diff --git a/SOURCES/00231-Initialize-OpenSSL_add_all_digests-in-_hashlib.patch b/SOURCES/00231-Initialize-OpenSSL_add_all_digests-in-_hashlib.patch new file mode 100644 index 0000000..3355ce2 --- /dev/null +++ b/SOURCES/00231-Initialize-OpenSSL_add_all_digests-in-_hashlib.patch @@ -0,0 +1,11 @@ +diff -up Python-2.7.5/Modules/_hashopenssl.c.digest Python-2.7.5/Modules/_hashopenssl.c +--- Python-2.7.5/Modules/_hashopenssl.c.digest 2016-01-05 10:53:02.947312688 +0100 ++++ Python-2.7.5/Modules/_hashopenssl.c 2016-01-05 10:53:15.504431960 +0100 +@@ -984,6 +984,7 @@ init_hashlib(void) + SSL_load_error_strings(); + SSL_library_init(); + ERR_load_crypto_strings(); ++ OpenSSL_add_all_digests(); + + Py_TYPE(&EVPtype) = &PyType_Type; + if (PyType_Ready(&EVPtype) < 0) diff --git a/SPECS/python.spec b/SPECS/python.spec index c9f0f05..80ea0ee 100644 --- a/SPECS/python.spec +++ b/SPECS/python.spec @@ -106,7 +106,7 @@ Summary: An interpreted, interactive, object-oriented programming language Name: %{python} # Remember to also rebase python-docs when changing this: Version: 2.7.5 -Release: 38%{?dist} +Release: 39%{?dist} License: Python Group: Development/Languages Requires: %{python}-libs%{?_isa} = %{version}-%{release} @@ -1031,6 +1031,12 @@ Patch229: 00229-Expect-a-failure-when-trying-to-connect-with-SSLv2-c.patch # Resolves: rhbz#1365200 Patch230: 00230-force-all-child-threads-to-terminate-in-TestForkInThread.patch +# 00231 # +# Fix hashlib algorithms breaking by initializing OpenSSL_add_all_digests +# function in _hashlib library of _hashopenssl.c module +# Resolves: rhbz#1371132 +Patch231: 00231-Initialize-OpenSSL_add_all_digests-in-_hashlib.patch + # 00237 # # CVE-2016-0772 python: smtplib StartTLS stripping attack # https://bugzilla.redhat.com/show_bug.cgi?id=1303647 @@ -1448,6 +1454,7 @@ mv Modules/cryptmodule.c Modules/_cryptmodule.c %patch228 -p1 %patch229 -p1 %patch230 -p1 +%patch231 -p1 %patch237 -p1 %patch238 -p1 %patch242 -p1 @@ -2320,6 +2327,11 @@ rm -fr %{buildroot} # ====================================================== %changelog +* Mon Aug 29 2016 Charalampos Stratakis - 2.7.5-39 +- Fix hashlib algorithms breaking by initializing OpenSSL_add_all_digests +function in _hashlib library +Resolves: rhbz#1371132 + * Tue Aug 09 2016 Charalampos Stratakis - 2.7.5-38 - Fix for CVE-2016-1000110 HTTPoxy attack Resolves: rhbz#1359163