diff options
| author | Siddharth <sdoshi@mvista.com> | 2024-06-04 23:42:36 +0530 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2024-06-14 05:19:22 -0700 |
| commit | fdfdd7b3192a26db62f76ff0781b52f20e3ac29a (patch) | |
| tree | a28d6b0537e7d17a417c7a4a07d1d7950cabc7db /scripts/lib/resulttool/manualexecution.py | |
| parent | ef6b1510d5a3adc49fd876765b280425e3d3d05a (diff) | |
| download | poky-fdfdd7b3192a26db62f76ff0781b52f20e3ac29a.tar.gz | |
openssl: Upgrade 3.2.1 -> 3.2.2
CVE's Fixed by upgrade:
CVE-2024-4741: Fixed potential use after free after SSL_free_buffers() is called
CVE-2024-4603: Fixed an issue where checking excessively long DSA keys or parameters may be very slow
CVE-2024-2511: Fixed unbounded memory growth with session handling in TLSv1.3
Bugs Fixed by upgrade:
#23560: Fixed bug where SSL_export_keying_material() could not be used with QUIC connections
Removed backports of CVE-2024-2511, CVE-2024-4603 and bti.patch as they
are already fixed.
Detailed Information:
https://github.com/openssl/openssl/blob/openssl-3.2/CHANGES.md#changes-between-321-and-322-4-jun-2024
(From OE-Core rev: f99c9346c225b862cc26923e823c35484beb797f)
Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'scripts/lib/resulttool/manualexecution.py')
0 files changed, 0 insertions, 0 deletions