diff options
| author | Ross Burton <ross.burton@intel.com> | 2017-03-14 12:49:47 +0000 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2017-03-14 14:42:18 +0000 |
| commit | 500a5e44a9d6bf9d795f4d1cf28333ed71f0e07b (patch) | |
| tree | 071ede91b2326343c95f604e56707ec5f2770496 /meta/classes/cpan_build.bbclass | |
| parent | 9e404449ab6cfc94fd3fe33d21feed07f3717192 (diff) | |
| download | poky-500a5e44a9d6bf9d795f4d1cf28333ed71f0e07b.tar.gz | |
openssl: actually apply Use-SHA256-not-MD5-as-default-digest.patch
This patch was added to fix a CVE, but wasn't actually added to SRC_URI:
CVE: CVE-2004-2761
The MD5 Message-Digest Algorithm is not collision resistant,
which makes it easier for context-dependent attackers to
conduct spoofing attacks, as demonstrated by attacks on the
use of MD5 in the signature algorithm of an X.509 certificate.
(From OE-Core rev: 8791800f84321b3f46772bc2d9e4f754e6213946)
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/classes/cpan_build.bbclass')
0 files changed, 0 insertions, 0 deletions