]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
openssl: Upgrade 1.1.0f -> 1.1.0g
authorStefan Agner <stefan.agner@toradex.com>
Sat, 18 Nov 2017 08:53:56 +0000 (09:53 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Sat, 2 Dec 2017 11:24:35 +0000 (11:24 +0000)
commitedf9686be28fc321886d48043bcb4ef5b2c00c1d
tree566f11afbd5b9c8e9fb508c7dc3ab2a02bbdc439
parent977db3843b629112539d3eb766c845127c0de497
openssl: Upgrade 1.1.0f -> 1.1.0g

Deals with two CVEs:
* bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
* Malformed X.509 IPAddressFamily could cause OOB read (CVE-2017-3735)

Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Acked-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Ross Burton <ross.burton@intel.com>
meta/recipes-connectivity/openssl/openssl_1.1.0g.bb [moved from meta/recipes-connectivity/openssl/openssl_1.1.0f.bb with 96% similarity]