Skip to content

OpenSSL CVE fixes for the daisy branch

Paul Eggleton openembedded-core 1 version New

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest5 patches 0 repliesNew

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/5openssl: fix CVE-2014-0195meta/recipes-connectivity/openssl/openssl/openssl-1.0.1e-cve-2014-0195.patch meta/recipes-connectivity/openssl/openssl_1.0.1g.bb+41 -00 replies
2/5openssl: use upstream fix for CVE-2014-0198meta/recipes-connectivity/openssl/openssl/openssl-1.0.1e-cve-2014-0198.patch meta/recipes-connectivity/openssl/openssl/openssl-CVE-2014-0198-fix.patch meta/recipes-connectivity/openssl/openssl_1.0.1g.bb+39 -240 replies
3/5openssl: fix CVE-2014-0221meta/recipes-connectivity/openssl/openssl/openssl-1.0.1e-cve-2014-0221.patch meta/recipes-connectivity/openssl/openssl_1.0.1g.bb+39 -00 replies
4/5openssl: fix CVE-2014-0224meta/recipes-connectivity/openssl/openssl/openssl-1.0.1e-cve-2014-0224.patch meta/recipes-connectivity/openssl/openssl_1.0.1g.bb+104 -00 replies
5/5openssl: fix CVE-2014-3470meta/recipes-connectivity/openssl/openssl/openssl-1.0.1e-cve-2014-3470.patch meta/recipes-connectivity/openssl/openssl_1.0.1g.bb+32 -00 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [daisy][PATCH 0/5] OpenSSL CVE fixes for the daisy branch

NOTE: These patches needs to be applied *after* the OpenSSL CVE-2010-5298 patch fix in Saul's pending daisy series (which is in the branch for this pull request or it would not work otherwise.)

The following changes since commit:

openssl: add openssl-CVE-2010-5298.patch SRC_URI (2014-06-09 14:11:54 +0100)

are available in the git repository at:

git://git.openembedded.org/openembedded-core-contrib paule/openssl-daisy
http://cgit.openembedded.org/cgit.cgi/openembedded-core-contrib/log/?h=paule/openssl-daisy

Paul Eggleton (5):
openssl: fix CVE-2014-0195
openssl: use upstream fix for CVE-2014-0198
openssl: fix CVE-2014-0221
openssl: fix CVE-2014-0224
openssl: fix CVE-2014-3470

 .../openssl/openssl-1.0.1e-cve-2014-0195.patch     |  40 ++++++++
 .../openssl/openssl-1.0.1e-cve-2014-0198.patch     |  38 ++++++++
 .../openssl/openssl-1.0.1e-cve-2014-0221.patch     |  38 ++++++++
 .../openssl/openssl-1.0.1e-cve-2014-0224.patch     | 103 +++++++++++++++++++++
 .../openssl/openssl-1.0.1e-cve-2014-3470.patch     |  31 +++++++
 .../openssl/openssl-CVE-2014-0198-fix.patch        |  23 -----
 .../recipes-connectivity/openssl/openssl_1.0.1g.bb |   6 +-
 7 files changed, 255 insertions(+), 24 deletions(-)
 create mode 100644 meta/recipes-connectivity/openssl/openssl/openssl-1.0.1e-cve-2014-0195.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/openssl-1.0.1e-cve-2014-0198.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/openssl-1.0.1e-cve-2014-0221.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/openssl-1.0.1e-cve-2014-0224.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/openssl-1.0.1e-cve-2014-3470.patch
 delete mode 100644 meta/recipes-connectivity/openssl/openssl/openssl-CVE-2014-0198-fix.patch
Signature · 1 line
1.9.3