)]}' { "log": [ { "commit": "35ae2093b3be78810b48681e3f06d46433f68877", "tree": "9e76d95f850bfabd41ef8eea3de7252f9051c227", "parents": [ "fdf5c4af6d51777f1fe5e7deb8024214282e4371" ], "author": { "name": "Mike Frysinger", "email": "vapier@chromium.org", "time": "Mon Oct 14 21:25:36 2013" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Mon Oct 21 03:39:54 2013" }, "message": "update to openssl 1.0.1e\n\nBUG\u003dchromium:261711\nTEST\u003d`cbuildbot chromiumos-sdk` works\nTEST\u003d`cbuildbot {daisy,x86-alex,lumpy}-release` works\nTEST\u003d`./tblacklist` passes for x86-alex\nCQ-DEPEND\u003dCL:173027\n\nChange-Id: I76f4b9b2dfc7b281eeb83f289ff07ff7011ba647\nReviewed-on: https://chromium-review.googlesource.com/173055\nReviewed-by: Jorge Lucangeli Obes \u003cjorgelo@chromium.org\u003e\nReviewed-by: Chris Sosa \u003csosa@chromium.org\u003e\nReviewed-by: Ryan Sleevi \u003crsleevi@chromium.org\u003e\nCommit-Queue: Mike Frysinger \u003cvapier@chromium.org\u003e\nTested-by: Mike Frysinger \u003cvapier@chromium.org\u003e\n" }, { "commit": "fdf5c4af6d51777f1fe5e7deb8024214282e4371", "tree": "2639d1271598a4e56988c6f9119da00a7334ef6d", "parents": [ "5a0d9c26c3c1f5938321c8c775bff8143e24883b" ], "author": { "name": "Mike Frysinger", "email": "vapier@chromium.org", "time": "Mon Oct 14 17:33:35 2013" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Wed Oct 16 18:30:15 2013" }, "message": "drop files not in the 1.0.1c release\n\nLooks like when the 1.0.1c release was imported, it was done by\nunpacking \u0026 doing `git add`. Files that existed in the previous\nrelease were not removed.\n\nBUG\u003dchromium:261711\nTEST\u003d`emerge-x86-alex openssl` still works and produces same objects\nTEST\u003d`./tblacklist` passes for x86-alex\nTEST\u003d`emerge-stumpy openssl` still works and produces same objects\nTEST\u003d`emerge-daisy openssl` still works and produces same objects\n\nChange-Id: Ia7a0b6dbcefa98d055343b52286b235e46691ed5\nReviewed-on: https://chromium-review.googlesource.com/173023\nReviewed-by: Chris Sosa \u003csosa@chromium.org\u003e\nCommit-Queue: Mike Frysinger \u003cvapier@chromium.org\u003e\nTested-by: Mike Frysinger \u003cvapier@chromium.org\u003e\n" }, { "commit": "5a0d9c26c3c1f5938321c8c775bff8143e24883b", "tree": "297dfe2fbe93b9b5557a0b219d34c3226ce32659", "parents": [ "1c7606ce1b8c853047f1718b8201ac4af488c279" ], "author": { "name": "Mike Frysinger", "email": "vapier@chromium.org", "time": "Mon Oct 14 23:46:32 2013" }, "committer": { "name": "Mike Frysinger", "email": "vapier@chromium.org", "time": "Wed Oct 16 15:36:33 2013" }, "message": "PRESUBMIT: restore it\n\nLooks like it was dropped by accident in a previous upgrade.\n\nBUG\u003dchromium:261711\nTEST\u003d`repo upload` no longer complains\n\nChange-Id: Idae3707368e344b400b10267dc383c699daca995\nReviewed-on: https://chromium-review.googlesource.com/173054\nReviewed-by: Jorge Lucangeli Obes \u003cjorgelo@chromium.org\u003e\nCommit-Queue: Mike Frysinger \u003cvapier@chromium.org\u003e\nTested-by: Mike Frysinger \u003cvapier@chromium.org\u003e\n" }, { "commit": "1c7606ce1b8c853047f1718b8201ac4af488c279", "tree": "3c54d51cd31fbd357c6a08a37e4281836018d2a9", "parents": [ "33fb8d5bcbb6e3ceda8a1f6e57108f7ca2bea144" ], "author": { "name": "Elly Fong-Jones", "email": "ellyjones@chromium.org", "time": "Wed Sep 12 20:57:17 2012" }, "committer": { "name": "Gerrit", "email": "chrome-bot@google.com", "time": "Fri Sep 14 14:38:09 2012" }, "message": "[openssl] add blacklist-by-sha1 support\n\nBUG\u003dchromium-os:26806\nTEST\u003dunit\n\nChange-Id: I8736bf9509240c7da5cafd0eaaf750c49adacbd2\nSigned-off-by: Elly Fong-Jones \u003cellyjones@chromium.org\u003e\nReviewed-on: https://gerrit.chromium.org/gerrit/33124\nReviewed-by: Will Drewry \u003cwad@chromium.org\u003e\n" }, { "commit": "33fb8d5bcbb6e3ceda8a1f6e57108f7ca2bea144", "tree": "a7911867774df10eac5b91a6a423cda43a2b2d79", "parents": [ "406e7612b7be2f712b84f9d45f12146722c9a0c3" ], "author": { "name": "Elly Jones", "email": "ellyjones@chromium.org", "time": "Tue May 15 17:37:34 2012" }, "committer": { "name": "Elly Jones", "email": "ellyjones@chromium.org", "time": "Wed May 23 21:27:43 2012" }, "message": "[openssl] uprev to 1.0.1c\n\nOnly real merge conflicts were ih /apps/verify.c, where a function argument\u0027s\ntype had changed.\n\nTEST\u003dsecurity_OpenSSL*,trybot\nBUG\u003dchromium-os:21100\n\nChange-Id: I9f3d8638cfcab7b4b3c2906a62a5d3a7b2ba3ec6\nSigned-off-by: Elly Jones \u003cellyjones@chromium.org\u003e\n" }, { "commit": "406e7612b7be2f712b84f9d45f12146722c9a0c3", "tree": "f65446692d6c02003cdd2e12fd8878209fb7cea1", "parents": [ "ac4e4fe8fcbe53b3d533078ddd011b7b88dad70f", "9d71c805e085fe0ebd02bd023290e5769e6a3ef5" ], "author": { "name": "Gerrit", "email": "chrome-bot@google.com", "time": "Mon May 14 19:39:45 2012" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit@gerrit.golo.chromium.org", "time": "Mon May 14 19:39:45 2012" }, "message": "Merge \"CHROMIUM: openssl: make \u0027verify\u0027 easier to use\"" }, { "commit": "9d71c805e085fe0ebd02bd023290e5769e6a3ef5", "tree": "63f43cf22815927a47cef88859793b88db620819", "parents": [ "f0d9d5444631cf260a0913408deab348f19a89b9" ], "author": { "name": "Elly Jones", "email": "ellyjones@chromium.org", "time": "Mon May 14 13:13:23 2012" }, "committer": { "name": "Elly Jones", "email": "ellyjones@chromium.org", "time": "Mon May 14 13:15:15 2012" }, "message": "CHROMIUM: openssl: make \u0027verify\u0027 easier to use\n\n1) Make it print a newline after the end of its error output; if there is no\n BIO error, the output is printed with no newline.\n2) Return a nonzero exit code if any cert failed to verify - 0 for all okay,\n 1 for a usage error, and 2 for a verification failure.\n\nThis patch was originally added in\nchromiumos-overlay:2ea51e44669062977689ff09a43ac8438f55673f\n\nBUG\u003dchromium-os:15581,chromium-os:21100\nTEST\u003dsecurity_OpenSSLRegression\n\nReviewed-on: http://gerrit.chromium.org/gerrit/2224\nChange-Id: Ibb6866634b5ae649441db87ffdb3ee5a2ebfb687\nSigned-off-by: Elly Jones \u003cellyjones@chromium.org\u003e\n" }, { "commit": "ac4e4fe8fcbe53b3d533078ddd011b7b88dad70f", "tree": "1555f10e9b304a8e5cfbc0c1da52362b3a14f047", "parents": [ "f0d9d5444631cf260a0913408deab348f19a89b9" ], "author": { "name": "Elly Jones", "email": "ellyjones@chromium.org", "time": "Mon Sep 19 18:52:44 2011" }, "committer": { "name": "Elly Jones", "email": "ellyjones@chromium.org", "time": "Fri May 11 20:23:24 2012" }, "message": "CHROMIUM: openssl: re-enable blacklisting.\n\nWe can add certs to the blacklist by serial (with \u0027serial \u003cn\u003e\u0027) or by sha256sum\nwith (\u0027sha256 \u003cn\u003e\u0027).\n\nTEST\u003dscript (added to package tests),security_OpenSSLBlacklist\nBUG\u003dchromium-os:20060\n\nChange-Id: I432e9b20387ff35e3e4d30eed0db69ce5aba59fa\nSigned-off-by: Elly Jones \u003cellyjones@chromium.org\u003e\n" }, { "commit": "f0d9d5444631cf260a0913408deab348f19a89b9", "tree": "0ca828ea0c1387b6983ec0f66a3fbb0044356502", "parents": [ "d21ee11b35a410dc687261bfc837822755e715ff" ], "author": { "name": "Gaurav Shah", "email": "gauravsh@chromium.org", "time": "Fri Apr 27 22:10:49 2012" }, "committer": { "name": "Gaurav Shah", "email": "gauravsh@chromium.org", "time": "Fri Apr 27 22:10:49 2012" }, "message": "BACKPORT: Apply fix for CVE-2012-2131\n\nFix is from http://cvs.openssl.org/chngview?cn\u003d22479\n\nThe previous fix for CVE-2012-221 did not handle the \u0027len\u0027 argument to\nBUF_MEM_grow and BUF_MEM_grow_clean being negative. This patch fixes that\nby rejecting a negative len parameter.\n\nBUG\u003dchromium-os:30134\nTEST\u003dpatched; emerge-amd64-generic openssl;\n chroot /build/amd64-generic/ /usr/bin/curl -Iv https://encrypted.google.com;\n chroot /build/amd64-generic/ /usr/bin/openssl s_client -connect encrypted.google.com:443 -debug;\n Outside the chroot:\n make all \u0026\u0026 make tests\n\nChange-Id: I4a45d21c4fdf611d52be7c12e5f623e9771394f1\n" }, { "commit": "d21ee11b35a410dc687261bfc837822755e715ff", "tree": "dc2d98ce268538369eb15f18ffdb5c3bf26c0af7", "parents": [ "23ca0f10bca3014d17b1444f7e22b10daf436e05" ], "author": { "name": "Will Drewry", "email": "wad@chromium.org", "time": "Thu Apr 19 00:56:29 2012" }, "committer": { "name": "Will Drewry", "email": "wad@chromium.org", "time": "Thu Apr 19 12:01:16 2012" }, "message": "BACKPORT: Apply fix for CVE-2012-2110\n\nasn1_d2i_read_bio in OpenSSL contains multiple integer errors that can\ncause memory corruption when parsing encoded ASN.1 data. This error can\nbe exploited on systems that parse untrusted data, such as X.509\ncertificates or RSA public keys.\n\nThis change fixes these integer errors.\n\nChange-Id: I681f02d8ef46e1015b34b41debf5f76e8fb5f29a\nSigned-off-by: Tavis Ormandy \u003ctaviso@chromium.org\nSigned-off-by: Will Drewry \u003cwad@chromium.org\u003e\nReviewed-by: Kees Cook \u003ckeescook@chromium.org\u003e\n\nBUG\u003dchromium-os:29675\nTEST\u003dpatched; emerge-amd64-generic openssl;\n chroot /build/amd64-generic/ /usr/bin/curl -Iv https://encrypted.google.com;\n chroot /build/amd64-generic/ /usr/bin/openssl s_client -connect encrypted.google.com:443 -debug;\n Outside the chroot:\n make all \u0026\u0026 make tests\n" }, { "commit": "23ca0f10bca3014d17b1444f7e22b10daf436e05", "tree": "098c37a1a496f7c847693a31c611c379dcf74d1e", "parents": [ "37b8c2fbc8e01f2fee53f3712a38deea74c11255" ], "author": { "name": "Elly Jones", "email": "ellyjones@chromium.org", "time": "Mon Feb 06 22:42:30 2012" }, "committer": { "name": "Elly Jones", "email": "ellyjones@chromium.org", "time": "Mon Feb 06 22:46:44 2012" }, "message": "openssl: move to 0.9.8t\n\nThis drops our patches to add blacklist support. I will re-add them shortly.\n\nBUG\u003dchromium-os:24755\nTEST\u003dbuild\n\nChange-Id: I70d3205f319bd5bb5816a7722cef1f0a993e3c2b\nSigned-off-by: Elly Jones \u003cellyjones@chromium.org\u003e\n" }, { "commit": "37b8c2fbc8e01f2fee53f3712a38deea74c11255", "tree": "1417e438a57557ae2258c53acc967ca8d40d0397", "parents": [ "733e7aea9050b37beda1d272d25923f591b3b626" ], "author": { "name": "Elly Jones", "email": "ellyjones@chromium.org", "time": "Mon Sep 19 18:52:44 2011" }, "committer": { "name": "Elly Jones", "email": "ellyjones@chromium.org", "time": "Tue Sep 20 19:14:25 2011" }, "message": "openssl: add blacklist-by-serial.\n\nThis lets us blacklist certs by serial as well as by sha256 fingerprint, and\nadds the ability to comment in the blacklist file.\n\nTEST\u003dscript (added to package tests)\nBUG\u003dchromium-os:20060\n\nChange-Id: I57e98aa856a14d76341f41050d38477238649f37\nSigned-off-by: Elly Jones \u003cellyjones@chromium.org\u003e\n" }, { "commit": "733e7aea9050b37beda1d272d25923f591b3b626", "tree": "3def4fa7c8cc3e1ab6a9b0b2fd5889988f6f9f25", "parents": [ "e88106447407759a5911acc3895dbe6307ab888b" ], "author": { "name": "Elly Jones", "email": "ellyjones@chromium.org", "time": "Thu Sep 15 18:18:01 2011" }, "committer": { "name": "Elly Jones", "email": "ellyjones@chromium.org", "time": "Thu Sep 15 18:18:01 2011" }, "message": "openssl: remove skip-patch-local-blacklist\n\nWith the logic and patch gone from the ebuild, there\u0027s no need for this file any\nmore.\n\nThis is phase 4 of a four-step dance:\n1) Make the patch conditional on a file in the openssl repo\n2) Apply the patch and touch the file to inhibit patching\n3) Remove the patching logic in the openssl ebuild\n4) Remove the file\n\nBUG\u003dchromium-os:20060\nTEST\u003dBuild\n\nChange-Id: I8234f7b7a3f4447b5a3d81ef4cee135f5deca258\nSigned-off-by: Elly Jones \u003cellyjones@chromium.org\u003e\n" }, { "commit": "e88106447407759a5911acc3895dbe6307ab888b", "tree": "19d4a281ea73a6934df4a562bb1712ae65025bb0", "parents": [ "17ce591f62c7a92b5d072dbc046faf1bb2a65f23" ], "author": { "name": "Elly Jones", "email": "ellyjones@chromium.org", "time": "Thu Sep 15 18:07:27 2011" }, "committer": { "name": "Elly Jones", "email": "ellyjones@chromium.org", "time": "Thu Sep 15 18:09:48 2011" }, "message": "openssl: add local blacklist support.\n\nAdd support for blacklisting certificates (even if otherwise trusted) by\nsha256sum. Cert fingerprints can be generated with \u0027openssl x509 -in $cert\n-fingerprint -sha256\u0027.\n\nThis is phase 2 of a four-step dance:\n1) Make the patch conditional on a file in the openssl repo\n2) Apply the patch and touch the file to inhibit patching\n3) Remove the patching logic in the openssl ebuild\n4) Remove the file\n\nBUG\u003dchromium-os:20060\nTEST\u003dAdhoc\nThis code was already tested as part of the openssl ebuild.\n\nChange-Id: I27b2c7c6709d4c4748f607d03f50a1c6a7cb6d7d\nSigned-off-by: Elly Jones \u003cellyjones@chromium.org\u003e\n" }, { "commit": "17ce591f62c7a92b5d072dbc046faf1bb2a65f23", "tree": "50be51717cbb83c01f4137eb1a7b19985d47909e", "parents": [ "8d586ae3db5076faa151032ee590ec931465bead" ], "author": { "name": "Elly Jones", "email": "ellyjones@chromium.org", "time": "Tue Sep 13 19:50:36 2011" }, "committer": { "name": "Elly Jones", "email": "ellyjones@chromium.org", "time": "Tue Sep 13 19:50:36 2011" }, "message": "openssl: add openssl 0.9.8r\n\nFrom openssl-0.9.8r.tar.gz (sha1sum a02411e5f4d463cac4a2a4a357a4a0b93bf65e72).\n\nTEST\u003dNone\nBUG\u003dchromium-os:20060\n\nChange-Id: I2c75cdec81111fd22b6800f6ad929399a1257e96\nSigned-off-by: Elly Jones \u003cellyjones@chromium.org\u003e\n" }, { "commit": "8d586ae3db5076faa151032ee590ec931465bead", "tree": "d6c80334993832999008ae123390ec6d6d692064", "parents": [], "author": { "name": "Elly Jones", "email": "ellyjones@chromium.org", "time": "Tue Sep 13 18:30:00 2011" }, "committer": { "name": "Elly Jones", "email": "ellyjones@chromium.org", "time": "Tue Sep 13 18:30:00 2011" }, "message": "Initial commit. Add PRESUBMIT.\n" } ] }