openssl: update to 1.0.2m

don't set no-ssl3-method when CONFIG_OPENSSL_WITH_SSL3 di disabled otherwise the compile breaks with this error:

../libssl.so: undefined reference to `SSLv3_client_method'

Fixes CVE: CVE-2017-3735, CVE-2017-3736

Signed-off-by: Peter Wagner <tripolar@gmx.at>
This commit is contained in:
Peter Wagner
2017-11-10 00:35:35 +01:00
committed by Alexander Couzens
parent 421754191d
commit cda8ec7dd8
2 changed files with 4 additions and 4 deletions

View File

@@ -1,6 +1,6 @@
--- a/Configure
+++ b/Configure
@@ -2128,6 +2128,11 @@ EOF
@@ -2130,6 +2130,11 @@ EOF
close(OUT);
}