diff options
| author | A. Wilcox <AWilcox@Wilcox-Tech.com> | 2018-09-06 15:44:36 +0000 |
|---|---|---|
| committer | A. Wilcox <AWilcox@Wilcox-Tech.com> | 2018-09-06 15:44:36 +0000 |
| commit | ed5eb83d3fbc11bbb0666d0712b952e8fba76e29 (patch) | |
| tree | c8a9381ffb4068a8ff60dab27fe4684ae70e3f4b /system/openssl/3001-CVE-2018-0737.patch | |
| parent | 64c09163aff7ed2e5b2d47b0525eea1331db1d1a (diff) | |
| download | packages-ed5eb83d3fbc11bbb0666d0712b952e8fba76e29.tar.gz packages-ed5eb83d3fbc11bbb0666d0712b952e8fba76e29.tar.bz2 packages-ed5eb83d3fbc11bbb0666d0712b952e8fba76e29.tar.xz packages-ed5eb83d3fbc11bbb0666d0712b952e8fba76e29.zip | |
system/openssl: bump to 1.0.2p
Diffstat (limited to 'system/openssl/3001-CVE-2018-0737.patch')
| -rw-r--r-- | system/openssl/3001-CVE-2018-0737.patch | 28 |
1 files changed, 0 insertions, 28 deletions
diff --git a/system/openssl/3001-CVE-2018-0737.patch b/system/openssl/3001-CVE-2018-0737.patch deleted file mode 100644 index 162dc3d7f..000000000 --- a/system/openssl/3001-CVE-2018-0737.patch +++ /dev/null @@ -1,28 +0,0 @@ -From 349a41da1ad88ad87825414752a8ff5fdd6a6c3f Mon Sep 17 00:00:00 2001 -From: Billy Brumley <bbrumley@gmail.com> -Date: Wed, 11 Apr 2018 10:10:58 +0300 -Subject: [PATCH] RSA key generation: ensure BN_mod_inverse and BN_mod_exp_mont - both get called with BN_FLG_CONSTTIME flag set. - -CVE-2018-0737 - -Reviewed-by: Rich Salz <rsalz@openssl.org> -Reviewed-by: Matt Caswell <matt@openssl.org> -(cherry picked from commit 6939eab03a6e23d2bd2c3f5e34fe1d48e542e787) ---- - crypto/rsa/rsa_gen.c | 2 ++ - 1 file changed, 2 insertions(+) - -diff --git a/crypto/rsa/rsa_gen.c b/crypto/rsa/rsa_gen.c -index 9ca5dfefb70..42b89a8dfaa 100644 ---- a/crypto/rsa/rsa_gen.c -+++ b/crypto/rsa/rsa_gen.c -@@ -156,6 +156,8 @@ static int rsa_builtin_keygen(RSA *rsa, int bits, BIGNUM *e_value, - if (BN_copy(rsa->e, e_value) == NULL) - goto err; - -+ BN_set_flags(rsa->p, BN_FLG_CONSTTIME); -+ BN_set_flags(rsa->q, BN_FLG_CONSTTIME); - BN_set_flags(r2, BN_FLG_CONSTTIME); - /* generate p and q */ - for (;;) { |