rpms/openssl/F-9 openssl.spec,1.105,1.106

[Tomáš Mráz (tmraz)]

Author: tmraz

Update of /cvs/pkgs/rpms/openssl/F-9
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv31105

Modified Files:
	openssl.spec 
Log Message:
- sync with rawhide



Index: openssl.spec
===================================================================
RCS file: /cvs/pkgs/rpms/openssl/F-9/openssl.spec,v
retrieving revision 1.105
retrieving revision 1.106
diff -u -r1.105 -r1.106
--- openssl.spec	20 May 2008 15:15:59 -0000	1.105
+++ openssl.spec	28 May 2008 17:38:52 -0000	1.106
@@ -22,7 +22,7 @@
 Summary: The OpenSSL toolkit
 Name: openssl
 Version: 0.9.8g
-Release: 7%{?dist}
+Release: 9%{?dist}
 # We remove certain patented algorithms from the openssl source tarball
 # with the hobble-openssl script which is included below.
 Source: openssl-%{version}-usa.tar.bz2
@@ -59,6 +59,8 @@
 # Backported fixes including security fixes
 Patch50: openssl-0.9.8g-speed-bug.patch
 Patch51: openssl-0.9.8g-bn-mul-bug.patch
+Patch52: openssl-0.9.8g-cve-2008-0891.patch
+Patch53: openssl-0.9.8g-cve-2008-1671.patch
 
 License: OpenSSL
 Group: System Environment/Libraries
@@ -124,6 +126,8 @@
 %patch39 -p1 -b .ipv6-apps
 %patch50 -p1 -b .speed-bug
 %patch51 -p1 -b .bn-mul-bug
+%patch52 -p0 -b .srvname-crash
+%patch53 -p0 -b .srv-kex-crash
 
 # Modify the various perl scripts to reference perl in the right location.
 perl util/perlpath.pl `dirname %{__perl}`
@@ -153,14 +157,13 @@
 %ifarch alpha alphaev56 alphaev6 alphaev67
 sslarch=linux-alpha-gcc
 %endif
-%ifarch s390
-# The -fno-regmove is a workaround for bug #199604
-sslarch="linux-generic32 -DB_ENDIAN -DNO_ASM -fno-regmove"
+%ifarch s390 sh3eb sh4eb
+sslarch="linux-generic32 -DB_ENDIAN"
 %endif
 %ifarch s390x
-sslarch="linux-generic64 -DB_ENDIAN -DNO_ASM"
+sslarch="linux-generic64 -DB_ENDIAN"
 %endif
-%ifarch %{arm}
+%ifarch %{arm} sh3 sh4
 sslarch=linux-generic32
 %endif
 # ia64, x86_64, ppc, ppc64 are OK by default
@@ -379,6 +382,14 @@
 %postun -p /sbin/ldconfig
 
 %changelog
+* Wed May 28 2008 Tomas Mraz <tmraz at redhat.com> 0.9.8g-9
+- fix CVE-2008-0891 - server name extension crash (#448492)
+- fix CVE-2008-1672 - server key exchange message omit crash (#448495)
+
+* Tue May 27 2008 Tomas Mraz <tmraz at redhat.com> 0.9.8g-8
+- super-H arch support
+- drop workaround for bug 199604 as it should be fixed in gcc-4.3
+
 * Mon May 19 2008 Tom "spot" Callaway <tcallawa at redhat.com> 0.9.8g-7
 - sparc handling