Skip to content

Fix CVEs for openssl

[email protected] openembedded-core 1 version New

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest2 patches 0 repliesNew

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/2openssl: fix CVE-2018-0734 for both 1.0.2p and 1.1.1meta/recipes-connectivity/openssl/openssl/0002-fix-CVE-2018-0734.patch meta/recipes-connectivity/openssl/openssl10/0001-fix-CVE-2018-0734.patch meta/recipes-connectivity/openssl/openssl10_1.0.2p.bb +1 more+143 -00 replies
2/2openssl: fix CVE-2018-0735 for 1.1.1meta/recipes-connectivity/openssl/openssl/0003-fix-CVE-2018-0735.patch meta/recipes-connectivity/openssl/openssl_1.1.1.bb+51 -00 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH 0/2] Fix CVEs for openssl

From: Kai Kang <[email protected]>

Fix CVEs for openssl:

1.0.2p:
* CVE-2018-0734

1.1.1:
* CVE-2018-0734
* CVE-2018-0735

The following changes since commit 411184bfaa6269bf2926bb2a576c0922958cbbb3:

xserver-xorg: fix CVE-2018-14665 (2018-11-01 13:27:26 +0000)

are available in the Git repository at:

git://git.pokylinux.org/poky-contrib kangkai/cve
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/cve

Kai Kang (2):
openssl: fix CVE-2018-0734 for both 1.0.2p and 1.1.1
openssl: fix CVE-2018-0735 for 1.1.1

 .../openssl/0002-fix-CVE-2018-0734.patch      | 108 ++++++++++++++++++
 .../openssl/0003-fix-CVE-2018-0735.patch      |  50 ++++++++
 .../openssl10/0001-fix-CVE-2018-0734.patch    |  33 ++++++
 .../openssl/openssl10_1.0.2p.bb               |   1 +
 .../openssl/openssl_1.1.1.bb                  |   2 +
 5 files changed, 194 insertions(+)
 create mode 100644 meta/recipes-connectivity/openssl/openssl/0002-fix-CVE-2018-0734.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/0003-fix-CVE-2018-0735.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl10/0001-fix-CVE-2018-0734.patch
Signature · 1 line
2.18.0