← Back to branch summary

~ubuntu-branches/debian/squeeze/ntp/squeeze-201010051545

« back to all changes in this revision

Viewing changes to scripts/mkver.in

  • Committer: Bazaar Package Importer
  • Author(s): Kurt Roeckx
  • Date: 2009-01-05 21:10:03 UTC
  • mfrom: (1.2.4 upstream)
  • Revision ID: james.westby@ubuntu.com-20090105211003-mh6zc3um4k1uhsj7
Tags: 1:4.2.4p4+dfsg-8
It did not properly check the return value of EVP_VerifyFinal
which results in an malformed DSA signature being treated as
a good signature rather than as an error.  (CVE-2009-0021)

Show diffs side-by-side

added added

removed removed

Lines of Context:
scripts/mkver.in
10
10
 *) ConfStr="$ConfStr@$CSET" ;;
11
11
esac
12
12
 
13
 
case "@LIBRSAREF@" in
14
 
 '')
15
 
    case "@AUTOKEY@" in
16
 
     '') ;;
17
 
     *) ConfStr="${ConfStr}-a" ;;
18
 
    esac
19
 
    ;;
20
 
 *)  ConfStr="${ConfStr}-r" ;;
 
13
case "@LCRYPTO@" in
 
14
 '') ;;
 
15
 -lcrypto)
 
16
    ConfStr="${ConfStr}-o" ;;
 
17
 *) ConfStr="${ConfStr}-?" ;;
21
18
esac
22
19
 
23
 
ConfStr="$ConfStr `LC_TIME=C date`"
 
20
ConfStr="$ConfStr `LC_TIME=C TZ= date`"
24
21
 
25
22
if [ ! -f .version ]; then
26
23
  echo 0 > .version