linux/poky.git/meta/recipes-connectivity/openssl/openssl-1.0.2l/debian/no-rpath.patch, branch masterMirror of git.yoctoproject.org/pokyhttps://git.enea.com/cgit/linux/poky.git/atom?h=master2017-12-02T11:25:32+00:00openssl10: Upgrade 1.0.2l -> 1.0.2m2017-12-02T11:25:32+00:00Stefan Agnerstefan.agner@toradex.com2017-11-18T08:53:54+00:00urn:sha1:0d1964a78e2bcfc195a1f81edb548cc4a6514af9
Deals with two CVEs:
* bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
* Malformed X.509 IPAddressFamily could cause OOB read (CVE-2017-3735)
(From OE-Core rev: a200115c769eff4b9b0241d54ed5ad86da08fdbc)
Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Acked-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
openssl10: rename back to openssl and make it the default via PREFERRED_VERSION2017-08-19T21:15:39+00:00Alexander Kanavinalexander.kanavin@linux.intel.com2017-08-18T19:31:29+00:00urn:sha1:7a4361c506ac24bafcf294f498d00278f11c3bd4
openssl 1.1 broke 3rd party layers a lot more than was expected; let's flip
the switch at the start of next development cycle.
Add a PROVIDES = "openssl10" to openssl 1.0 recipe; any dependency that is
not compatible with 1.1 should use that in its DEPENDS, as the 1.0
recipe will later be renamed back to openssl10. This does not always work:
http://lists.openembedded.org/pipermail/openembedded-core/2017-August/140957.html
but for many recipes it does.
(From OE-Core rev: 5585103c195104e85ed7ac1455bef91b2e88a04d)
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>