diff options
| author | Yi Zhao <yi.zhao@windriver.com> | 2016-11-16 18:07:33 +0800 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2017-01-11 17:21:41 +0000 |
| commit | ebbaae90053a6028fb5f6c767a7ace812138016c (patch) | |
| tree | 9216525386fcd46bfe7c140197d275e00343f825 /meta/recipes-connectivity/bluez5 | |
| parent | 545a4d2e56b46cfd49769d6384674c755b4dca69 (diff) | |
| download | poky-ebbaae90053a6028fb5f6c767a7ace812138016c.tar.gz | |
openssl: Security fix CVE-2016-7055
There is a carry propagating bug in the Broadwell-specific Montgomery
multiplication procedure that handles input lengths divisible by, but
longer than 256 bits.
External References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7055
https://www.openssl.org/news/secadv/20161110.txt
Patch from:
https://github.com/openssl/openssl/commit/57c4b9f6a2f800b41ce2836986fe33640f6c3f8a
(From OE-Core rev: 07cfa9e2bceb07f3baf40681f8c57f4d3da0aee5)
(From OE-Core rev: 090c2ff292a4d92142c3f33c7517be69d9c16c24)
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-connectivity/bluez5')
0 files changed, 0 insertions, 0 deletions