Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PA-6132: Back-Port OpenSSL 1.1.1 for agent-runtime-7.x #794

Conversation

span786
Copy link
Contributor

@span786 span786 commented Feb 23, 2024

Applied CVE patches for openssl-1.1.1v :

  1. CVE-2023-5678
  2. CVE-2024-0727

Applied CVE patches for openssl-1.1.1k-7-fips:

  1. CVE-2023-3446 (Required for CVE-2023-5678 patch to apply without errors)
  2. CVE-2023-5678
  3. CVE-2024-0727

@span786 span786 requested review from a team as code owners February 23, 2024 10:32
@joshcooper
Copy link
Contributor

joshcooper commented Feb 23, 2024

@joshcooper
Copy link
Contributor

@span786 could you update your commit messages to describe which CVEs are fixed in each commit? Although I can see CVE-2023-5678 is fixed in 832549b, it's nice to know what was fixed when doing git log without having to scroll through the diff.

Copy link
Contributor

@joshcooper joshcooper left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@span786 span786 force-pushed the PA-6132-backport-open-ssl-3-0-13-fixes-to-open-ssl-1-1-1-for-agent-runtime-7-x branch 2 times, most recently from faca864 to 49d98f1 Compare February 26, 2024 07:11
@joshcooper
Copy link
Contributor

@span786 since commit c8e7f20 reverts 832549b and both are in this PR, can you drop both commits?

@span786 span786 force-pushed the PA-6132-backport-open-ssl-3-0-13-fixes-to-open-ssl-1-1-1-for-agent-runtime-7-x branch from 669a9dc to 1074c16 Compare February 27, 2024 05:14
@span786 span786 force-pushed the PA-6132-backport-open-ssl-3-0-13-fixes-to-open-ssl-1-1-1-for-agent-runtime-7-x branch from 1074c16 to f0431d8 Compare February 27, 2024 05:17
@span786
Copy link
Contributor Author

span786 commented Feb 27, 2024

Closing this PR. Raised a separate PR (#797) which contains clean commits

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants