]> code.ossystems Code Review - openembedded-core.git/commit
openssl: Security fix CVE-2016-7055
authorYi Zhao <yi.zhao@windriver.com>
Wed, 16 Nov 2016 10:07:33 +0000 (18:07 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 23 Nov 2016 11:02:30 +0000 (11:02 +0000)
commit07cfa9e2bceb07f3baf40681f8c57f4d3da0aee5
treefadd6fea1346941dc0cdfef5a3cf55e2ae212ec5
parente1bad14231115f3b1a2bf844ef5b2022c648b55d
openssl: Security fix CVE-2016-7055

There is a carry propagating bug in the Broadwell-specific Montgomery
multiplication procedure that handles input lengths divisible by, but
longer than 256 bits.

External References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7055
https://www.openssl.org/news/secadv/20161110.txt

Patch from:
https://github.com/openssl/openssl/commit/57c4b9f6a2f800b41ce2836986fe33640f6c3f8a

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
meta/recipes-connectivity/openssl/openssl/CVE-2016-7055.patch [new file with mode: 0644]
meta/recipes-connectivity/openssl/openssl_1.0.2j.bb