diff options
| author | Yue Tao <Yue.Tao@windriver.com> | 2014-04-08 19:37:39 +0100 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2014-04-09 09:00:47 +0100 |
| commit | b27dba2efdfd8ab1506b6f29b800035a48395102 (patch) | |
| tree | dd3b85daa9f976b5927607ad5ec12bf89c8d0701 /meta-hob | |
| parent | 54c4e10a41ac2b637f46a4d05a6f7c5e4542b3a8 (diff) | |
| download | poky-b27dba2efdfd8ab1506b6f29b800035a48395102.tar.gz | |
Security Advisory - openssl - CVE-2013-6449
The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2
obtains a certain version number from an incorrect data structure, which
allows remote attackers to cause a denial of service (daemon crash) via
crafted traffic from a TLS 1.2 client.
(From OE-Core master rev: 3e0ac7357a962e3ef6595d21ec4843b078a764dd)
(From OE-Core rev: 0d3d2d7062a181e878435487c06e26c6547e492f)
Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta-hob')
0 files changed, 0 insertions, 0 deletions