Skip to contentSkip to conversation

New: Update OpenSSL to Version 1.1.1g to patch CVE-2020-1967

Buildroot bugzilla at busybox.net 1 participant 2 messages Apr 21, 2020 – Apr 22, 2020

lore
Share & tools
lore
#0 lore raw

https://bugs.busybox.net/show_bug.cgi?id=12796

Bug ID: 12796
Summary: Update OpenSSL to Version 1.1.1g to patch
CVE-2020-1967
Product: buildroot
Version: 2020.02.1
Hardware: All
OS: Linux
Status: NEW
Severity: critical
Priority: P5
Component: Outdated package
Assignee: unassigned at buildroot.uclibc.org
Reporter: pmorici at dev295.com
CC: buildroot at uclibc.org
Target Milestone: ---

See:

    https://www.openssl.org/news/secadv/20200421.txt

Recent versions of Buildroot use version 1.1.1f

Signature · 2 lines
You are receiving this mail because:
You are on the CC list for the bug.
#1 lore raw

[Buildroot] [Bug 12796] Update OpenSSL to Version 1.1.1g to patch CVE-2020-1967

https://bugs.busybox.net/show_bug.cgi?id=12796

Thomas Petazzoni <[email protected]> changed:

What |Removed |Added
----------------------------------------------------------------------------

             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #1 from Thomas Petazzoni <[email protected]> --- Thanks, it's already fixed by
https://git.buildroot.org/buildroot/commit/?id=849aee4f8805cce89376c0cd1ce23721436a90ac.
As it is a security bump, it will be backported to our 2020.02.x LTS branch.

Signature · 2 lines
You are receiving this mail because:
You are on the CC list for the bug.