diff options
| author | Paul Eggleton <paul.eggleton@linux.intel.com> | 2014-06-09 16:51:20 +0100 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2014-06-10 17:12:20 +0100 |
| commit | 3428e6e0e4bc573a03557d6d82ffc8e8ac4ccb23 (patch) | |
| tree | 3cd697d21dac5937c5f53308714f0ba5c1ddd2bc /meta/recipes-connectivity/openssl/openssl/fix-cipher-des-ede3-cfb1.patch | |
| parent | 96ca98462194e3907085bf3e7052e70de5fa3012 (diff) | |
| download | poky-3428e6e0e4bc573a03557d6d82ffc8e8ac4ccb23.tar.gz | |
openssl: fix CVE-2014-3470
http://www.openssl.org/news/secadv_20140605.txt
Anonymous ECDH denial of service (CVE-2014-3470)
OpenSSL TLS clients enabling anonymous ECDH ciphersuites are subject to a
denial of service attack.
(Patch borrowed from Fedora.)
(From OE-Core rev: 595f2fc7dd642d729ab61f20a6719a2cc6c80426)
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-connectivity/openssl/openssl/fix-cipher-des-ede3-cfb1.patch')
0 files changed, 0 insertions, 0 deletions