[Buildroot] [PATCH] openssl: security bump to version 1.0.2h

Peter Korsgaard peter at korsgaard.com
Wed May 4 20:44:56 UTC 2016


>>>>> "Gustavo" == Gustavo Zacarias <gustavo at zacarias.com.ar> writes:

 > Fixes:
 > CVE-2016-2105 - Fix EVP_EncodeUpdate overflow
 > CVE-2016-2106 - Fix EVP_EncryptUpdate overflow
 > CVE-2016-2107 - Prevent padding oracle in AES-NI CBC MAC check
 > CVE-2016-2109 - Prevent ASN.1 BIO excessive memory allocation
 > CVE-2016-2176 - EBCDIC overread

 > Signed-off-by: Gustavo Zacarias <gustavo at zacarias.com.ar>

Committed, thanks.

-- 
Bye, Peter Korsgaard


More information about the buildroot mailing list