]> rtime.felk.cvut.cz Git - coffee/buildroot.git/commit
package/openssl: security bump to version 1.0.2m
authorBernd Kuhls <bernd.kuhls@t-online.de>
Fri, 3 Nov 2017 18:33:59 +0000 (19:33 +0100)
committerPeter Korsgaard <peter@korsgaard.com>
Sun, 26 Nov 2017 19:11:13 +0000 (20:11 +0100)
commite6c01fe3bbce3856017cd72638767a61879c27b9
treeb8f7b35cdd89108e559581bb51265ac956d98f8c
parent88454ec6e24edd030e9fe1bd09ef199e03767e99
package/openssl: security bump to version 1.0.2m

Fixes the following CVEs:
bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
Malformed X.509 IPAddressFamily could cause OOB read (CVE-2017-3735)

Release notes: https://www.openssl.org/news/secadv/20171102.txt

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
(cherry picked from commit 63023c407fe601d7c349fbff1ef1fbb246b1e288)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/openssl/openssl.hash
package/openssl/openssl.mk