poky/meta
Sona Sarmadi 1930286e3f openssl: CVE-2015-3194, CVE-2015-3195
Fixes following vulnerabilities:
Certificate verify crash with missing PSS parameter (CVE-2015-3194)
X509_ATTRIBUTE memory leak (CVE-2015-3195)

References:
https://openssl.org/news/secadv/20151203.txt
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3195

Upstream patches:
CVE-2015-3194:
https://git.openssl.org/?p=openssl.git;a=commit;h=
d8541d7e9e63bf5f343af24644046c8d96498c17

CVE-2015-3195:
https://git.openssl.org/?p=openssl.git;a=commit;h=
b29ffa392e839d05171206523e84909146f7a77c

(From OE-Core rev: 09c3a0f01572a6a65e9f87ce16817ee7de3296f1)

Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-30 12:03:14 +00:00
..
classes allarch: Force TARGET_*FLAGS variable values 2016-01-30 12:03:13 +00:00
conf layer.conf: Add missing dependency for allarch package initramfs-framework 2016-01-30 12:03:13 +00:00
files files/toolchain-shar-template.sh: fix replace target_sdk_dir twice in environment setup file 2015-04-17 22:39:31 +01:00
lib rootfs.py: show intercept script output in log.do_rootfs 2015-09-19 11:51:34 +01:00
recipes-bsp grub-efi: Add backslash lost from previous commit 2015-08-20 21:42:31 +01:00
recipes-connectivity openssl: CVE-2015-3194, CVE-2015-3195 2016-01-30 12:03:14 +00:00
recipes-core libxml2: CVE-2015-8035 2016-01-30 12:03:14 +00:00
recipes-devtools rsync: backport libattr checking patch 2016-01-30 12:03:13 +00:00
recipes-extended unzip: CVE-2015-7696, CVE-2015-7697 2016-01-30 12:03:14 +00:00
recipes-gnome gdk-pixbuf: use ptest-gnome 2014-12-31 10:18:52 +00:00
recipes-graphics mesa: update --with-llvm-shared-libs configure option 2015-07-20 20:54:33 +01:00
recipes-kernel linux-dtb.inc: drop unused DTB_NAME variable from do_install 2016-01-30 12:03:14 +00:00
recipes-lsb4 libpod-plainer-perl: Upgrade to 1.04 2014-07-17 12:28:52 +01:00
recipes-multimedia libsndfile: Security Advisory - libsndfile - CVE-2014-9496 2015-07-20 20:54:32 +01:00
recipes-qt qt4: add patch for BMP denial-of-service vulnerability 2015-07-20 20:54:32 +01:00
recipes-rt hwlatdetect: fix PV 2014-06-17 10:23:53 +01:00
recipes-sato packagegroup: Move inherit packagegroup to after PACKAGE_ARCH 2014-08-25 08:57:44 +01:00
recipes-support libtasn1: CVE-2015-3622 2016-01-30 12:03:13 +00:00
site site/common-darwin: Really fix common-darwin typo 2014-08-18 10:00:26 +01:00
COPYING.GPLv2
COPYING.MIT
recipes.txt