Skip to contentSkip to conversation

openssl: security bump to version 1.0.1j

PATCH New Gustavo Zacarias 2 participants 2 messages Oct 16, 2014 – Oct 17, 2014

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 openssl: security bump to version 1.0.1j

Fixes:
CVE-2014-3513 - SRTP memory leak CVE-2014-3567 - Session ticket memory leak CVE-2014-3568 - Build option no-ssl3 is incomplete And adds SSL3 fallback protection against POODLE.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/openssl/openssl.hash | 8 ++++----
 package/openssl/openssl.mk   | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)
package/openssl/openssl.hash +4 -4
index aa45a76..22b1529 100644
@@ -1,4 +1,4 @@
-# From https://www.openssl.org/source/openssl-1.0.1i.tar.gz.md5
-# From https://www.openssl.org/source/openssl-1.0.1i.tar.gz.sha1
-md5	c8dc151a671b9b92ff3e4c118b174972	openssl-1.0.1i.tar.gz
-sha1	74eed314fa2c93006df8d26cd9fc630a101abd76	openssl-1.0.1i.tar.gz
+# From https://www.openssl.org/source/openssl-1.0.1j.tar.gz.md5
+# From https://www.openssl.org/source/openssl-1.0.1j.tar.gz.sha1
+md5	f7175c9cd3c39bb1907ac8bba9df8ed3	openssl-1.0.1j.tar.gz
+sha1	cff86857507624f0ad42d922bb6f77c4f1c2b819	openssl-1.0.1j.tar.gz
package/openssl/openssl.mk +1 -1
index 4911034..7c1c7f0 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-OPENSSL_VERSION = 1.0.1i
+OPENSSL_VERSION = 1.0.1j
 OPENSSL_SITE = http://www.openssl.org/source
 OPENSSL_LICENSE = OpenSSL or SSLeay
 OPENSSL_LICENSE_FILES = LICENSE
Signature · 1 line
2.0.4
#1 lore raw

PATCH 1/1 openssl: security bump to version 1.0.1j

Quoted 9 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Gustavo" == Gustavo Zacarias <[email protected]> writes:

Fixes:
CVE-2014-3513 - SRTP memory leak CVE-2014-3567 - Session ticket memory leak CVE-2014-3568 - Build option no-ssl3 is incomplete And adds SSL3 fallback protection against POODLE.

Signed-off-by Gustavo Zacarias <[email protected]>

Committed, thanks.

Signature · 1 line
Bye, Peter Korsgaard