Changeset 0e7a9e9

Timestamp:

11/03/2017 07:27:23 PM (6 years ago)

Author:

Ken Moffat <ken@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, kea, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, perl-modules, plabs/python-mods, qt5new, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

e46947f

Parents:

63d9d4f

Message:

openssl-1.1.0g and 1.0.2m

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@19428 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:

• general.ent (modified) (1 diff)
• introduction/welcome/changelog.xml (modified) (4 diffs)
• packages.ent (modified) (1 diff)
• postlfs/security/openssl.xml (modified) (1 diff)
• postlfs/security/openssl10.xml (modified) (3 diffs)

general.ent

@@ -1 +1 @@
 <!-- $LastChangedBy$ $Date$ -->
 
-<!ENTITY day          "30">                   <!-- Always 2 digits -->
-<!ENTITY month        "10">                   <!-- Always 2 digits -->
+<!ENTITY day          "03">                   <!-- Always 2 digits -->
+<!ENTITY month        "11">                   <!-- Always 2 digits -->
 <!ENTITY year         "2017">
 <!ENTITY copyrightdate "2001-&year;">
 <!ENTITY copyholder   "The BLFS Development Team">
 <!ENTITY version      "&year;-&month;-&day;">
-<!ENTITY releasedate  "October 30th, &year;">
+<!ENTITY releasedate  "November 3rd, &year;">
 <!ENTITY pubdate      "&year;-&month;-&day;"> <!-- metadata req. by TLDP -->
 <!ENTITY blfs-version "svn">                  <!-- svn|[release #] -->

introduction/welcome/changelog.xml

@@ -43 +43 @@
 -->
     <listitem>
+      <para>November 3rd, 2017</para>
+      <itemizedlist>
+        <listitem>
+          <para>[ken] - Update to openssl-1.1.0g and openssl-1.0.2m
+          (security fixes). Fixes
+          <ulink url="&blfs-ticket-root;9979">#9979</ulink>.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>October 30th, 2017</para>
       <itemizedlist>
@@ -793 +804 @@
 
     <listitem>
-      <para>Octobber 6th, 2017</para>
+      <para>October 6th, 2017</para>
       <itemizedlist>
         <listitem>
@@ -881 +892 @@
 
     <listitem>
-      <para>Octobber 3rd, 2017</para>
+      <para>October 3rd, 2017</para>
       <itemizedlist>
         <listitem>
@@ -903 +914 @@
 
     <listitem>
-      <para>Octobber 1st, 2017</para>
+      <para>October 1st, 2017</para>
       <itemizedlist>
         <listitem>

packages.ent

@@ -37 +37 @@
 
 <!ENTITY openssh-version              "7.6p1">
-<!ENTITY openssl-version              "1.1.0f">
-<!ENTITY openssl10-version            "1.0.2l">
+<!ENTITY openssl-version              "1.1.0g">
+<!ENTITY openssl10-version            "1.0.2m">
 <!ENTITY p11-kit-version              "0.23.9">
 <!ENTITY polkit-version               "0.113+git_2919920+js38">

postlfs/security/openssl.xml

@@ -9 +9 @@
   <!ENTITY openssl-download-ftp
            "ftp://openssl.org/source/openssl-&openssl-version;.tar.gz">
-  <!ENTITY openssl-md5sum        "7b521dea79ab159e8ec879d2333369fa">
-  <!ENTITY openssl-size          "5.1 MB">
-  <!ENTITY openssl-buildsize     "70 MB (with tests)">
+  <!ENTITY openssl-md5sum        "ba5f1b8b835b88cadbce9b35ed9531a6">
+  <!ENTITY openssl-size          "5.2 MB">
+  <!ENTITY openssl-buildsize     "73 MB (with tests)">
   <!ENTITY openssl-time          "1.5 SBU (with tests)">
 ]>

postlfs/security/openssl10.xml

@@ -9 +9 @@
   <!ENTITY openssl10-download-ftp
            "ftp://openssl.org/source/openssl-&openssl10-version;.tar.gz">
-  <!ENTITY openssl10-md5sum        "f85123cd390e864dfbe517e7616e6566">
+  <!ENTITY openssl10-md5sum        "10e9e37f492094b9ef296f68f24a7666">
   <!ENTITY openssl10-size          "5.2 MB">
-  <!ENTITY openssl10-buildsize     "58 MB (with tests)">
-  <!ENTITY openssl10-time          "1.6 SBU (with tests)">
+  <!ENTITY openssl10-buildsize     "72 MB (with tests)">
+  <!ENTITY openssl10-time          "1.1 SBU (with tests)">
 ]>
 
@@ -134 +134 @@
 <screen role="root"><userinput>make INSTALL_PREFIX=$PWD/Dest install_sw                      &amp;&amp;
 
+rm -rf /usr/lib/openssl-1.0                                   &amp;&amp;
 install -vdm755                   /usr/lib/openssl-1.0        &amp;&amp;
 cp -Rv Dest/usr/lib/openssl-1.0/* /usr/lib/openssl-1.0        &amp;&amp;
@@ -160 +161 @@
       compression/decompression functionality using the
       <filename class="libraryfile">libz</filename> library.
+    </para>
+
+    <para>
+      <parameter>rm -rf /usr/lib/openssl-1.0</parameter>: This will do
+      nothing on a first install, but enables a later update. During the
+      install the libraries are moved and replaced by symlinks. If you later
+      upgrade to a future release of <application>openssl-1.0.2</application>
+      to fix newly discovered vulnerabilities, without this command the move
+      would fail because the symlinks mean the source and destination files
+      are identical.
     </para>