packages: openssl/openssl.spec, openssl/TODO (NEW) - security blockers added

[blues]

Author: blues                        Date: Mon May 25 10:45:52 2009 GMT
Module: packages                      Tag: HEAD
---- Log message:
- security blockers added

---- Files affected:
packages/openssl:
   openssl.spec (1.202 -> 1.203) , TODO (NONE -> 1.1)  (NEW)

---- Diffs:

================================================================
Index: packages/openssl/openssl.spec
diff -u packages/openssl/openssl.spec:1.202 packages/openssl/openssl.spec:1.203
--- packages/openssl/openssl.spec:1.202	Thu Mar 26 10:20:29 2009
+++ packages/openssl/openssl.spec	Mon May 25 12:45:47 2009
@@ -34,6 +34,12 @@
 Patch7:		%{name}-ca-certificates.patch
 Patch8:		%{name}-fips_install.patch
 URL:		http://www.openssl.org/
+# problem with =< 1.0.0beta2
+# Fixes should be in sourcecode
+BuildRequires:	security(CVE-2009-1377)
+BuildRequires:	security(CVE-2009-1378)
+BuildRequires:	security(CVE-2009-1379)
+##
 BuildRequires:	bc
 BuildRequires:	perl-devel >= 1:5.6.1
 BuildRequires:	rpm-perlprov >= 4.1-13
@@ -447,6 +453,9 @@
 All persons listed below can be reached at <cvs_login>@pld-linux.org
 
 $Log$
+Revision 1.203  2009/05/25 10:45:47  blues
+- security blockers added
+
 Revision 1.202  2009/03/26 09:20:29  arekm
 - up to 0.9.8k (fixes CVE-2009-0590, CVE-2009-0591, CVE-2009-0789)
 

================================================================
Index: packages/openssl/TODO
diff -u /dev/null packages/openssl/TODO:1.1
--- /dev/null	Mon May 25 12:45:53 2009
+++ packages/openssl/TODO	Mon May 25 12:45:47 2009
@@ -0,0 +1,2 @@
+TODO:
+- upgrade to 1.0.0
================================================================

---- CVS-web:
    http://cvs.pld-linux.org/cgi-bin/cvsweb.cgi/packages/openssl/openssl.spec?r1=1.202&r2=1.203&f=u