dumalogiya
/
openwrt
2
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
36,110 Commits
2 Branches
0 Tags
653 MiB
v19.07.3_mercusys_ac12_duma
master
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '6926325829'
${ noResults }
Commit Graph

8 Commits (6926325829a2f58059ca8e614c892062fbbae393)

Author SHA1 Message Date
Magnus Kroken 6926325829 openssl: update to 1.0.2i 
Drop 302-fix_no_cmac_build.patch, it has been applied upstream.

Security fixes:
* (Severity: High) OCSP Status Request extension unbounded memory growth (CVE-2016-6304)
* (Severity: Moderate) SSL_peek() hang on empty record (CVE-2016-6305)
* 10 Low severity issues

Security advisory: https://www.openssl.org/news/secadv/20160922.txt
Changelog: https://www.openssl.org/news/cl102.txt

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
 8 years ago
Felix Fietkau 2911212962 openssl: update to 1.0.2f (fixes CVE-2016-0701, CVE-2015-3197) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 48531
 9 years ago
Hauke Mehrtens 82c491708b openssl: update to version 1.0.2e 
This fixes the following security problems:
* CVE-2015-3193
* CVE-2015-3194
* CVE-2015-3195)

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

SVN-Revision: 47726
 9 years ago
Jo-Philipp Wich 48d9137d31 openssl: update to v1.0.2d (CVE-2015-1793) 
During certificate verification, OpenSSL (starting from version 1.0.1n and
1.0.2b) will attempt to find an alternative certificate chain if the first
attempt to build such a chain fails. An error in the implementation of this
logic can mean that an attacker could cause certain checks on untrusted
certificates to be bypassed, such as the CA flag, enabling them to use a valid
leaf certificate to act as a CA and "issue" an invalid certificate.

This issue will impact any application that verifies certificates including
SSL/TLS/DTLS clients and SSL/TLS/DTLS servers using client authentication.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 46285
 9 years ago
Steven Barth 89c8d78d31 openssl: 1.0.2b (hey, we made it nearly 3 months this time!) 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 45946
 9 years ago
Steven Barth 2ca8a6cce4 openssl: bump to 1.0.2 
Fixes CVE-2014-3513, CVE-2014-3567, CVE-2014-3568, CVE-2014-3566

Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 44332
 10 years ago
Felix Fietkau c2bbaf439c openssl: update to 1.0.1f 
This version includes this changes:

    Don't include gmt_unix_time in TLS server and client random values
    Fix for TLS record tampering bug CVE-2013-4353
    Fix for TLS version checking bug CVE-2013-6449
    Fix for DTLS retransmission bug CVE-2013-6450

Signed-off-by: Peter Wagner <tripolar@gmx.at>

SVN-Revision: 39853
 10 years ago
Felix Fietkau 48db59fab7 move library packages to package/libs/ 
SVN-Revision: 33657
 12 years ago