]> code.ossystems Code Review - openembedded-core.git/commit
openssl: Security fix CVE-2016-0800
authorArmin Kuster <akuster@mvista.com>
Wed, 2 Mar 2016 07:37:21 +0000 (23:37 -0800)
committerJoshua Lock <joshua.g.lock@intel.com>
Thu, 3 Mar 2016 10:42:51 +0000 (10:42 +0000)
commit6c06c42594539bec4c360c8cc28ebee8a338e6b4
treeff696df8148ce55f40e603b333622455f8718848
parent12520d7f729fe3d07c2f94b813994718edb2d987
openssl: Security fix CVE-2016-0800

CVE-2016-0800 SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN)

https://www.openssl.org/news/secadv/20160301.txt

Signed-off-by: Armin Kuster <akuster@mvista.com>
Not required for master, an update to 1.0.2g has been submitted.
Backport from jethro.
Signed-off-by: Joshua Lock <joshua.g.lock@intel.com>
meta/recipes-connectivity/openssl/openssl/CVE-2016-0800.patch [new file with mode: 0644]
meta/recipes-connectivity/openssl/openssl/CVE-2016-0800_2.patch [new file with mode: 0644]
meta/recipes-connectivity/openssl/openssl/CVE-2016-0800_3.patch [new file with mode: 0644]
meta/recipes-connectivity/openssl/openssl_1.0.2d.bb