[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #31844 [Applications/Tor Browser]: OpenSSL 1.1.1d fails to compile for some platforms/architectures
#31844: OpenSSL 1.1.1d fails to compile for some platforms/architectures
-------------------------------------------------+-------------------------
Reporter: gk | Owner: tbb-
| team
Type: defect | Status:
| needs_review
Priority: Very High | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: tbb-rbm, TorBrowserTeam201909R, | Actual Points:
tbb-9.0-must-alpha |
Parent ID: | Points: 0.5
Reviewer: | Sponsor:
-------------------------------------------------+-------------------------
Changes (by boklm):
* status: new => needs_review
* keywords: tbb-rbm, TorBrowserTeam201909, tbb-9.0-must-alpha => tbb-rbm,
TorBrowserTeam201909R, tbb-9.0-must-alpha
Comment:
There are two patches for review in branch `bug_31844_v3`:
https://gitweb.torproject.org/user/boklm/tor-browser-
build.git/commit/?h=bug_31844_v3&id=7bab743e199ea3d3ba8ca3f5ba5289609035f37c
One is to stop using `--prefix`, so that openssl does not look for config
file in a user-writable directory (which is `CVE-2019-1552`, although I am
not sure if Tor is using openssl in a way where this matters).
The other is for fixing the use of unquoted paths. I should also submit
this patch to https://github.com/openssl/openssl/issues/9520.
However, the linux64 build is not yet fixed.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31844#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs