generic-poky/meta/recipes-connectivity/openssl
Yue Tao 7f9dd3ff42 Security Advisory - openssl - CVE-2013-6449
The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2
obtains a certain version number from an incorrect data structure, which
allows remote attackers to cause a denial of service (daemon crash) via
crafted traffic from a TLS 1.2 client.

(From OE-Core master rev: 3e0ac7357a962e3ef6595d21ec4843b078a764dd)

(From OE-Core rev: 33b6441429603b82cfca3d35e68e47e1ca021fd7)

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-04-09 09:00:40 +01:00
..
openssl-1.0.1e Security Advisory - openssl - CVE-2013-6449 2014-04-09 09:00:40 +01:00
ocf-linux.inc recipes: Fix ALLOW_EMPTY with no package specified 2013-03-05 13:14:52 +00:00
ocf-linux_20120127.bb ocf-linux: Update to 20120127 2012-12-03 14:47:56 +00:00
openssl.inc openssl: use PACKAGECONFIG to disable perl bits 2014-02-09 11:04:15 +00:00
openssl_1.0.1e.bb Security Advisory - openssl - CVE-2013-6449 2014-04-09 09:00:40 +01:00