<pre style='margin:0'>
Clemens Lang (neverpanic) pushed a commit to branch master
in repository macports-ports.
</pre>
<p><a href="https://github.com/macports/macports-ports/commit/2c1060975639c51588dd48e9e283f3e073eceb9e">https://github.com/macports/macports-ports/commit/2c1060975639c51588dd48e9e283f3e073eceb9e</a></p>
<pre style="white-space: pre; background: #F8F8F8">The following commit(s) were added to refs/heads/master by this push:
<span style='display:block; white-space:pre;color:#404040;'> new 2c10609 openssl: Backport patch for CVE-2018-0737
</span>2c10609 is described below
<span style='display:block; white-space:pre;color:#808000;'>commit 2c1060975639c51588dd48e9e283f3e073eceb9e
</span>Author: Clemens Lang <cal@macports.org>
AuthorDate: Thu Apr 19 23:33:37 2018 +0200
<span style='display:block; white-space:pre;color:#404040;'> openssl: Backport patch for CVE-2018-0737
</span><span style='display:block; white-space:pre;color:#404040;'>
</span><span style='display:block; white-space:pre;color:#404040;'> Although it is a low severity CVE, backport the patch for CVE-2018-0737
</span><span style='display:block; white-space:pre;color:#404040;'> anyway. See https://www.openssl.org/news/secadv/20180416.txt for the
</span><span style='display:block; white-space:pre;color:#404040;'> advisory.
</span><span style='display:block; white-space:pre;color:#404040;'>
</span><span style='display:block; white-space:pre;color:#404040;'> Revbump openssh and freeradius as advised in the openssl Portfile.
</span>---
devel/openssl/Portfile | 4 ++-
.../349a41da1ad88ad87825414752a8ff5fdd6a6c3f.patch | 30 ++++++++++++++++++++++
net/openssh/Portfile | 2 +-
sysutils/freeradius/Portfile | 2 +-
4 files changed, 35 insertions(+), 3 deletions(-)
<span style='display:block; white-space:pre;color:#808080;'>diff --git a/devel/openssl/Portfile b/devel/openssl/Portfile
</span><span style='display:block; white-space:pre;color:#808080;'>index 0f5bb67..1995296 100644
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>--- a/devel/openssl/Portfile
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>+++ b/devel/openssl/Portfile
</span><span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -6,6 +6,7 @@ PortGroup muniversal 1.0
</span> name openssl
epoch 1
version 1.0.2o
<span style='display:block; white-space:pre;background:#e0ffe0;'>+revision 1
</span>
# Please revbump these ports when updating OpenSSL.
# - freeradius (#43461)
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -48,7 +49,8 @@ checksums sha1 a47faaca57b47a0d9d5fb085545857cc92062691 \
</span>
patchfiles install-headers-HFS+.patch \
parallel-building.patch \
<span style='display:block; white-space:pre;background:#ffe0e0;'>- remove-duplicate-bn_print-doc.patch
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ remove-duplicate-bn_print-doc.patch \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ 349a41da1ad88ad87825414752a8ff5fdd6a6c3f.patch
</span>
configure.ccache no
configure.perl /usr/bin/perl
<span style='display:block; white-space:pre;color:#808080;'>diff --git a/devel/openssl/files/349a41da1ad88ad87825414752a8ff5fdd6a6c3f.patch b/devel/openssl/files/349a41da1ad88ad87825414752a8ff5fdd6a6c3f.patch
</span>new file mode 100644
<span style='display:block; white-space:pre;color:#808080;'>index 0000000..c40dc1c
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>--- /dev/null
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>+++ b/devel/openssl/files/349a41da1ad88ad87825414752a8ff5fdd6a6c3f.patch
</span><span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -0,0 +1,30 @@
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+From 349a41da1ad88ad87825414752a8ff5fdd6a6c3f Mon Sep 17 00:00:00 2001
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+From: Billy Brumley <bbrumley@gmail.com>
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+Date: Wed, 11 Apr 2018 10:10:58 +0300
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+Subject: [PATCH] RSA key generation: ensure BN_mod_inverse and BN_mod_exp_mont
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ both get called with BN_FLG_CONSTTIME flag set.
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+CVE-2018-0737
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+Reviewed-by: Rich Salz <rsalz@openssl.org>
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+Reviewed-by: Matt Caswell <matt@openssl.org>
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+(cherry picked from commit 6939eab03a6e23d2bd2c3f5e34fe1d48e542e787)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+Upstream-Status: Backport [https://github.com/openssl/openssl/commit/349a41da1ad88ad87825414752a8ff5fdd6a6c3f]
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+---
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ crypto/rsa/rsa_gen.c | 2 ++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ 1 file changed, 2 insertions(+)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+diff --git a/crypto/rsa/rsa_gen.c b/crypto/rsa/rsa_gen.c
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+index 9ca5dfefb70..42b89a8dfaa 100644
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+--- ./crypto/rsa/rsa_gen.c
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++++ ./crypto/rsa/rsa_gen.c
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+@@ -156,6 +156,8 @@ static int rsa_builtin_keygen(RSA *rsa, int bits, BIGNUM *e_value,
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ if (BN_copy(rsa->e, e_value) == NULL)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ goto err;
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++ BN_set_flags(rsa->p, BN_FLG_CONSTTIME);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++ BN_set_flags(rsa->q, BN_FLG_CONSTTIME);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ BN_set_flags(r2, BN_FLG_CONSTTIME);
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ /* generate p and q */
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ for (;;) {
</span><span style='display:block; white-space:pre;color:#808080;'>diff --git a/net/openssh/Portfile b/net/openssh/Portfile
</span><span style='display:block; white-space:pre;color:#808080;'>index cb0c25b..15f7adc 100644
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>--- a/net/openssh/Portfile
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>+++ b/net/openssh/Portfile
</span><span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -4,7 +4,7 @@ PortSystem 1.0
</span>
name openssh
version 7.6p1
<span style='display:block; white-space:pre;background:#ffe0e0;'>-revision 3
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+revision 4
</span> categories net
platforms darwin
maintainers nomaintainer
<span style='display:block; white-space:pre;color:#808080;'>diff --git a/sysutils/freeradius/Portfile b/sysutils/freeradius/Portfile
</span><span style='display:block; white-space:pre;color:#808080;'>index 6598fbf..7f9649d 100644
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>--- a/sysutils/freeradius/Portfile
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>+++ b/sysutils/freeradius/Portfile
</span><span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -4,7 +4,7 @@ PortSystem 1.0
</span>
name freeradius
version 2.2.4
<span style='display:block; white-space:pre;background:#ffe0e0;'>-revision 18
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+revision 19
</span> categories sysutils
maintainers nomaintainer
homepage http://www.freeradius.org/
</pre><pre style='margin:0'>
</pre>