[MacPorts] #1641: UPDATE: openssl version 0.9.7d CAN-2004-0079

[MacPorts]

#1641: UPDATE: openssl version 0.9.7d CAN-2004-0079
----------------------+--------------------
  Reporter:  dluke@…  |      Owner:  ssen@…
      Type:  update   |     Status:  closed
  Priority:  Normal   |  Milestone:
 Component:  ports    |    Version:  1.0
Resolution:  fixed    |   Keywords:
      Port:  openssl  |
----------------------+--------------------
Changes (by ryandesign@…):

 * type:  defect => update
 * port:   => openssl


Old description:

> Update openssl to version 0.9.7d because of security issue
> (http://www.openssl.org/news/
> secadv_20040317.txt - CAN-2004-0079)
>
> The advisory indicates that the vulnerability is probably limited to
> potential DOS.
>
> I'm attempting to build this on both a 10.2 and 10.3 system currently,
> the diffs below are therefore not
> fully tested.
>
> diffs inline:
> cvs server: Diffing .
> Index: Portfile
> ===============================================================
> ====
> RCS file:
> /Volumes/src/cvs/od/proj/darwinports/dports/devel/openssl/Portfile,v
> retrieving revision 1.7
> diff -u -d -b -w -r1.7 Portfile
> --- Portfile    27 Oct 2003 01:59:01 -0000      1.7
> +++ Portfile    17 Mar 2004 17:14:02 -0000
> @@ -2,8 +2,7 @@
>
>  PortSystem 1.0
>  name                   openssl
> -version                        0.9.7c
> -revision               1
> +version                        0.9.7d
>  platforms              darwin freebsd
>  categories             devel security
>  maintainers            ssen at opendarwin.org
> @@ -17,7 +16,7 @@
>  cryptography library.
>
>  master_sites           http://www.openssl.org/source/
> -checksums              md5 c54fb36218adaaaba01ef733cd88c8ec
> +checksums              md5 1b49e90fc8a75c3a507c0a624529aca5
>
>  depends_lib            lib:libz.1:zlib
>
> cvs server: Diffing files
> Index: files/patch-Makefile.org
> ===============================================================
> ====
> RCS file: /Volumes/src/cvs/od/proj/darwinports/dports/devel/openssl/files
> /patch-Makefile.org,v
> retrieving revision 1.2
> diff -u -d -b -w -r1.2 patch-Makefile.org
> --- files/patch-Makefile.org    27 Oct 2003 01:59:07 -0000      1.2
> +++ files/patch-Makefile.org    17 Mar 2004 17:14:02 -0000
> @@ -9,12 +9,3 @@
>                 -compatibility_version ${SHLIB_MAJOR}.`echo
> ${SHLIB_MINOR} | cut -d. -f1` \
>                 -install_name ${INSTALLTOP}/lib/lib$$i${SHLIB_EXT} ) ||
> exit 1; \
>         libs="-l`basename $$i${SHLIB_EXT} .dylib` $$libs"; \
> -@@ -832,7 +832,7 @@
> -               fi; \
> -       fi
> -       cp openssl.pc $(INSTALL_PREFIX)$(INSTALLTOP)/lib/pkgconfig
> --      chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/pkgconfig
> -+      chmod 755 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/pkgconfig
> -
> - install_docs:
> -       @$(PERL) $(TOP)/util/mkdir-p.pl \

New description:

 Update openssl to version 0.9.7d because of security issue
 (http://www.openssl.org/news/
 secadv_20040317.txt - CAN-2004-0079)

 The advisory indicates that the vulnerability is probably limited to
 potential DOS.

 I'm attempting to build this on both a 10.2 and 10.3 system currently, the
 diffs below are therefore not
 fully tested.

 diffs inline:
 {{{
 cvs server: Diffing .
 Index: Portfile
 ===================================================================
 RCS file:
 /Volumes/src/cvs/od/proj/darwinports/dports/devel/openssl/Portfile,v
 retrieving revision 1.7
 diff -u -d -b -w -r1.7 Portfile
 --- Portfile    27 Oct 2003 01:59:01 -0000      1.7
 +++ Portfile    17 Mar 2004 17:14:02 -0000
 @@ -2,8 +2,7 @@

  PortSystem 1.0
  name                   openssl
 -version                        0.9.7c
 -revision               1
 +version                        0.9.7d
  platforms              darwin freebsd
  categories             devel security
  maintainers            ssen at opendarwin.org
 @@ -17,7 +16,7 @@
  cryptography library.

  master_sites           http://www.openssl.org/source/
 -checksums              md5 c54fb36218adaaaba01ef733cd88c8ec
 +checksums              md5 1b49e90fc8a75c3a507c0a624529aca5

  depends_lib            lib:libz.1:zlib

 cvs server: Diffing files
 Index: files/patch-Makefile.org
 ===============================================================
 ====
 RCS file: /Volumes/src/cvs/od/proj/darwinports/dports/devel/openssl/files
 /patch-Makefile.org,v
 retrieving revision 1.2
 diff -u -d -b -w -r1.2 patch-Makefile.org
 --- files/patch-Makefile.org    27 Oct 2003 01:59:07 -0000      1.2
 +++ files/patch-Makefile.org    17 Mar 2004 17:14:02 -0000
 @@ -9,12 +9,3 @@
                 -compatibility_version ${SHLIB_MAJOR}.`echo ${SHLIB_MINOR}
 | cut -d. -f1` \
                 -install_name ${INSTALLTOP}/lib/lib$$i${SHLIB_EXT} ) ||
 exit 1; \
         libs="-l`basename $$i${SHLIB_EXT} .dylib` $$libs"; \
 -@@ -832,7 +832,7 @@
 -               fi; \
 -       fi
 -       cp openssl.pc $(INSTALL_PREFIX)$(INSTALLTOP)/lib/pkgconfig
 --      chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/pkgconfig
 -+      chmod 755 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/pkgconfig
 -
 - install_docs:
 -       @$(PERL) $(TOP)/util/mkdir-p.pl \
 }}}

--

-- 
Ticket URL: <https://trac.macports.org/ticket/1641#comment:6>
MacPorts <https://www.macports.org/>
Ports system for OS X