[AUTO-CHERRYPICK] Bug fix in patch CVE-2024-5535 in openssl - branch main (#9961)

Co-authored-by: suresh-thelkar <suresh.thelkar@yahoo.com>
Co-authored-by: Suresh Thelkar <sthelkar@microsoft.com>

Author: 3 people

SPECS/openssl/openssl.spec

@@ -4,7 +4,7 @@
 Summary:        Utilities from the general purpose cryptography library with TLS implementation
 Name:           openssl
 Version:        1.1.1k
-Release:        34%{?dist}
+Release:        35%{?dist}
 License:        OpenSSL
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -181,6 +181,7 @@ cp %{SOURCE4} test/
 %patch41 -p1
 %patch42 -p1
 %patch43 -p1
+%patch44 -p1
 
 %build
 # Add -Wa,--noexecstack here so that libcrypto's assembler modules will be
@@ -370,6 +371,9 @@ rm -f %{buildroot}%{_sysconfdir}/pki/tls/ct_log_list.cnf.dist
 %postun libs -p /sbin/ldconfig
 
 %changelog
+* Mon Jul 29 2024 Suresh Thelkar <sthelkar@microsoft.com> - 1.1.1k-35
+- Bug fix for the Patch CVE-2024-5535
+
 * Mon Jul 22 2024 Suresh Thelkar <sthelkar@microsoft.com> - 1.1.1k-34
 - Patch CVE-2024-5535
 

toolkit/resources/manifests/package/pkggen_core_aarch64.txt

@@ -165,11 +165,11 @@ texinfo-6.8-1.cm2.aarch64.rpm
 gtk-doc-1.33.2-1.cm2.noarch.rpm
 autoconf-2.71-3.cm2.noarch.rpm
 automake-1.16.5-1.cm2.noarch.rpm
-openssl-1.1.1k-34.cm2.aarch64.rpm
-openssl-devel-1.1.1k-34.cm2.aarch64.rpm
-openssl-libs-1.1.1k-34.cm2.aarch64.rpm
-openssl-perl-1.1.1k-34.cm2.aarch64.rpm
-openssl-static-1.1.1k-34.cm2.aarch64.rpm
+openssl-1.1.1k-35.cm2.aarch64.rpm
+openssl-devel-1.1.1k-35.cm2.aarch64.rpm
+openssl-libs-1.1.1k-35.cm2.aarch64.rpm
+openssl-perl-1.1.1k-35.cm2.aarch64.rpm
+openssl-static-1.1.1k-35.cm2.aarch64.rpm
 libcap-2.60-2.cm2.aarch64.rpm
 libcap-devel-2.60-2.cm2.aarch64.rpm
 debugedit-5.0-2.cm2.aarch64.rpm

toolkit/resources/manifests/package/pkggen_core_x86_64.txt

@@ -165,11 +165,11 @@ texinfo-6.8-1.cm2.x86_64.rpm
 gtk-doc-1.33.2-1.cm2.noarch.rpm
 autoconf-2.71-3.cm2.noarch.rpm
 automake-1.16.5-1.cm2.noarch.rpm
-openssl-1.1.1k-34.cm2.x86_64.rpm
-openssl-devel-1.1.1k-34.cm2.x86_64.rpm
-openssl-libs-1.1.1k-34.cm2.x86_64.rpm
-openssl-perl-1.1.1k-34.cm2.x86_64.rpm
-openssl-static-1.1.1k-34.cm2.x86_64.rpm
+openssl-1.1.1k-35.cm2.x86_64.rpm
+openssl-devel-1.1.1k-35.cm2.x86_64.rpm
+openssl-libs-1.1.1k-35.cm2.x86_64.rpm
+openssl-perl-1.1.1k-35.cm2.x86_64.rpm
+openssl-static-1.1.1k-35.cm2.x86_64.rpm
 libcap-2.60-2.cm2.x86_64.rpm
 libcap-devel-2.60-2.cm2.x86_64.rpm
 debugedit-5.0-2.cm2.x86_64.rpm

toolkit/resources/manifests/package/toolchain_aarch64.txt

@@ -270,12 +270,12 @@ npth-1.6-4.cm2.aarch64.rpm
 npth-debuginfo-1.6-4.cm2.aarch64.rpm
 npth-devel-1.6-4.cm2.aarch64.rpm
 ntsysv-1.20-4.cm2.aarch64.rpm
-openssl-1.1.1k-34.cm2.aarch64.rpm
-openssl-debuginfo-1.1.1k-34.cm2.aarch64.rpm
-openssl-devel-1.1.1k-34.cm2.aarch64.rpm
-openssl-libs-1.1.1k-34.cm2.aarch64.rpm
-openssl-perl-1.1.1k-34.cm2.aarch64.rpm
-openssl-static-1.1.1k-34.cm2.aarch64.rpm
+openssl-1.1.1k-35.cm2.aarch64.rpm
+openssl-debuginfo-1.1.1k-35.cm2.aarch64.rpm
+openssl-devel-1.1.1k-35.cm2.aarch64.rpm
+openssl-libs-1.1.1k-35.cm2.aarch64.rpm
+openssl-perl-1.1.1k-35.cm2.aarch64.rpm
+openssl-static-1.1.1k-35.cm2.aarch64.rpm
 p11-kit-0.24.1-1.cm2.aarch64.rpm
 p11-kit-debuginfo-0.24.1-1.cm2.aarch64.rpm
 p11-kit-devel-0.24.1-1.cm2.aarch64.rpm

toolkit/resources/manifests/package/toolchain_x86_64.txt

@@ -276,12 +276,12 @@ npth-1.6-4.cm2.x86_64.rpm
 npth-debuginfo-1.6-4.cm2.x86_64.rpm
 npth-devel-1.6-4.cm2.x86_64.rpm
 ntsysv-1.20-4.cm2.x86_64.rpm
-openssl-1.1.1k-34.cm2.x86_64.rpm
-openssl-debuginfo-1.1.1k-34.cm2.x86_64.rpm
-openssl-devel-1.1.1k-34.cm2.x86_64.rpm
-openssl-libs-1.1.1k-34.cm2.x86_64.rpm
-openssl-perl-1.1.1k-34.cm2.x86_64.rpm
-openssl-static-1.1.1k-34.cm2.x86_64.rpm
+openssl-1.1.1k-35.cm2.x86_64.rpm
+openssl-debuginfo-1.1.1k-35.cm2.x86_64.rpm
+openssl-devel-1.1.1k-35.cm2.x86_64.rpm
+openssl-libs-1.1.1k-35.cm2.x86_64.rpm
+openssl-perl-1.1.1k-35.cm2.x86_64.rpm
+openssl-static-1.1.1k-35.cm2.x86_64.rpm
 p11-kit-0.24.1-1.cm2.x86_64.rpm
 p11-kit-debuginfo-0.24.1-1.cm2.x86_64.rpm
 p11-kit-devel-0.24.1-1.cm2.x86_64.rpm