Sona Sarmadi 1930286e3f openssl: CVE-2015-3194, CVE-2015-3195 ...

Fixes following vulnerabilities:
Certificate verify crash with missing PSS parameter (CVE-2015-3194)
X509_ATTRIBUTE memory leak (CVE-2015-3195)

References:
https://openssl.org/news/secadv/20151203.txt
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3195

Upstream patches:
CVE-2015-3194:
https://git.openssl.org/?p=openssl.git;a=commit;h=
d8541d7e9e63bf5f343af24644046c8d96498c17

CVE-2015-3195:
https://git.openssl.org/?p=openssl.git;a=commit;h=
b29ffa392e839d05171206523e84909146f7a77c

(From OE-Core rev: 09c3a0f01572a6a65e9f87ce16817ee7de3296f1)

Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2016-01-30 12:03:14 +00:00

..

openssl

openssl: CVE-2015-3194, CVE-2015-3195

2016-01-30 12:03:14 +00:00

openssl_1.0.1p.bb

openssl: CVE-2015-3194, CVE-2015-3195

2016-01-30 12:03:14 +00:00

openssl.inc

openssl: fix hard paths in native openssl

2015-02-11 17:40:05 +00:00