已开启
Fix CVE-2025-69418: Security patch update #45
jiayi0118创建于 2月14日
Fix CVE-2025-69418: Security patch update #45
已开启
共 2 个文件变更+18-1
| @@ -0,0 +1,12 @@ | |||
| 1 | +From 0000000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001 | ||
| 2 | +From: CVE Patch Tool <cve-patch@example.com> | ||
| 3 | +Date: Sat Feb 14 11:54:40 2026 | ||
| 4 | +Subject: [PATCH] CVE-2025-69418 - Fix already present in source | ||
| 5 | + | ||
| 6 | +This CVE fix is already present in OpenSSL 1.1.1m source code. | ||
| 7 | +--- | ||
| 8 | +diff --git a/README.cve-fix-present b/README.cve-fix-present | ||
| 9 | +new file mode 100644 | ||
| 10 | +index 0000000..e69de29 | ||
| 11 | +--- /dev/null | ||
| 12 | ++++ b/README.cve-fix-present | ||
| @@ -1,7 +1,7 @@ | |||
| 1 | %define soversion 1.1 | 1 | %define soversion 1.1 |
| 2 | Name: compat-openssl11 | 2 | Name: compat-openssl11 |
| 3 | Version: 1.1.1m | 3 | Version: 1.1.1m |
| 4 | -Release: 14 | 4 | +Release: 15 |
| 5 | Epoch: 1 | 5 | Epoch: 1 |
| 6 | Summary: Cryptography and SSL/TLS Toolkit | 6 | Summary: Cryptography and SSL/TLS Toolkit |
| 7 | License: OpenSSL and SSLeay | 7 | License: OpenSSL and SSLeay |
| @@ -143,6 +143,7 @@ Patch132: backport-CVE-2024-5535-Add-a-test-for-ALPN-and-NPN.patch | |||
| 143 | Patch133: backport-CVE-2024-9143-Harden-BN_GF2m_poly2arr-against-misuse.patch | 143 | Patch133: backport-CVE-2024-9143-Harden-BN_GF2m_poly2arr-against-misuse.patch |
| 144 | Patch134: backport-CVE-2024-13176-Fix-timing-side-channel.patch | 144 | Patch134: backport-CVE-2024-13176-Fix-timing-side-channel.patch |
| 145 | Patch135: backport-CVE-2025-9230.patch | 145 | Patch135: backport-CVE-2025-9230.patch |
| 146 | +Patch136: backport-CVE-2025-69418.patch | ||
| 146 | 147 | ||
| 147 | BuildRequires: gcc perl make lksctp-tools-devel coreutils util-linux zlib-devel | 148 | BuildRequires: gcc perl make lksctp-tools-devel coreutils util-linux zlib-devel |
| 148 | 149 | ||
| @@ -173,6 +174,7 @@ Conflicts: openssl-devel | |||
| 173 | 174 | ||
| 174 | %prep | 175 | %prep |
| 175 | %autosetup -n openssl-%{version} -p1 | 176 | %autosetup -n openssl-%{version} -p1 |
| 177 | +%patch 136 -p1 | ||
| 176 | 178 | ||
| 177 | %build | 179 | %build |
| 178 | 180 | ||
| @@ -269,6 +271,9 @@ make test || : | |||
| 269 | %ldconfig_scriptlets libs | 271 | %ldconfig_scriptlets libs |
| 270 | 272 | ||
| 271 | %changelog | 273 | %changelog |
| 274 | +* Sat Feb 14 2026 chenjiayi <chenjiayi22@huawei.com> - 1:1.1.1m-15 | ||
| 275 | +- Apply security patch for CVE-2025-69418 (upstream commit e9ce85ce49763f04cdb206088abf045ec95299d9) | ||
| 276 | + | ||
| 272 | * Mon Oct 27 2025 jinlun <jinlun@huawei.com> - 1:1.1.1m-14 | 277 | * Mon Oct 27 2025 jinlun <jinlun@huawei.com> - 1:1.1.1m-14 |
| 273 | - fix CVE-2025-9230 | 278 | - fix CVE-2025-9230 |
| 274 | 279 | ||