diff options
| author | Maxin B. John <maxin.john@enea.com> | 2014-05-06 02:53:34 +0200 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2014-05-08 13:00:32 +0100 |
| commit | f3f7feceaebbc22aef3e36f961cee3722f2abda4 (patch) | |
| tree | e7b1747ad6dcec1e51642e2cdbcce194ae0c8ec0 /meta/recipes-connectivity/openssl/openssl_1.0.1g.bb | |
| parent | 28798f196360f76e0edba4d8057f863ec0318fd3 (diff) | |
| download | poky-f3f7feceaebbc22aef3e36f961cee3722f2abda4.tar.gz | |
openssl: fix CVE-2014-0198
A null pointer dereference bug was discovered in do_ssl3_write().
An attacker could possibly use this to cause OpenSSL to crash, resulting
in a denial of service.
https://access.redhat.com/security/cve/CVE-2014-0198
(From OE-Core rev: 580033721abbbb4302bc803ebc70c90e331e4587)
Signed-off-by: Maxin B. John <maxin.john@enea.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-connectivity/openssl/openssl_1.0.1g.bb')
| -rw-r--r-- | meta/recipes-connectivity/openssl/openssl_1.0.1g.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-connectivity/openssl/openssl_1.0.1g.bb b/meta/recipes-connectivity/openssl/openssl_1.0.1g.bb index 5ca29d007b..7c44546cbe 100644 --- a/meta/recipes-connectivity/openssl/openssl_1.0.1g.bb +++ b/meta/recipes-connectivity/openssl/openssl_1.0.1g.bb | |||
| @@ -34,6 +34,7 @@ SRC_URI += "file://configure-targets.patch \ | |||
| 34 | file://initial-aarch64-bits.patch \ | 34 | file://initial-aarch64-bits.patch \ |
| 35 | file://find.pl \ | 35 | file://find.pl \ |
| 36 | file://openssl-fix-des.pod-error.patch \ | 36 | file://openssl-fix-des.pod-error.patch \ |
| 37 | file://openssl-CVE-2014-0198-fix.patch \ | ||
| 37 | file://Makefiles-ptest.patch \ | 38 | file://Makefiles-ptest.patch \ |
| 38 | file://run-ptest \ | 39 | file://run-ptest \ |
| 39 | " | 40 | " |