Skip to content

openssl: three CVE patches

[email protected] openembedded-core 1 version New

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest3 patches 0 repliesNew

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/3Security Advisory - openssl - CVE-2013-4353meta/recipes-connectivity/openssl/openssl-1.0.1e/0001-Fix-for-TLS-record-tampering-bug-CVE-2013-4353.patch meta/recipes-connectivity/openssl/openssl_1.0.1e.bb+32 -00 replies
2/3Security Advisory - openssl - CVE-2013-6450meta/recipes-connectivity/openssl/openssl-1.0.1e/0001-Fix-DTLS-retransmission-from-previous-session.patch meta/recipes-connectivity/openssl/openssl_1.0.1e.bb+82 -00 replies
3/3Security Advisory - openssl - CVE-2013-6449meta/recipes-connectivity/openssl/openssl-1.0.1e/0001-Use-version-in-SSL_METHOD-not-SSL-structure.patch meta/recipes-connectivity/openssl/openssl_1.0.1e.bb+34 -00 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH 0/3] openssl: three CVE patches

From: Jackie Huang <[email protected]>

The following changes since commit 43d717df16312a8f0333aff6b8b037b4b9d51bf3:

toaster.bbclass: update buildstats event data (2014-03-25 14:19:57 +0000)

are available in the git repository at:

git://git.pokylinux.org/poky-contrib jhuang0/r_port60_openssl_140326-1
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=jhuang0/r_port60_openssl_140326-1

Yue Tao (3):
Security Advisory - openssl - CVE-2013-4353
Security Advisory - openssl - CVE-2013-6450
Security Advisory - openssl - CVE-2013-6449

 ...DTLS-retransmission-from-previous-session.patch |   81 ++++++++++++++++++++
 ...or-TLS-record-tampering-bug-CVE-2013-4353.patch |   31 ++++++++
 ...e-version-in-SSL_METHOD-not-SSL-structure.patch |   33 ++++++++
 .../recipes-connectivity/openssl/openssl_1.0.1e.bb |    3 +
 4 files changed, 148 insertions(+)
 create mode 100644 meta/recipes-connectivity/openssl/openssl-1.0.1e/0001-Fix-DTLS-retransmission-from-previous-session.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl-1.0.1e/0001-Fix-for-TLS-record-tampering-bug-CVE-2013-4353.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl-1.0.1e/0001-Use-version-in-SSL_METHOD-not-SSL-structure.patch
Signature · 1 line
1.7.9.5