From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Tomas Mraz To: git-commits@fedoraproject.org Subject: [rpms/openssl] rebase_40beta: fix CVE-2014-0224 fix that broke EAP-FAST session resumption support Date: Tue, 09 Jun 2026 12:43:20 GMT Message-ID: <178100900026.1.8330478372394704932.rpms-openssl-a98d99a5032d@fedoraproject.org> List-ID: X-Git-Repo: rpms/openssl X-Git-Branch: rebase_40beta X-Git-Rev: a98d99a5032dced33ff8de82268ddcad0b9e485d ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvb3BlbnNzbAogICAgICAgICAgICBCcmFuY2ggOiByZWJhc2VfNDBiZXRhCiAg ICAgICAgICAgIENvbW1pdCA6IGE5OGQ5OWE1MDMyZGNlZDMzZmY4ZGU4MjI2OGRkY2FkMGI5ZTQ4 NWQKICAgICAgICAgICAgQXV0aG9yIDogVG9tYXMgTXJheiA8dG1yYXpAZmVkb3JhcHJvamVjdC5v cmc+CiAgICAgICAgICAgIERhdGUgICA6IDIwMTQtMDYtMTBUMTY6Mzg6NTYrMDI6MDAKICAgICAg ICAgICAgU3RhdHMgIDogKzMwLy0xMSBpbiAzIGZpbGUocykKICAgICAgICAgICAgVVJMICAgIDog aHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9vcGVuc3NsL2MvYTk4ZDk5YTUwMzJk Y2VkMzNmZjhkZTgyMjY4ZGRjYWQwYjllNDg1ZD9icmFuY2g9cmViYXNlXzQwYmV0YQoKICAgICAg ICAgICAgTG9nOgogICAgICAgICAgICBmaXggQ1ZFLTIwMTQtMDIyNCBmaXggdGhhdCBicm9rZSBF QVAtRkFTVCBzZXNzaW9uIHJlc3VtcHRpb24gc3VwcG9ydAoKLSBtYWtlIEZJUFMgbW9kZSBrZXln ZW4gYml0IGxlbmd0aCByZXN0cmljdGlvbiBlbmZvcmNlZCBvbmx5IHdoZW4KICBPUEVOU1NMX0VO Rk9SQ0VfTU9EVUxVU19CSVRTIGlzIHNldAoKLS0tCmRpZmYgLS1naXQgYS9vcGVuc3NsLTEuMC4x Zy1uZXctZmlwcy1yZXFzLnBhdGNoIGIvb3BlbnNzbC0xLjAuMWctbmV3LWZpcHMtcmVxcy5wYXRj aAppbmRleCA5ZjJmZTliLi4zMzVjZjQzIDEwMDY0NAotLS0gYS9vcGVuc3NsLTEuMC4xZy1uZXct Zmlwcy1yZXFzLnBhdGNoCisrKyBiL29wZW5zc2wtMS4wLjFnLW5ldy1maXBzLXJlcXMucGF0Y2gK QEAgLTgwLDExICs4MCwxMiBAQCBkaWZmIC11cCBvcGVuc3NsLTEuMC4xZy9jcnlwdG8vZGgvZGhf Y2hlY2suYy5maXBzLXJlcXMgb3BlbnNzbC0xLjAuMWcvY3J5cHRvL2RoLwogZGlmZiAtdXAgb3Bl bnNzbC0xLjAuMWcvY3J5cHRvL2RzYS9kc2FfZ2VuLmMuZmlwcy1yZXFzIG9wZW5zc2wtMS4wLjFn L2NyeXB0by9kc2EvZHNhX2dlbi5jCiAtLS0gb3BlbnNzbC0xLjAuMWcvY3J5cHRvL2RzYS9kc2Ff Z2VuLmMuZmlwcy1yZXFzCTIwMTQtMDUtMDYgMTY6MjI6MjEuMjU0NTM2MTY4ICswMjAwCiArKysg b3BlbnNzbC0xLjAuMWcvY3J5cHRvL2RzYS9kc2FfZ2VuLmMJMjAxNC0wNS0wNiAxNjoyMjoyMS40 MzI1NDAyODMgKzAyMDAKLUBAIC0xNTksNyArMTU5LDYgQEAgaW50IGRzYV9idWlsdGluX3BhcmFt Z2VuKERTQSAqcmV0LCBzaXplXworQEAgLTE1OSw3ICsxNTksNyBAQCBpbnQgZHNhX2J1aWx0aW5f cGFyYW1nZW4oRFNBICpyZXQsIHNpemVfCiAgCSAgICB9CiAgCiAgCWlmIChGSVBTX21vZHVsZV9t b2RlKCkgJiYKIC0JICAgIChiaXRzICE9IDEwMjQgfHwgcWJpdHMgIT0gMTYwKSAmJgorKwkgICAg KGdldGVudigiT1BFTlNTTF9FTkZPUkNFX01PRFVMVVNfQklUUyIpIHx8IGJpdHMgIT0gMTAyNCB8 fCBxYml0cyAhPSAxNjApICYmCiAgCSAgICAoYml0cyAhPSAyMDQ4IHx8IHFiaXRzICE9IDIyNCkg JiYKICAJICAgIChiaXRzICE9IDIwNDggfHwgcWJpdHMgIT0gMjU2KSAmJgogIAkgICAgKGJpdHMg IT0gMzA3MiB8fCBxYml0cyAhPSAyNTYpKQpAQCAtOTUsNyArOTYsNyBAQCBkaWZmIC11cCBvcGVu c3NsLTEuMC4xZy9jcnlwdG8vZHNhL2RzYS5oLmZpcHMtcmVxcyBvcGVuc3NsLTEuMC4xZy9jcnlw dG8vZHNhL2RzYQogICNlbmRpZgogIAogICNkZWZpbmUgT1BFTlNTTF9EU0FfRklQU19NSU5fTU9E VUxVU19CSVRTIDEwMjQKLSsjZGVmaW5lIE9QRU5TU0xfRFNBX0ZJUFNfTUlOX01PRFVMVVNfQklU U19HRU4gMjA0OAorKyNkZWZpbmUgT1BFTlNTTF9EU0FfRklQU19NSU5fTU9EVUxVU19CSVRTX0dF TiAoZ2V0ZW52KCJPUEVOU1NMX0VORk9SQ0VfTU9EVUxVU19CSVRTIik/MjA0ODoxMDI0KQogIAog ICNkZWZpbmUgRFNBX0ZMQUdfQ0FDSEVfTU9OVF9QCTB4MDEKICAjZGVmaW5lIERTQV9GTEFHX05P X0VYUF9DT05TVFRJTUUgICAgICAgMHgwMiAvKiBuZXcgd2l0aCAwLjkuN2g7IHRoZSBidWlsdC1p biBEU0EKQEAgLTE0OTMsNyArMTQ5NCw3IEBAIGRpZmYgLXVwIG9wZW5zc2wtMS4wLjFnL2NyeXB0 by9yc2EvcnNhX2dlbi5jLmZpcHMtcmVxcyBvcGVuc3NsLTEuMC4xZy9jcnlwdG8vcnNhCiArCSAg ICAJcmV0dXJuIDA7CiArCSAgICAJfQogKwotKwlpZiAoYml0cyAhPSAyMDQ4ICYmIGJpdHMgIT0g MzA3MikKKysJaWYgKChwYml0cyAmIDB4RkYpIHx8IChnZXRlbnYoIk9QRU5TU0xfRU5GT1JDRV9N T0RVTFVTX0JJVFMiKSAmJiBiaXRzICE9IDIwNDggJiYgYml0cyAhPSAzMDcyKSkKICsJCXsKICsJ CUZJUFNlcnIoRklQU19GX1JTQV9CVUlMVElOX0tFWUdFTiwgRklQU19SX0lOVkFMSURfS0VZX0xF TkdUSCk7CiArCQlyZXR1cm4gMDsKQEAgLTE2OTMsNyArMTY5NCw3IEBAIGRpZmYgLXVwIG9wZW5z c2wtMS4wLjFnL2NyeXB0by9yc2EvcnNhX2dlbi5jLmZpcHMtcmVxcyBvcGVuc3NsLTEuMC4xZy9j cnlwdG8vcnNhCiAgc3RhdGljIGludCByc2FfYnVpbHRpbl9rZXlnZW4oUlNBICpyc2EsIGludCBi aXRzLCBCSUdOVU0gKmVfdmFsdWUsIEJOX0dFTkNCICpjYikKICAJewogIAlCSUdOVU0gKnIwPU5V TEwsKnIxPU5VTEwsKnIyPU5VTEwsKnIzPU5VTEwsKnRtcDsKLUBAIC0xNzYsMTcgKzM5Myw3IEBA IHN0YXRpYyBpbnQgcnNhX2J1aWx0aW5fa2V5Z2VuKFJTQSAqcnNhLAorQEAgLTE3NiwxNyArMzkz LDEyIEBAIHN0YXRpYyBpbnQgcnNhX2J1aWx0aW5fa2V5Z2VuKFJTQSAqcnNhLAogICNpZmRlZiBP UEVOU1NMX0ZJUFMKICAJaWYgKEZJUFNfbW9kdWxlX21vZGUoKSkKICAJCXsKQEAgLTE3MDMsMTYg KzE3MDQsMTYgQEAgZGlmZiAtdXAgb3BlbnNzbC0xLjAuMWcvY3J5cHRvL3JzYS9yc2FfZ2VuLmMu Zmlwcy1yZXFzIG9wZW5zc2wtMS4wLjFnL2NyeXB0by9yc2EKIC0JICAgIAlyZXR1cm4gMDsKIC0J ICAgIAl9CiAtCi0tCQlpZiAoYml0cyA8IE9QRU5TU0xfUlNBX0ZJUFNfTUlOX01PRFVMVVNfQklU UykKLS0JCSAgICB7Ci0tCQkgICAgRklQU2VycihGSVBTX0ZfUlNBX0JVSUxUSU5fS0VZR0VOLEZJ UFNfUl9LRVlfVE9PX1NIT1JUKTsKLS0JCSAgICByZXR1cm4gMDsKLS0JCSAgICB9CisgCQlpZiAo Yml0cyA8IE9QRU5TU0xfUlNBX0ZJUFNfTUlOX01PRFVMVVNfQklUUykKKyAJCSAgICB7CisgCQkg ICAgRklQU2VycihGSVBTX0ZfUlNBX0JVSUxUSU5fS0VZR0VOLEZJUFNfUl9LRVlfVE9PX1NIT1JU KTsKKyAJCSAgICByZXR1cm4gMDsKKyAJCSAgICB9CiArCQlyZXR1cm4gRklQU19yc2FfYnVpbHRp bl9rZXlnZW4ocnNhLCBiaXRzLCBlX3ZhbHVlLCBjYik7CiAgCQl9CiAgI2VuZGlmCiAgCi1AQCAt MzAxLDE3ICs1MDgsNiBAQCBzdGF0aWMgaW50IHJzYV9idWlsdGluX2tleWdlbihSU0EgKnJzYSwK K0BAIC0zMDEsMTcgKzUyMCw2IEBAIHN0YXRpYyBpbnQgcnNhX2J1aWx0aW5fa2V5Z2VuKFJTQSAq cnNhLAogIAkJcCA9IHJzYS0+cDsKICAJaWYgKCFCTl9tb2RfaW52ZXJzZShyc2EtPmlxbXAscnNh LT5xLHAsY3R4KSkgZ290byBlcnI7CiAgCgpkaWZmIC0tZ2l0IGEvb3BlbnNzbC0xLjAuMWgtc2Vz c2lvbi1yZXN1bXB0aW9uLnBhdGNoIGIvb3BlbnNzbC0xLjAuMWgtc2Vzc2lvbi1yZXN1bXB0aW9u LnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLjFkMDYyNmYKLS0tIC9k ZXYvbnVsbAorKysgYi9vcGVuc3NsLTEuMC4xaC1zZXNzaW9uLXJlc3VtcHRpb24ucGF0Y2gKQEAg LTAsMCArMSwxMSBAQAorZGlmZiAtdXAgb3BlbnNzbC0xLjAuMWgvc3NsL3MzX2NsbnQuYy5yZXN1 bXB0aW9uIG9wZW5zc2wtMS4wLjFoL3NzbC9zM19jbG50LmMKKy0tLSBvcGVuc3NsLTEuMC4xaC9z c2wvczNfY2xudC5jLnJlc3VtcHRpb24JMjAxNC0wNi0wNSAxMTo0NDozMy4wMDAwMDAwMDAgKzAy MDAKKysrKyBvcGVuc3NsLTEuMC4xaC9zc2wvczNfY2xudC5jCTIwMTQtMDYtMTAgMTY6MzU6MTIu ODk1MDk2NjcwICswMjAwCitAQCAtOTAxLDYgKzkwMSw3IEBAIGludCBzc2wzX2dldF9zZXJ2ZXJf aGVsbG8oU1NMICpzKQorIAkJCXsKKyAJCQlzLT5zZXNzaW9uLT5jaXBoZXIgPSBwcmVmX2NpcGhl ciA/CisgCQkJCXByZWZfY2lwaGVyIDogc3NsX2dldF9jaXBoZXJfYnlfY2hhcihzLCBwK2opOwor KwkJCXMtPnMzLT5mbGFncyB8PSBTU0wzX0ZMQUdTX0NDU19PSzsKKyAJCQl9CisgCQl9CisgI2Vu ZGlmIC8qIE9QRU5TU0xfTk9fVExTRVhUICovCgpkaWZmIC0tZ2l0IGEvb3BlbnNzbC5zcGVjIGIv b3BlbnNzbC5zcGVjCmluZGV4IDY2N2QyYTguLjljNmVhMGQgMTAwNjQ0Ci0tLSBhL29wZW5zc2wu c3BlYworKysgYi9vcGVuc3NsLnNwZWMKQEAgLTIzLDcgKzIzLDcgQEAKIFN1bW1hcnk6IFV0aWxp dGllcyBmcm9tIHRoZSBnZW5lcmFsIHB1cnBvc2UgY3J5cHRvZ3JhcGh5IGxpYnJhcnkgd2l0aCBU TFMgaW1wbGVtZW50YXRpb24KIE5hbWU6IG9wZW5zc2wKIFZlcnNpb246IDEuMC4xaAotUmVsZWFz ZTogMiV7P2Rpc3R9CitSZWxlYXNlOiAzJXs/ZGlzdH0KIEVwb2NoOiAxCiAjIFdlIGhhdmUgdG8g cmVtb3ZlIGNlcnRhaW4gcGF0ZW50ZWQgYWxnb3JpdGhtcyBmcm9tIHRoZSBvcGVuc3NsIHNvdXJj ZQogIyB0YXJiYWxsIHdpdGggdGhlIGhvYmJsZS1vcGVuc3NsIHNjcmlwdCB3aGljaCBpcyBpbmNs dWRlZCBiZWxvdy4KQEAgLTg1LDYgKzg1LDcgQEAgUGF0Y2g5MDogb3BlbnNzbC0xLjAuMWUtZW5j LWZhaWwucGF0Y2gKIFBhdGNoOTE6IG9wZW5zc2wtMS4wLjFlLXNzbDItbm8tZWMucGF0Y2gKICMg QmFja3BvcnRlZCBmaXhlcyBpbmNsdWRpbmcgc2VjdXJpdHkgZml4ZXMKIFBhdGNoODE6IG9wZW5z c2wtMS4wLjEtYmV0YTItcGFkbG9jazY0LnBhdGNoCitQYXRjaDgyOiBvcGVuc3NsLTEuMC4xaC1z ZXNzaW9uLXJlc3VtcHRpb24ucGF0Y2gKIFBhdGNoODQ6IG9wZW5zc2wtMS4wLjFlLXRydXN0ZWQt Zmlyc3QucGF0Y2gKIFBhdGNoODU6IG9wZW5zc2wtMS4wLjFlLWFybS11c2UtZWxmLWF1eHYtY2Fw cy5wYXRjaAogUGF0Y2g4OTogb3BlbnNzbC0xLjAuMWUtZXBoZW1lcmFsLWtleS1zaXplLnBhdGNo CkBAIC0yMDYsNiArMjA3LDcgQEAgY3AgJXtTT1VSQ0UxMn0gJXtTT1VSQ0UxM30gY3J5cHRvL2Vj LwogJXBhdGNoOTEgLXAxIC1iIC5zc2wybm9lYwogCiAlcGF0Y2g4MSAtcDEgLWIgLnBhZGxvY2s2 NAorJXBhdGNoODIgLXAxIC1iIC5yZXN1bXB0aW9uCiAlcGF0Y2g4NCAtcDEgLWIgLnRydXN0ZWQt Zmlyc3QKICVwYXRjaDg1IC1wMSAtYiAuYXJtY2FwCiAlcGF0Y2g4OSAtcDEgLWIgLmVwaGVtZXJh bApAQCAtNDcyLDYgKzQ3NCwxMSBAQCBybSAtcmYgJFJQTV9CVUlMRF9ST09ULyV7X2xpYmRpcn0v Zmlwc2NhbmlzdGVyLioKICVwb3N0dW4gbGlicyAtcCAvc2Jpbi9sZGNvbmZpZwogCiAlY2hhbmdl bG9nCisqIFR1ZSBKdW4gMTAgMjAxNCBUb23DocWhIE1yw6F6IDx0bXJhekByZWRoYXQuY29tPiAx LjAuMWgtMworLSBtYWtlIEZJUFMgbW9kZSBrZXlnZW4gYml0IGxlbmd0aCByZXN0cmljdGlvbiBl bmZvcmNlZCBvbmx5IHdoZW4KKyAgT1BFTlNTTF9FTkZPUkNFX01PRFVMVVNfQklUUyBpcyBzZXQK Ky0gZml4IENWRS0yMDE0LTAyMjQgZml4IHRoYXQgYnJva2UgRUFQLUZBU1Qgc2Vzc2lvbiByZXN1 bXB0aW9uIHN1cHBvcnQKKwogKiBTYXQgSnVuIDA3IDIwMTQgRmVkb3JhIFJlbGVhc2UgRW5naW5l ZXJpbmcgPHJlbC1lbmdAbGlzdHMuZmVkb3JhcHJvamVjdC5vcmc+IC0gMToxLjAuMWgtMgogLSBS ZWJ1aWx0IGZvciBodHRwczovL2ZlZG9yYXByb2plY3Qub3JnL3dpa2kvRmVkb3JhXzIxX01hc3Nf UmVidWlsZAogCg==