[OpenWrt-Devel] [BB 14.07] openssl: Security update (3 CVEs)

[jow at openwrt.org]

The openssl package has been rebuilt and was uploaded to the Barrier
Breaker 14.07 repository due to multiple security issues.


VERSION

1.0.2d-1 => 1.0.2e-1


CHANGELOG

[Mon, 7 Dec 2015 16:05:54 +0000 e92cb47]

Openssl: update to v1.0.2e (CVE-2015-3193, CVE-2015-3194, CVE-2015-3195)


CHANGES

 package/libs/openssl/Makefile                    |    4 ++--
 .../openssl/patches/110-optimize-for-size.patch  |    2 +-
 .../libs/openssl/patches/150-no_engines.patch    |    2 +-
 .../openssl/patches/160-disable_doc_tests.patch  |    6 +++---
 .../patches/190-remove_timestamp_check.patch     |    2 +-
 .../openssl/patches/200-parallel_build.patch     |   14 +++++++-------
 6 files changed, 15 insertions(+), 15 deletions(-)


REFERENCES

 * http://openssl.org/news/secadv/20151203.txt
 * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3193
 * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194
 * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3195
 * http://git.openwrt.org/?p=14.07/openwrt.git;a=commit;h=e92cb472a3b9747b8763d3511c4a73947ef87f51
_______________________________________________
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel