diff mbox series

[dunfell] openssl: Upgrade 1.1.1v -> 1.1.1w

Message ID 20231006123214.57198-1-pramanik.souravkumar@gmail.com
State Accepted, archived
Delegated to: Steve Sakoman
Headers show
Series [dunfell] openssl: Upgrade 1.1.1v -> 1.1.1w | expand

Commit Message

Sourav Pramanik Oct. 6, 2023, 12:32 p.m. UTC
From: Sourav Pramanik <sourav.pramanik@kpit.com>

https://www.openssl.org/news/openssl-1.1.1-notes.html

Major changes between OpenSSL 1.1.1v and OpenSSL 1.1.1w [11 Sep 2023]

* Fix POLY1305 MAC implementation corrupting XMM registers on Windows (CVE-2023-4807)

Signed-off-by: Sourav Kumar Pramanik <pramanik.souravkumar@gmail.com>
---
 .../openssl/{openssl_1.1.1v.bb => openssl_1.1.1w.bb}            | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-connectivity/openssl/{openssl_1.1.1v.bb => openssl_1.1.1w.bb} (98%)

Comments

Alexander Kanavin Oct. 11, 2023, 7:50 a.m. UTC | #1
Note that with this release, openssl 1.1.1 reaches end of life:

https://www.openssl.org/blog/blog/2023/09/11/eol-111/

Alex

On Fri, 6 Oct 2023 at 14:32, Sourav Kumar Pramanik
<pramanik.souravkumar@gmail.com> wrote:
>
> From: Sourav Pramanik <sourav.pramanik@kpit.com>
>
> https://www.openssl.org/news/openssl-1.1.1-notes.html
>
> Major changes between OpenSSL 1.1.1v and OpenSSL 1.1.1w [11 Sep 2023]
>
> * Fix POLY1305 MAC implementation corrupting XMM registers on Windows (CVE-2023-4807)
>
> Signed-off-by: Sourav Kumar Pramanik <pramanik.souravkumar@gmail.com>
> ---
>  .../openssl/{openssl_1.1.1v.bb => openssl_1.1.1w.bb}            | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>  rename meta/recipes-connectivity/openssl/{openssl_1.1.1v.bb => openssl_1.1.1w.bb} (98%)
>
> diff --git a/meta/recipes-connectivity/openssl/openssl_1.1.1v.bb b/meta/recipes-connectivity/openssl/openssl_1.1.1w.bb
> similarity index 98%
> rename from meta/recipes-connectivity/openssl/openssl_1.1.1v.bb
> rename to meta/recipes-connectivity/openssl/openssl_1.1.1w.bb
> index d1222dc470..8a53b06862 100644
> --- a/meta/recipes-connectivity/openssl/openssl_1.1.1v.bb
> +++ b/meta/recipes-connectivity/openssl/openssl_1.1.1w.bb
> @@ -26,7 +26,7 @@ SRC_URI_append_class-nativesdk = " \
>             file://environment.d-openssl.sh \
>             "
>
> -SRC_URI[sha256sum] = "d6697e2871e77238460402e9362d47d18382b15ef9f246aba6c7bd780d38a6b0"
> +SRC_URI[sha256sum] = "cf3098950cb4d853ad95c0841f1f9c6d3dc102dccfcacd521d93925208b76ac8"
>
>  inherit lib_package multilib_header multilib_script ptest
>  MULTILIB_SCRIPTS = "${PN}-bin:${bindir}/c_rehash"
> --
> 2.25.1
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#188763): https://lists.openembedded.org/g/openembedded-core/message/188763
> Mute This Topic: https://lists.openembedded.org/mt/101796386/1686489
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [alex.kanavin@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
Ranjitsinh Rathod Oct. 11, 2023, 8:04 a.m. UTC | #2
On Wed, Oct 11, 2023 at 01:21 PM, Alexander Kanavin wrote:

> 
> Note that with this release, openssl 1.1.1 reaches end of life:

Yes, but this we can take in the dunfell, right?
Alexander Kanavin Oct. 11, 2023, 8:13 a.m. UTC | #3
Absolutely, yes. It's a proper upstream release.
But the EOL notice with the link should be in the commit message.
Perhaps you can send a v2?

Alex

On Wed, 11 Oct 2023 at 10:04, Ranjitsinh Rathod via
lists.openembedded.org
<ranjitsinh.rathod=kpit.com@lists.openembedded.org> wrote:
>
> On Wed, Oct 11, 2023 at 01:21 PM, Alexander Kanavin wrote:
>
> Note that with this release, openssl 1.1.1 reaches end of life:
>
> Yes, but this we can take in the dunfell, right?
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#188945): https://lists.openembedded.org/g/openembedded-core/message/188945
> Mute This Topic: https://lists.openembedded.org/mt/101796386/1686489
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [alex.kanavin@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
diff mbox series

Patch

diff --git a/meta/recipes-connectivity/openssl/openssl_1.1.1v.bb b/meta/recipes-connectivity/openssl/openssl_1.1.1w.bb
similarity index 98%
rename from meta/recipes-connectivity/openssl/openssl_1.1.1v.bb
rename to meta/recipes-connectivity/openssl/openssl_1.1.1w.bb
index d1222dc470..8a53b06862 100644
--- a/meta/recipes-connectivity/openssl/openssl_1.1.1v.bb
+++ b/meta/recipes-connectivity/openssl/openssl_1.1.1w.bb
@@ -26,7 +26,7 @@  SRC_URI_append_class-nativesdk = " \
            file://environment.d-openssl.sh \
            "
 
-SRC_URI[sha256sum] = "d6697e2871e77238460402e9362d47d18382b15ef9f246aba6c7bd780d38a6b0"
+SRC_URI[sha256sum] = "cf3098950cb4d853ad95c0841f1f9c6d3dc102dccfcacd521d93925208b76ac8"
 
 inherit lib_package multilib_header multilib_script ptest
 MULTILIB_SCRIPTS = "${PN}-bin:${bindir}/c_rehash"