diff options
| author | Gustavo Zacarias <gustavo@zacarias.com.ar> | 2014-10-16 09:57:47 -0300 |
|---|---|---|
| committer | Peter Korsgaard <peter@korsgaard.com> | 2014-10-17 14:17:48 +0200 |
| commit | 326781940f5d399ba54c6f312a14b46b7201624d (patch) | |
| tree | 41857f7e93bce46112970def13e6e8cf5544ae7f | |
| parent | 20cff9643c603c11ee3f0247b26c184b56ca3228 (diff) | |
| download | buildroot-326781940f5d399ba54c6f312a14b46b7201624d.tar.gz buildroot-326781940f5d399ba54c6f312a14b46b7201624d.zip | |
openssl: security bump to version 1.0.1j
Fixes:
CVE-2014-3513 - SRTP memory leak
CVE-2014-3567 - Session ticket memory leak
CVE-2014-3568 - Build option no-ssl3 is incomplete
And adds SSL3 fallback protection against POODLE.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| -rw-r--r-- | package/openssl/openssl.hash | 8 | ||||
| -rw-r--r-- | package/openssl/openssl.mk | 2 |
2 files changed, 5 insertions, 5 deletions
diff --git a/package/openssl/openssl.hash b/package/openssl/openssl.hash index aa45a763fc..22b15292c6 100644 --- a/package/openssl/openssl.hash +++ b/package/openssl/openssl.hash @@ -1,4 +1,4 @@ -# From https://www.openssl.org/source/openssl-1.0.1i.tar.gz.md5 -# From https://www.openssl.org/source/openssl-1.0.1i.tar.gz.sha1 -md5 c8dc151a671b9b92ff3e4c118b174972 openssl-1.0.1i.tar.gz -sha1 74eed314fa2c93006df8d26cd9fc630a101abd76 openssl-1.0.1i.tar.gz +# From https://www.openssl.org/source/openssl-1.0.1j.tar.gz.md5 +# From https://www.openssl.org/source/openssl-1.0.1j.tar.gz.sha1 +md5 f7175c9cd3c39bb1907ac8bba9df8ed3 openssl-1.0.1j.tar.gz +sha1 cff86857507624f0ad42d922bb6f77c4f1c2b819 openssl-1.0.1j.tar.gz diff --git a/package/openssl/openssl.mk b/package/openssl/openssl.mk index 4911034078..7c1c7f033b 100644 --- a/package/openssl/openssl.mk +++ b/package/openssl/openssl.mk @@ -4,7 +4,7 @@ # ################################################################################ -OPENSSL_VERSION = 1.0.1i +OPENSSL_VERSION = 1.0.1j OPENSSL_SITE = http://www.openssl.org/source OPENSSL_LICENSE = OpenSSL or SSLeay OPENSSL_LICENSE_FILES = LICENSE |
