Yue Tao 2b09b26cb7 Security Advisory - openssl - CVE-2013-4353 ... The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next Protocol Negotiation record in a TLS handshake. (From OE-Core master rev: 35ccce7002188c8270d2fead35f9763b22776877) (From OE-Core rev: a5060594208de172cb31ad406b34b25decd061e4) Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>		2014-04-09 09:00:40 +01:00
..
debian	openssl: update range information in man-section.patch	2013-04-16 12:06:40 +01:00
0001-Fix-for-TLS-record-tampering-bug-CVE-2013-4353.patch	Security Advisory - openssl - CVE-2013-4353	2014-04-09 09:00:40 +01:00
configure-targets.patch	openssl: Upgrade to v1.0.1e	2013-04-09 13:16:53 +01:00
engines-install-in-libdir-ssl.patch	openssl: Upgrade to v1.0.1e	2013-04-09 13:16:53 +01:00
find.pl	openssl: Upgrade to v1.0.1e	2013-04-09 13:16:53 +01:00
fix-cipher-des-ede3-cfb1.patch	openssl: Add fix for cipher des-ede3-cfb1	2013-06-17 16:45:36 +01:00
oe-ldflags.patch	openssl: Upgrade to v1.0.1e	2013-04-09 13:16:53 +01:00
openssl-avoid-NULL-pointer-dereference-in-EVP_DigestInit_ex.patch	openssl: avoid NULL pointer dereference in three places	2013-08-26 11:47:17 +01:00
openssl-avoid-NULL-pointer-dereference-in-dh_pub_encode.patch	openssl: avoid NULL pointer dereference in three places	2013-08-26 11:47:17 +01:00
openssl-fix-doc.patch	openssl: fix documentation build errors with Perl 5.18 pod2man	2013-05-30 21:10:22 +01:00
openssl-fix-link.patch	openssl: Upgrade to v1.0.1e	2013-04-09 13:16:53 +01:00
openssl_fix_for_x32.patch	openssl: Upgrade to v1.0.1e	2013-04-09 13:16:53 +01:00
shared-libs.patch	openssl: Upgrade to v1.0.1e	2013-04-09 13:16:53 +01:00