* [Buildroot] [PATCH v2] openssl: bump to 1.0.0e
@ 2011-09-07 12:25 Yegor Yefremov
2011-09-12 21:56 ` Gustavo Zacarias
2011-09-12 22:34 ` Peter Korsgaard
0 siblings, 2 replies; 3+ messages in thread
From: Yegor Yefremov @ 2011-09-07 12:25 UTC (permalink / raw)
To: buildroot
Changes between 1.0.0d and 1.0.0e [6 Sep 2011]
*) Fix bug where CRLs with nextUpdate in the past are sometimes accepted
by initialising X509_STORE_CTX properly. (CVE-2011-3207)
[Kaspar Brand <ossl@velox.ch>]
*) Fix SSL memory handling for (EC)DH ciphersuites, in particular
for multi-threaded use of ECDH. (CVE-2011-3210)
[Adam Langley (Google)]
*) Fix x509_name_ex_d2i memory leak on bad inputs.
[Bodo Moeller]
*) Remove hard coded ecdsaWithSHA1 signature tests in ssl code and check
signature public key algorithm by using OID xref utilities instead.
Before this you could only use some ECC ciphersuites with SHA1 only.
[Steve Henson]
*) Add protection against ECDSA timing attacks as mentioned in the paper
by Billy Bob Brumley and Nicola Tuveri, see:
http://eprint.iacr.org/2011/232.pdf
[Billy Bob Brumley and Nicola Tuveri]
Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
---
v2: added changes between 1.0.0d and 1.0.0e
package/openssl/openssl.mk | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
Index: b/package/openssl/openssl.mk
===================================================================
--- a/package/openssl/openssl.mk
+++ b/package/openssl/openssl.mk
@@ -4,7 +4,7 @@
#
#############################################################
-OPENSSL_VERSION = 1.0.0d
+OPENSSL_VERSION = 1.0.0e
OPENSSL_SITE = http://www.openssl.org/source
OPENSSL_INSTALL_STAGING = YES
OPENSSL_DEPENDENCIES = zlib
^ permalink raw reply [flat|nested] 3+ messages in thread* [Buildroot] [PATCH v2] openssl: bump to 1.0.0e
2011-09-07 12:25 [Buildroot] [PATCH v2] openssl: bump to 1.0.0e Yegor Yefremov
@ 2011-09-12 21:56 ` Gustavo Zacarias
2011-09-12 22:34 ` Peter Korsgaard
1 sibling, 0 replies; 3+ messages in thread
From: Gustavo Zacarias @ 2011-09-12 21:56 UTC (permalink / raw)
To: buildroot
On Wed, 07 Sep 2011 14:25:02 +0200, Yegor Yefremov wrote:
> Changes between 1.0.0d and 1.0.0e [6 Sep 2011]
>
> *) Fix bug where CRLs with nextUpdate in the past are sometimes
> accepted
> by initialising X509_STORE_CTX properly. (CVE-2011-3207)
> [Kaspar Brand <ossl@velox.ch>]
>
> *) Fix SSL memory handling for (EC)DH ciphersuites, in particular
> for multi-threaded use of ECDH. (CVE-2011-3210)
> [Adam Langley (Google)]
>
> *) Fix x509_name_ex_d2i memory leak on bad inputs.
> [Bodo Moeller]
>
> *) Remove hard coded ecdsaWithSHA1 signature tests in ssl code and
> check
> signature public key algorithm by using OID xref utilities
> instead.
> Before this you could only use some ECC ciphersuites with SHA1
> only.
> [Steve Henson]
>
> *) Add protection against ECDSA timing attacks as mentioned in the
> paper
> by Billy Bob Brumley and Nicola Tuveri, see:
>
> http://eprint.iacr.org/2011/232.pdf
>
> [Billy Bob Brumley and Nicola Tuveri]
>
> Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com>
Acked-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
^ permalink raw reply [flat|nested] 3+ messages in thread
* [Buildroot] [PATCH v2] openssl: bump to 1.0.0e
2011-09-07 12:25 [Buildroot] [PATCH v2] openssl: bump to 1.0.0e Yegor Yefremov
2011-09-12 21:56 ` Gustavo Zacarias
@ 2011-09-12 22:34 ` Peter Korsgaard
1 sibling, 0 replies; 3+ messages in thread
From: Peter Korsgaard @ 2011-09-12 22:34 UTC (permalink / raw)
To: buildroot
>>>>> "Yegor" == Yegor Yefremov <yegor_sub1@visionsystems.de> writes:
Yegor> Changes between 1.0.0d and 1.0.0e [6 Sep 2011]
Committed, thanks.
--
Bye, Peter Korsgaard
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2011-09-12 22:34 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2011-09-07 12:25 [Buildroot] [PATCH v2] openssl: bump to 1.0.0e Yegor Yefremov
2011-09-12 21:56 ` Gustavo Zacarias
2011-09-12 22:34 ` Peter Korsgaard
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox