]> code.ossystems Code Review - openembedded-core.git/commit
openssl: Security fix CVE-2016-7055
authorYi Zhao <yi.zhao@windriver.com>
Wed, 16 Nov 2016 10:07:33 +0000 (18:07 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 11 Jan 2017 11:46:40 +0000 (11:46 +0000)
commit090c2ff292a4d92142c3f33c7517be69d9c16c24
treeac6abf1e83cb226cdfdccb1129f03d3cbdb6a5d2
parent0066e5c5559009f250b6e5953d5830db2c8769e1
openssl: Security fix CVE-2016-7055

There is a carry propagating bug in the Broadwell-specific Montgomery
multiplication procedure that handles input lengths divisible by, but
longer than 256 bits.

External References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7055
https://www.openssl.org/news/secadv/20161110.txt

Patch from:
https://github.com/openssl/openssl/commit/57c4b9f6a2f800b41ce2836986fe33640f6c3f8a

(From OE-Core rev: 07cfa9e2bceb07f3baf40681f8c57f4d3da0aee5)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta/recipes-connectivity/openssl/openssl/CVE-2016-7055.patch [new file with mode: 0644]
meta/recipes-connectivity/openssl/openssl_1.0.2j.bb