openssl: Address CVE-2014-0160
PATCH 1/1 openssl: Address CVE-2014-0160
This was the suggested fix for those unable to update to the new 1.0.1g version. Since we are so close to our release, we should hold of on the update until 1.7
Signed-off-by Saul Wold <[email protected]>
--- meta/recipes-connectivity/openssl/openssl_1.0.1e.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
meta/recipes-connectivity/openssl/openssl_1.0.1e.bb +1 -1
@@ -4,7 +4,7 @@ require openssl.inc # if they are available. DEPENDS += "cryptodev-linux" -CFLAG += "-DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS" +CFLAG += "-DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS -DOPENSSL_NO_HEARTBEATS" PR = "${INC_PR}.0"
Signature · 1 line
1.8.3.1
Quoted 14 lines · Saul Wold
This was the suggested fix for those unable to update to the new 1.0.1g version. Since we are so close to our release, we should hold of on the update until 1.7
Signed-off-by Saul Wold <[email protected]>--- meta/recipes-connectivity/openssl/openssl_1.0.1e.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)meta/recipes-connectivity/openssl/openssl_1.0.1e.bb +0
-0
meta/recipes-connectivity/openssl/openssl_1.0.1e.bb require openssl.inc · line 10
Quoted 8 lines
meta/recipes-connectivity/openssl/openssl_1.0.1e.bb +1
-1@@ -4,7 +4,7 @@ require openssl.inc # if they are available. DEPENDS += "cryptodev-linux" -CFLAG += "-DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS" +CFLAG += "-DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS -DOPENSSL_NO_HEARTBEATS" PR = "${INC_PR}.0"
Between 1.0.1e and f there are 3 CVEs. 'g' adds two more.
This is a very low risk change, as the API and other components are stable.
--Mark