AZ/N3weGK6nKb8hvXRJ+q3xKhKAtgo+LNCvncchSVa4nARx?= =?us-ascii?Q?KZP6C9R8SlWxmevrsJuH43bKv4UWc8Q9U0wvB6sS5rro1D0nklIRVIAdxdlb?= =?us-ascii?Q?ar056ZMCPXcWv7eZRB/COE5JtSNvMMcSJ1TDDz+YtB46VVonXL7AsEU8hheT?= =?us-ascii?Q?acC4QsSqJG1hQFZ+9azSy3sgntx2x5kKJ4ATw/aK13wo7AhtfhlrjvgSvwPO?= =?us-ascii?Q?ccvB5du53+6iH3xBuo0+wfL2zLIHKfo709eMhwJHzh7uaXxSdB/dMpKIJFX3?= =?us-ascii?Q?F7KNcvh1RHVROY+T2sQKbeHlSEb6hvhS9ev0osXCn+HppOLELO18pysBe6IQ?= =?us-ascii?Q?RftTzBwqAQBpyoAubwrIdHZg2Etm156gFxKbMhE137NcQeo3OafWnGefPtef?= =?us-ascii?Q?CSndElR1xa8Ox+K4usYQwteczF1G9mda0dYFWUhtQ5YsWWAi8luJJmHwyY5N?= =?us-ascii?Q?uc5onR3/TgOV0fuiZxi8QpZImfveQ6yKQuUJ1ecEL1FUVX6+zokDcY8hHPc6?= =?us-ascii?Q?CmgXyszc7ZNu+uFPsI6RGwBETlVCfxlHzJXsp5dNG+2p7rWy3ZTzXbeGKtdY?= =?us-ascii?Q?uEPot8tAv0QnJ6S7qXj6BIDCcM6Q02f36GTHJPvklb/uji5flALBqbkzRPX2?= =?us-ascii?Q?pKo0MKfWGBN60NrwZB+t6HH64R2VQbSzMOJ7hhjPH0q/sOJ89ZFgo1SqAp0N?= =?us-ascii?Q?Ig=3D=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 01e2a335-7f62-4fc5-009e-08dd4ba42664 X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Feb 2025 20:30:54.8304 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: UJNY5LjZsSKudq7dZBS02oQoOPHuZkEbnlHBqFs7TjQcRjxLDKOPwkwttLFhIYmTl6DoJrdVAKh0i6rufvJ0JZV44F4DFG3serXzOSVzKf4= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9P251MB0689 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_MSPIKE_H2,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED, RCVD_IN_VALIDITY_RPBL_BLOCKED,SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] openssl: Version bump. 3.4.0 -> 3.4.1 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Security fix release. Plugs CVEs CVE-2024-12797: RFC7250 handshakes with unauthenticated servers don't abort as expected. CVE-2024-13176: Timing side-channel in ECDSA signature computation. * Forward patches. Applies cleanly. Signed-off-by: Christian Melki --- .../0001-debian-targets.patch | 0 patches/{openssl-3.4.0 => openssl-3.4.1}/0002-pic.patch | 0 ...Configure-allow-to-enable-ktls-if-target-does-not-st.patch | 0 .../0004-conf-Serialize-allocation-free-of-ssl_names.patch | 0 ...Configure-drop-fzero-call-used-regs-used-gpr-from-De.patch | 0 patches/{openssl-3.4.0 => openssl-3.4.1}/series | 0 rules/openssl.make | 4 ++-- 7 files changed, 2 insertions(+), 2 deletions(-) rename patches/{openssl-3.4.0 => openssl-3.4.1}/0001-debian-targets.patch (100%) rename patches/{openssl-3.4.0 => openssl-3.4.1}/0002-pic.patch (100%) rename patches/{openssl-3.4.0 => openssl-3.4.1}/0003-Configure-allow-to-enable-ktls-if-target-does-not-st.patch (100%) rename patches/{openssl-3.4.0 => openssl-3.4.1}/0004-conf-Serialize-allocation-free-of-ssl_names.patch (100%) rename patches/{openssl-3.4.0 => openssl-3.4.1}/0005-Configure-drop-fzero-call-used-regs-used-gpr-from-De.patch (100%) rename patches/{openssl-3.4.0 => openssl-3.4.1}/series (100%) diff --git a/patches/openssl-3.4.0/0001-debian-targets.patch b/patches/openssl-3.4.1/0001-debian-targets.patch similarity index 100% rename from patches/openssl-3.4.0/0001-debian-targets.patch rename to patches/openssl-3.4.1/0001-debian-targets.patch diff --git a/patches/openssl-3.4.0/0002-pic.patch b/patches/openssl-3.4.1/0002-pic.patch similarity index 100% rename from patches/openssl-3.4.0/0002-pic.patch rename to patches/openssl-3.4.1/0002-pic.patch diff --git a/patches/openssl-3.4.0/0003-Configure-allow-to-enable-ktls-if-target-does-not-st.patch b/patches/openssl-3.4.1/0003-Configure-allow-to-enable-ktls-if-target-does-not-st.patch similarity index 100% rename from patches/openssl-3.4.0/0003-Configure-allow-to-enable-ktls-if-target-does-not-st.patch rename to patches/openssl-3.4.1/0003-Configure-allow-to-enable-ktls-if-target-does-not-st.patch diff --git a/patches/openssl-3.4.0/0004-conf-Serialize-allocation-free-of-ssl_names.patch b/patches/openssl-3.4.1/0004-conf-Serialize-allocation-free-of-ssl_names.patch similarity index 100% rename from patches/openssl-3.4.0/0004-conf-Serialize-allocation-free-of-ssl_names.patch rename to patches/openssl-3.4.1/0004-conf-Serialize-allocation-free-of-ssl_names.patch diff --git a/patches/openssl-3.4.0/0005-Configure-drop-fzero-call-used-regs-used-gpr-from-De.patch b/patches/openssl-3.4.1/0005-Configure-drop-fzero-call-used-regs-used-gpr-from-De.patch similarity index 100% rename from patches/openssl-3.4.0/0005-Configure-drop-fzero-call-used-regs-used-gpr-from-De.patch rename to patches/openssl-3.4.1/0005-Configure-drop-fzero-call-used-regs-used-gpr-from-De.patch diff --git a/patches/openssl-3.4.0/series b/patches/openssl-3.4.1/series similarity index 100% rename from patches/openssl-3.4.0/series rename to patches/openssl-3.4.1/series diff --git a/rules/openssl.make b/rules/openssl.make index 309816b99..7ff3f8086 100644 --- a/rules/openssl.make +++ b/rules/openssl.make @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_OPENSSL) += openssl # # Paths and names # -OPENSSL_VERSION := 3.4.0 -OPENSSL_MD5 := 34733f7be2d60ecd8bd9ddb796e182af +OPENSSL_VERSION := 3.4.1 +OPENSSL_MD5 := fb7a747ac6793a7ad7118eaba45db379 OPENSSL := openssl-$(OPENSSL_VERSION) OPENSSL_SUFFIX := tar.gz OPENSSL_URL := \ -- 2.34.1