Alexandru Moise 8ba5b9eae3 openssl: CVE: CVE-2017-3731 ...

If an SSL/TLS server or client is running on a 32-bit host, and a
specific cipher is being used, then a truncated packet can cause that
server or client  to perform an out-of-bounds read, usually resulting
in a crash.

Backported from:
https://github.com/openssl/openssl/commit/8e20499629b6bcf868d0072c7011e590b5c2294d
https://github.com/openssl/openssl/commit/2198b3a55de681e1f3c23edb0586afe13f438051

* CVE: CVE-2017-3731

Upstream-status: Backport

(From OE-Core rev: 1fe1cb3e6e03b4f7f0d30b2b67edc8809a18fe70)

Signed-off-by: Alexandru Moise <alexandru.moise@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-02-08 12:00:21 +00:00

..

avahi

avahi-ui: use PACKAGECONFIG for gtk features

2016-08-01 11:47:10 +01:00

bind

bind: fix two CVEs

2016-10-15 10:01:44 +01:00

bluez5

bluez5: remove duplicated udev setting from FILES_${PN}

2016-09-24 07:30:09 +01:00

connman

connman: fix bad file descriptor initialisation

2016-11-16 10:37:56 +00:00

dhcp

dhcp: dhcrelay.service cannot start successfully

2016-08-04 15:22:22 +01:00

iproute2

iproute2: update 4.6.0 -> 4.7.0

2016-08-17 10:35:41 +01:00

irda-utils

irda-utils: Fix header inclusions

2016-01-24 09:40:29 +00:00

iw

iw: update to version 4.7

2016-06-03 13:13:25 +01:00

libnss-mdns

libnss-mdns: Check for nss.h before using

2016-02-02 14:44:16 +00:00

libpcap

libpcap: control ipv6 support based on DISTRO_FEATURES

2016-09-03 23:45:53 +01:00

mobile-broadband-provider-info

mobile-broadband-provider-info: update to tagged release 20151214

2015-12-28 09:25:16 +00:00

neard

neard: upgrade to 0.16

2016-07-20 10:28:44 +01:00

nfs-utils

nfs-utils: fix protocol minor version fall-back

2017-01-11 17:21:41 +00:00

ofono

ofono: remove duplicated udev setting from FILES_${PN}

2016-09-24 07:30:09 +01:00

openssh

openssh: fix CVE-2016-8858

2017-01-11 17:21:40 +00:00

openssl

openssl: CVE: CVE-2017-3731

2017-02-08 12:00:21 +00:00

portmap

portmap: Point to tirpc headers and libraries on musl

2016-01-24 09:40:30 +00:00

ppp

ppp: fix building with linux-4.8

2016-10-15 10:01:43 +01:00

ppp-dialin

meta: set proper S value

2015-01-23 11:36:27 +00:00

resolvconf

resolvconf: upgrade to 1.79

2016-06-15 08:35:00 +01:00

socat

socat: remove the hardcoded shifting offset

2016-07-08 09:57:25 +01:00

wireless-tools

meta: more removals of redunant FILES_${PN}-dbg

2015-12-16 11:56:30 +00:00

wpa-supplicant

wpa_supplicant: Security Advisory-CVE-2016-4477

2016-09-23 14:56:39 +01:00