aboutsummaryrefslogtreecommitdiffstats
path: root/meta/recipes-connectivity/openssl/openssl-1.0.2m/debian1.0.2/soname.patch
diff options
context:
space:
mode:
authorStefan Agner <stefan.agner@toradex.com>2017-11-18 09:53:54 +0100
committerRichard Purdie <richard.purdie@linuxfoundation.org>2017-12-02 11:24:34 +0000
commita200115c769eff4b9b0241d54ed5ad86da08fdbc (patch)
tree58b37184ce207fde53b417c5350bdea586f8750e /meta/recipes-connectivity/openssl/openssl-1.0.2m/debian1.0.2/soname.patch
parentdac6515fcd23ea9cde5308c1d08a7a928efbb4d6 (diff)
downloadopenembedded-core-a200115c769eff4b9b0241d54ed5ad86da08fdbc.tar.gz
openembedded-core-a200115c769eff4b9b0241d54ed5ad86da08fdbc.tar.bz2
openembedded-core-a200115c769eff4b9b0241d54ed5ad86da08fdbc.zip
openssl10: Upgrade 1.0.2l -> 1.0.2m
Deals with two CVEs: * bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736) * Malformed X.509 IPAddressFamily could cause OOB read (CVE-2017-3735) Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Acked-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Ross Burton <ross.burton@intel.com>
Diffstat (limited to 'meta/recipes-connectivity/openssl/openssl-1.0.2m/debian1.0.2/soname.patch')
-rw-r--r--meta/recipes-connectivity/openssl/openssl-1.0.2m/debian1.0.2/soname.patch15
1 files changed, 15 insertions, 0 deletions
diff --git a/meta/recipes-connectivity/openssl/openssl-1.0.2m/debian1.0.2/soname.patch b/meta/recipes-connectivity/openssl/openssl-1.0.2m/debian1.0.2/soname.patch
new file mode 100644
index 0000000000..09dd9eaf86
--- /dev/null
+++ b/meta/recipes-connectivity/openssl/openssl-1.0.2m/debian1.0.2/soname.patch
@@ -0,0 +1,15 @@
+Upstream-Status: Inappropriate
+
+Index: openssl-1.0.2d/crypto/opensslv.h
+===================================================================
+--- openssl-1.0.2d.orig/crypto/opensslv.h
++++ openssl-1.0.2d/crypto/opensslv.h
+@@ -88,7 +88,7 @@ extern "C" {
+ * should only keep the versions that are binary compatible with the current.
+ */
+ # define SHLIB_VERSION_HISTORY ""
+-# define SHLIB_VERSION_NUMBER "1.0.0"
++# define SHLIB_VERSION_NUMBER "1.0.2"
+
+
+ #ifdef __cplusplus