Gustavo Zacarias 04f99f9659 openssl: security bump to version 1.0.1k ...

Fixes:
CVE-2014-3571 - DTLS segmentation fault in dtls1_get_record
CVE-2015-0206 - DTLS memory leak in dtls1_buffer_record
CVE-2014-3569 - no-ssl3 configuration sets method to NULL
CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client]
CVE-2015-0204 - RSA silently downgrades to EXPORT_RSA [Client]
CVE-2015-0205 - DH client certificates accepted without verification
[Server]
CVE-2014-8275 - Certificate fingerprints can be modified
CVE-2014-3570 - Bignum squaring may produce incorrect results

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

2015-01-08 21:16:53 +01:00

..

001-do-not-build-docs.patch

package/openssl: rename patches to the new convention

2014-11-18 23:37:21 +01:00

002-dont-force-large-file.patch

package/openssl: rename patches to the new convention

2014-11-18 23:37:21 +01:00

003-cryptodev-Fix-issue-with-signature-generation.patch

package/openssl: rename patches to the new convention

2014-11-18 23:37:21 +01:00

004-musl-termios.patch

package/openssl: rename patches to the new convention

2014-11-18 23:37:21 +01:00

Config.in

…

openssl.hash

openssl: security bump to version 1.0.1k

2015-01-08 21:16:53 +01:00

openssl.mk

openssl: security bump to version 1.0.1k

2015-01-08 21:16:53 +01:00