Skip to content

openssl: Fix CVE-2023-50782 affecting python-cryptography #9209

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jcamposeco merged 7 commits into from
Jun 5, 2024
Merged

openssl: Fix CVE-2023-50782 affecting python-cryptography #9209

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
e3521f0
Fix CVE-2023-50782
jcamposeco May 23, 2024
cccfc10
Add EOL
jcamposeco May 23, 2024
634f7e9
Address comments in the review and update manifests
jcamposeco May 28, 2024
eed8d6b
Restoring patch according to internal discussions
jcamposeco Jun 4, 2024
b9fecb1
Merge branch 'juan/cve-2023-50782' of github.com:microsoft/CBL-Marine…
jcamposeco Jun 4, 2024
8ebafb2
restoring file name
jcamposeco Jun 4, 2024
a0f82c0
Merge branch 'fasttrack/2.0' into juan/cve-2023-50782
jcamposeco Jun 5, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1,141 changes: 1,141 additions & 0 deletions SPECS/openssl/openssl-1.1.1-pkcs1-implicit-rejection.patch
View file
Open in desktop

Large diffs are not rendered by default.

9 changes: 7 additions & 2 deletions SPECS/openssl/openssl.spec
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@
Summary: Utilities from the general purpose cryptography library with TLS implementation
Name: openssl
Version: 1.1.1k
Release: 30%{?dist}
Release: 31%{?dist}
Comment thread
jcamposeco marked this conversation as resolved.
Comment thread
jcamposeco marked this conversation as resolved.
License: OpenSSL
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -61,6 +61,7 @@ Patch37: CVE-2023-3817.patch
Patch38: openssl-1.1.1-improve-safety-of-DH.patch
Patch39: openssl-1.1.1-add-null-checks-where-contentinfo-data-can-be-null.patch
Patch40: openssl-1.1.1-Fix-unconstrained-session-cache-growth-in-TLSv1.3.patch
Patch41: openssl-1.1.1-pkcs1-implicit-rejection.patch
Comment thread
jcamposeco marked this conversation as resolved.
BuildRequires: perl-Test-Warnings
BuildRequires: perl-Text-Template
BuildRequires: perl(FindBin)
Expand Down Expand Up @@ -174,6 +175,7 @@ cp %{SOURCE4} test/
%patch38 -p1
%patch39 -p1
%patch40 -p1
%patch41 -p1

%build
# Add -Wa,--noexecstack here so that libcrypto's assembler modules will be
Expand Down Expand Up @@ -363,8 +365,11 @@ rm -f %{buildroot}%{_sysconfdir}/pki/tls/ct_log_list.cnf.dist
%postun libs -p /sbin/ldconfig

%changelog
* Thu May 23 2024 Juan Camposeco <juan.camposeco@gmail.com> - 1.1.1k-31
- Implicit rejection of PKCS#1 v1.5 (CVE-2023-50782)

* Fri Apr 19 2024 Tobias Brick <tobaisb@microsoft.com> - 1.1.1k-30
* Fix unconstrained session cache growth in TLSv1.3
- Fix unconstrained session cache growth in TLSv1.3
Comment thread
jcamposeco marked this conversation as resolved.

* Wed Feb 14 2024 Tobias Brick <tobiasb@microsoft.com> - 1.1.1k-29
- Introduce patch to correctly address NULL ContentInfo data
Expand Down
10 changes: 5 additions & 5 deletions toolkit/resources/manifests/package/pkggen_core_aarch64.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -165,11 +165,11 @@ texinfo-6.8-1.cm2.aarch64.rpm
gtk-doc-1.33.2-1.cm2.noarch.rpm
autoconf-2.71-3.cm2.noarch.rpm
automake-1.16.5-1.cm2.noarch.rpm
openssl-1.1.1k-30.cm2.aarch64.rpm
openssl-devel-1.1.1k-30.cm2.aarch64.rpm
openssl-libs-1.1.1k-30.cm2.aarch64.rpm
openssl-perl-1.1.1k-30.cm2.aarch64.rpm
openssl-static-1.1.1k-30.cm2.aarch64.rpm
openssl-1.1.1k-31.cm2.aarch64.rpm
openssl-devel-1.1.1k-31.cm2.aarch64.rpm
openssl-libs-1.1.1k-31.cm2.aarch64.rpm
openssl-perl-1.1.1k-31.cm2.aarch64.rpm
openssl-static-1.1.1k-31.cm2.aarch64.rpm
libcap-2.60-2.cm2.aarch64.rpm
libcap-devel-2.60-2.cm2.aarch64.rpm
debugedit-5.0-2.cm2.aarch64.rpm
Expand Down
10 changes: 5 additions & 5 deletions toolkit/resources/manifests/package/pkggen_core_x86_64.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -165,11 +165,11 @@ texinfo-6.8-1.cm2.x86_64.rpm
gtk-doc-1.33.2-1.cm2.noarch.rpm
autoconf-2.71-3.cm2.noarch.rpm
automake-1.16.5-1.cm2.noarch.rpm
openssl-1.1.1k-30.cm2.x86_64.rpm
openssl-devel-1.1.1k-30.cm2.x86_64.rpm
openssl-libs-1.1.1k-30.cm2.x86_64.rpm
openssl-perl-1.1.1k-30.cm2.x86_64.rpm
openssl-static-1.1.1k-30.cm2.x86_64.rpm
openssl-1.1.1k-31.cm2.x86_64.rpm
openssl-devel-1.1.1k-31.cm2.x86_64.rpm
openssl-libs-1.1.1k-31.cm2.x86_64.rpm
openssl-perl-1.1.1k-31.cm2.x86_64.rpm
openssl-static-1.1.1k-31.cm2.x86_64.rpm
libcap-2.60-2.cm2.x86_64.rpm
libcap-devel-2.60-2.cm2.x86_64.rpm
debugedit-5.0-2.cm2.x86_64.rpm
Expand Down
12 changes: 6 additions & 6 deletions toolkit/resources/manifests/package/toolchain_aarch64.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -270,12 +270,12 @@ npth-1.6-4.cm2.aarch64.rpm
npth-debuginfo-1.6-4.cm2.aarch64.rpm
npth-devel-1.6-4.cm2.aarch64.rpm
ntsysv-1.20-4.cm2.aarch64.rpm
openssl-1.1.1k-30.cm2.aarch64.rpm
openssl-debuginfo-1.1.1k-30.cm2.aarch64.rpm
openssl-devel-1.1.1k-30.cm2.aarch64.rpm
openssl-libs-1.1.1k-30.cm2.aarch64.rpm
openssl-perl-1.1.1k-30.cm2.aarch64.rpm
openssl-static-1.1.1k-30.cm2.aarch64.rpm
openssl-1.1.1k-31.cm2.aarch64.rpm
openssl-debuginfo-1.1.1k-31.cm2.aarch64.rpm
openssl-devel-1.1.1k-31.cm2.aarch64.rpm
openssl-libs-1.1.1k-31.cm2.aarch64.rpm
openssl-perl-1.1.1k-31.cm2.aarch64.rpm
openssl-static-1.1.1k-31.cm2.aarch64.rpm
p11-kit-0.24.1-1.cm2.aarch64.rpm
p11-kit-debuginfo-0.24.1-1.cm2.aarch64.rpm
p11-kit-devel-0.24.1-1.cm2.aarch64.rpm
Expand Down
12 changes: 6 additions & 6 deletions toolkit/resources/manifests/package/toolchain_x86_64.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -276,12 +276,12 @@ npth-1.6-4.cm2.x86_64.rpm
npth-debuginfo-1.6-4.cm2.x86_64.rpm
npth-devel-1.6-4.cm2.x86_64.rpm
ntsysv-1.20-4.cm2.x86_64.rpm
openssl-1.1.1k-30.cm2.x86_64.rpm
openssl-debuginfo-1.1.1k-30.cm2.x86_64.rpm
openssl-devel-1.1.1k-30.cm2.x86_64.rpm
openssl-libs-1.1.1k-30.cm2.x86_64.rpm
openssl-perl-1.1.1k-30.cm2.x86_64.rpm
openssl-static-1.1.1k-30.cm2.x86_64.rpm
openssl-1.1.1k-31.cm2.x86_64.rpm
openssl-debuginfo-1.1.1k-31.cm2.x86_64.rpm
openssl-devel-1.1.1k-31.cm2.x86_64.rpm
openssl-libs-1.1.1k-31.cm2.x86_64.rpm
openssl-perl-1.1.1k-31.cm2.x86_64.rpm
openssl-static-1.1.1k-31.cm2.x86_64.rpm
p11-kit-0.24.1-1.cm2.x86_64.rpm
p11-kit-debuginfo-0.24.1-1.cm2.x86_64.rpm
p11-kit-devel-0.24.1-1.cm2.x86_64.rpm
Expand Down