[PATCH][gatesgarth][dunfell] openssl: update to 1.1.1k to fix CVE-2021-3450 and CVE-2021-3449

[PATCH][gatesgarth][dunfell] openssl: update to 1.1.1k to fix CVE-2021-3450 and CVE-2021-3449

[Mikko Rapeli]

Only security issues fixed in this release according to
https://www.openssl.org/news/cl111.txt

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
---
 .../openssl/{openssl_1.1.1j.bb => openssl_1.1.1k.bb}            | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-connectivity/openssl/{openssl_1.1.1j.bb => openssl_1.1.1k.bb} (98%)

diff --git a/meta/recipes-connectivity/openssl/openssl_1.1.1j.bb b/meta/recipes-connectivity/openssl/openssl_1.1.1k.bb
similarity index 98%
rename from meta/recipes-connectivity/openssl/openssl_1.1.1j.bb
rename to meta/recipes-connectivity/openssl/openssl_1.1.1k.bb
index f054d2fdba..5f281197c9 100644
--- a/meta/recipes-connectivity/openssl/openssl_1.1.1j.bb
+++ b/meta/recipes-connectivity/openssl/openssl_1.1.1k.bb
@@ -23,7 +23,7 @@ SRC_URI_append_class-nativesdk = " \
            file://environment.d-openssl.sh \
            "
 
-SRC_URI[sha256sum] = "aaf2fcb575cdf6491b98ab4829abf78a3dec8402b8b81efc8f23c00d443981bf"
+SRC_URI[sha256sum] = "892a0875b9872acd04a9fde79b1f943075d5ea162415de3047c327df33fbaee5"
 
 inherit lib_package multilib_header multilib_script ptest
 MULTILIB_SCRIPTS = "${PN}-bin:${bindir}/c_rehash"
-- 
2.20.1

Re: [OE-core] [PATCH][gatesgarth][dunfell] openssl: update to 1.1.1k to fix CVE-2021-3450 and CVE-2021-3449

[Khem Raj]

do we need this on dunfell too?

On Thu, Mar 25, 2021 at 12:20 PM Mikko Rapeli <mikko.rapeli@bmw.de> wrote:
>
> Only security issues fixed in this release according to
> https://www.openssl.org/news/cl111.txt
>
> Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
> ---
>  .../openssl/{openssl_1.1.1j.bb => openssl_1.1.1k.bb}            | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>  rename meta/recipes-connectivity/openssl/{openssl_1.1.1j.bb => openssl_1.1.1k.bb} (98%)
>
> diff --git a/meta/recipes-connectivity/openssl/openssl_1.1.1j.bb b/meta/recipes-connectivity/openssl/openssl_1.1.1k.bb
> similarity index 98%
> rename from meta/recipes-connectivity/openssl/openssl_1.1.1j.bb
> rename to meta/recipes-connectivity/openssl/openssl_1.1.1k.bb
> index f054d2fdba..5f281197c9 100644
> --- a/meta/recipes-connectivity/openssl/openssl_1.1.1j.bb
> +++ b/meta/recipes-connectivity/openssl/openssl_1.1.1k.bb
> @@ -23,7 +23,7 @@ SRC_URI_append_class-nativesdk = " \
>             file://environment.d-openssl.sh \
>             "
>
> -SRC_URI[sha256sum] = "aaf2fcb575cdf6491b98ab4829abf78a3dec8402b8b81efc8f23c00d443981bf"
> +SRC_URI[sha256sum] = "892a0875b9872acd04a9fde79b1f943075d5ea162415de3047c327df33fbaee5"
>
>  inherit lib_package multilib_header multilib_script ptest
>  MULTILIB_SCRIPTS = "${PN}-bin:${bindir}/c_rehash"
> --
> 2.20.1
>
>
> 
>

Re: [OE-core] [PATCH][gatesgarth][dunfell] openssl: update to 1.1.1k to fix CVE-2021-3450 and CVE-2021-3449

[Steve Sakoman]

On Fri, Mar 26, 2021 at 8:54 AM Khem Raj <raj.khem@gmail.com> wrote:
>
> do we need this on dunfell too?

I plan to take it when it hits master.

Steve

>
> On Thu, Mar 25, 2021 at 12:20 PM Mikko Rapeli <mikko.rapeli@bmw.de> wrote:
> >
> > Only security issues fixed in this release according to
> > https://www.openssl.org/news/cl111.txt
> >
> > Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
> > ---
> >  .../openssl/{openssl_1.1.1j.bb => openssl_1.1.1k.bb}            | 2 +-
> >  1 file changed, 1 insertion(+), 1 deletion(-)
> >  rename meta/recipes-connectivity/openssl/{openssl_1.1.1j.bb => openssl_1.1.1k.bb} (98%)
> >
> > diff --git a/meta/recipes-connectivity/openssl/openssl_1.1.1j.bb b/meta/recipes-connectivity/openssl/openssl_1.1.1k.bb
> > similarity index 98%
> > rename from meta/recipes-connectivity/openssl/openssl_1.1.1j.bb
> > rename to meta/recipes-connectivity/openssl/openssl_1.1.1k.bb
> > index f054d2fdba..5f281197c9 100644
> > --- a/meta/recipes-connectivity/openssl/openssl_1.1.1j.bb
> > +++ b/meta/recipes-connectivity/openssl/openssl_1.1.1k.bb
> > @@ -23,7 +23,7 @@ SRC_URI_append_class-nativesdk = " \
> >             file://environment.d-openssl.sh \
> >             "
> >
> > -SRC_URI[sha256sum] = "aaf2fcb575cdf6491b98ab4829abf78a3dec8402b8b81efc8f23c00d443981bf"
> > +SRC_URI[sha256sum] = "892a0875b9872acd04a9fde79b1f943075d5ea162415de3047c327df33fbaee5"
> >
> >  inherit lib_package multilib_header multilib_script ptest
> >  MULTILIB_SCRIPTS = "${PN}-bin:${bindir}/c_rehash"
> > --
> > 2.20.1
> >
> >
> >
> >
>
> 
>

Re: [OE-core] [PATCH][gatesgarth][dunfell] openssl: update to 1.1.1k to fix CVE-2021-3450 and CVE-2021-3449

[Mikko Rapeli]

On Fri, Mar 26, 2021 at 09:22:51AM -1000, Steve Sakoman wrote:
> On Fri, Mar 26, 2021 at 8:54 AM Khem Raj <raj.khem@gmail.com> wrote:
> >
> > do we need this on dunfell too?
> 
> I plan to take it when it hits master.

Thanks! As subject says, the patch applies to both gatesgarth and dunfell.

-Mikko