]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
openssl: upgrade 1.1.1l -> 1.1.1n
authorOvidiu Panait <ovidiu.panait@windriver.com>
Sun, 20 Mar 2022 09:29:13 +0000 (11:29 +0200)
committerAnuj Mittal <anuj.mittal@intel.com>
Thu, 26 May 2022 01:42:41 +0000 (09:42 +0800)
commite21e33e2d868b37812575ddbc94aed5f5121786e
treea44e92815ae1e34efb8b348f6beb280327e60dfa
parentd730fbc26993c2187c908e57a465536a508e9ee2
openssl: upgrade 1.1.1l -> 1.1.1n

Upgrade openssl 1.1.1l -> 1.1.1n to fix CVE-2022-0778:
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65

This also fixes an evp_extra_test ptest failure introduced by openssl-1.1.1m:
"""
not ok 19 - test_signatures_with_engine
ERROR: (ptr) 'e = ENGINE_by_id(engine_id) != NULL' failed @ ../openssl-1.1.1m/test/evp_extra_test.c:1890
0x0
not ok 20 - test_cipher_with_engine
<snip>
"""

The ptest change is already present in Yocto master since oe-core
commit 5cd40648b0ba ("openssl: upgrade to 3.0.1").

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
meta/recipes-connectivity/openssl/openssl_1.1.1n.bb [moved from meta/recipes-connectivity/openssl/openssl_1.1.1l.bb with 98% similarity]