diff options
| author | Gustavo Zacarias <gustavo@zacarias.com.ar> | 2015-01-08 16:18:22 -0300 |
|---|---|---|
| committer | Thomas Petazzoni <thomas.petazzoni@free-electrons.com> | 2015-01-08 21:16:53 +0100 |
| commit | 04f99f96597375245312d6730ab9a09f9b9e90f5 (patch) | |
| tree | 61b0dae50f80bbe7a6a2508f0cf0b70eee50cc76 /package/python-tornado | |
| parent | fe95534bb4989462334c0607d4a1cae8de88b231 (diff) | |
| download | buildroot-04f99f96597375245312d6730ab9a09f9b9e90f5.tar.gz buildroot-04f99f96597375245312d6730ab9a09f9b9e90f5.zip | |
openssl: security bump to version 1.0.1k
Fixes:
CVE-2014-3571 - DTLS segmentation fault in dtls1_get_record
CVE-2015-0206 - DTLS memory leak in dtls1_buffer_record
CVE-2014-3569 - no-ssl3 configuration sets method to NULL
CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client]
CVE-2015-0204 - RSA silently downgrades to EXPORT_RSA [Client]
CVE-2015-0205 - DH client certificates accepted without verification
[Server]
CVE-2014-8275 - Certificate fingerprints can be modified
CVE-2014-3570 - Bignum squaring may produce incorrect results
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Diffstat (limited to 'package/python-tornado')
0 files changed, 0 insertions, 0 deletions
