CVS commit: pkgsrc/security/openssl

["Sevan Janiyan" <sevan%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   sevan
Date:           Thu Jan  2 20:31:06 UTC 2020

Modified Files:
        pkgsrc/security/openssl: Makefile distinfo

Log Message:
Upgrade to OpenSSL 1.0.2u

Major changes between OpenSSL 1.0.2t and OpenSSL 1.0.2u [20 Dec 2019]

Fixed an an overflow bug in the x64_64 Montgomery squaring procedure used
in exponentiation with 512-bit moduli (CVE-2019-1551)


To generate a diff of this commit:
cvs rdiff -u -r1.246 -r1.247 pkgsrc/security/openssl/Makefile
cvs rdiff -u -r1.135 -r1.136 pkgsrc/security/openssl/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/openssl/Makefile
diff -u pkgsrc/security/openssl/Makefile:1.246 pkgsrc/security/openssl/Makefile:1.247
--- pkgsrc/security/openssl/Makefile:1.246      Tue Nov 26 22:22:45 2019
+++ pkgsrc/security/openssl/Makefile    Thu Jan  2 20:31:05 2020
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.246 2019/11/26 22:22:45 sevan Exp $
+# $NetBSD: Makefile,v 1.247 2020/01/02 20:31:05 sevan Exp $
 
-DISTNAME=      openssl-1.0.2t
+DISTNAME=      openssl-1.0.2u
 CATEGORIES=    security
 MASTER_SITES=  https://www.openssl.org/source/
 

Index: pkgsrc/security/openssl/distinfo
diff -u pkgsrc/security/openssl/distinfo:1.135 pkgsrc/security/openssl/distinfo:1.136
--- pkgsrc/security/openssl/distinfo:1.135      Tue Nov 26 22:22:45 2019
+++ pkgsrc/security/openssl/distinfo    Thu Jan  2 20:31:05 2020
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.135 2019/11/26 22:22:45 sevan Exp $
+$NetBSD: distinfo,v 1.136 2020/01/02 20:31:05 sevan Exp $
 
-SHA1 (openssl-1.0.2t.tar.gz) = 8ac3fd379cf8c8ef570abb51ec52a88fd526f88a
-RMD160 (openssl-1.0.2t.tar.gz) = 60fa7238a3beefb1e95d76de607d69af7198118b
-SHA512 (openssl-1.0.2t.tar.gz) = 0b88868933f42fab87e8b22449435a1091cc6e75f986aad6c173e01ad123161fcae8c226759073701bc65c9f2f0b6ce6a63a61203008ed873cfb6e484f32bc71
-Size (openssl-1.0.2t.tar.gz) = 5355422 bytes
+SHA1 (openssl-1.0.2u.tar.gz) = 740916d79ab0d209d2775277b1c6c3ec2f6502b2
+RMD160 (openssl-1.0.2u.tar.gz) = b8e7e5df9582e29fdd00bd03d47e980a39ba11ab
+SHA512 (openssl-1.0.2u.tar.gz) = c455bb309e20e2c2d47fdc5619c734d107d5c8c38c1409903ce979acc120b0d5fa0312917c0aa0d630e402d092a703d4249643f36078e8528a3cafc9dac6ab32
+Size (openssl-1.0.2u.tar.gz) = 5355412 bytes
 SHA1 (patch-Configure) = 2d963d781314276a0ee1bc531df6bc50f0f6b32b
 SHA1 (patch-Makefile.org) = d2a9295003a8b88718a328b01ff6bcbbc102ec0b
 SHA1 (patch-Makefile.shared) = 273154600c6cf0cf4de4ae16d56c5555bca5f9ad