]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
openssl: upgrade 1.1.1s to 1.1.1t
authorHugo SIMELIERE <hsimeliere.opensource@witekio.com>
Fri, 3 Mar 2023 15:42:46 +0000 (16:42 +0100)
committerSteve Sakoman <steve@sakoman.com>
Mon, 6 Mar 2023 14:54:35 +0000 (04:54 -1000)
commit22de5ecae3ebb04a4bab05010c04b205c52ee888
tree5ed1372a0295acea8f54366cdecec1b0b7445f19
parent9eb027bebb19bfb0fb136169e865ca269890fa6f
openssl: upgrade 1.1.1s to 1.1.1t

Major changes between OpenSSL 1.1.1s and OpenSSL 1.1.1t [7 Feb 2023]
* Fixed X.400 address type confusion in X.509 GeneralName (CVE-2023-0286)
* Fixed Use-after-free following BIO_new_NDEF (CVE-2023-0215)
* Fixed Double free after calling PEM_read_bio_ex (CVE-2022-4450)
* Fixed Timing Oracle in RSA Decryption (CVE-2022-4304)

Signed-off-by: Hugo SIMELIERE <hsimeliere.opensource@witekio.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-connectivity/openssl/openssl_1.1.1t.bb [moved from meta/recipes-connectivity/openssl/openssl_1.1.1s.bb with 98% similarity]