[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#823609: marked as done (jessie-pu: package openssl/1.0.1t-1+deb8u2)

Your message dated Sat, 04 Jun 2016 14:57:25 +0100
with message-id <1465048645.7545.11.camel@adam-barratt.org.uk>
and subject line Closing bugs for fixes included in 8.5
has caused the Debian Bug report #823609,
regarding jessie-pu: package openssl/1.0.1t-1+deb8u2
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
823609: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823609
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: release.debian.org
Tags: jessie
User: release.debian.org@packages.debian.org
Usertags: pu

Hi,

So I've prepared an update for jessie with version
1.0.1t-1+deb8u1.   This are the changes:
--- debian/changelog     2016-05-06 15:36:05.976438113 +0200
+++ debian/changelog      2016-05-06 15:56:17.562695936 +0200
@@ -1,3 +1,15 @@
+openssl (1.0.1t-1+deb8u1) jessie; urgency=medium
+
+  [ Sebastian Andrzej Siewior ]
+  * Update to 1.0.1t stable release (drop applied patches and refresh existing
+    ones).
+    - Use alternate trust chains part of 1.0.1n (Closes: #774882).
+    - Use correct digest when exporting keying material (Closes: #807057)
+    - Fix CVE-2015-3197 (not affected, SSLv2 disabled)
+    - Fix CVE-2015-1793 (1.0.1n+ is affected and last upload was k)
+
+ -- Kurt Roeckx <kurt@roeckx.be>  Fri, 06 May 2016 15:56:09 +0200
+
 openssl (1.0.1k-3+deb8u5) jessie-security; urgency=medium

   * Fix CVE-2016-2105
--- debian/rules 2014-10-15 19:11:07.097579808 +0200
+++ debian/rules  2016-05-06 14:16:42.757075129 +0200
@@ -50,6 +50,7 @@
 #      perl util/ssldir.pl /usr/lib/ssl
 #      chmod +x debian/libtool
        ./Configure no-shared $(CONFARGS) debian-$(DEB_HOST_ARCH)
+       make depend
        make -f Makefile all
        $(MAKE_TEST)
        mv libcrypto.a libcrypto.static
@@ -100,6 +101,7 @@
        rm -f test/asn1test test/wp_test test/srptest test/jpaketest
        rm -f certs/demo/*.0
        rm -rf crypto/aes/aes-armv4.S crypto/bn/armv4-gf2m.S crypto/modes/ghash-armv4.S crypto/sha/*.S
+       find . -type l -exec rm '{}' \;
        dh_clean

 install: build


The patches in debian/patches have whitespace changes, and for the
rest it removes a whole bunch of patches.


Kurt

--- End Message ---
--- Begin Message --- 
Version: 8.5

Hi,

The fixes referred to by each of these bugs were included in today's 8.5
point release.

Regards,

Adam

--- End Message ---
Reply to: