From: Denys Dmytriyenko <[email protected]> crda uses python-m2crypto, which uses SSLv2, but latest OpenSSL CVE for DROWN attack disables SSLv2 calls as being vulnerable. Until those dependencies are fixed, don't pull the latest OpenSSL CVE fix for now.
Signed-off-by: Denys Dmytriyenko <[email protected]> --- configs/arago-fido-config.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configs/arago-fido-config.txt b/configs/arago-fido-config.txt index cae923b..6d840ee 100644 --- a/configs/arago-fido-config.txt +++ b/configs/arago-fido-config.txt @@ -7,6 +7,6 @@ meta-qt5,git://github.com/meta-qt5/meta-qt5.git,jethro,HEAD,layers= meta-openembedded,git://git.openembedded.org/meta-openembedded,fido,HEAD,layers=meta-networking:meta-ruby:meta-python:meta-oe meta-ti,git://arago-project.org/git/meta-ti.git,fido,HEAD,layers= meta-linaro,git://git.linaro.org/openembedded/meta-linaro.git,fido,HEAD,layers=meta-linaro-toolchain -oe-core,git://git.openembedded.org/openembedded-core,fido,HEAD,layers=meta +oe-core,git://git.openembedded.org/openembedded-core,fido,12520d7f729fe3d07c2f94b813994718edb2d987,layers=meta OECORELAYERCONF=./sample-files/bblayers.conf.sample OECORELOCALCONF=./sample-files/local-arago64.conf.sample -- 2.2.0 _______________________________________________ meta-arago mailing list [email protected] http://arago-project.org/cgi-bin/mailman/listinfo/meta-arago
