Re: [OE-core] [PATCH][dizzy] openssl: CVE-2015-3194, CVE-2015-3195

2015-12-17 Thread akuster808
merged to staging. g...@git.yoctoproject.org/poky-contrib.git akuster/dizzy-next thanks, Armin On 12/14/2015 02:25 AM, Sona Sarmadi wrote: > Fixes following vulnerabilities: > Certificate verify crash with missing PSS parameter (CVE-2015-3194) > X509_ATTRIBUTE memory leak (CVE-2015-3195) > >

[OE-core] [PATCH][dizzy] openssl: CVE-2015-3194, CVE-2015-3195

2015-12-15 Thread Sona Sarmadi
Fixes following vulnerabilities: Certificate verify crash with missing PSS parameter (CVE-2015-3194) X509_ATTRIBUTE memory leak (CVE-2015-3195) References: https://openssl.org/news/secadv/20151203.txt http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194

Re: [OE-core] [PATCH][dizzy] openssl: CVE-2015-3194, CVE-2015-3195

2015-12-15 Thread Sona Sarmadi
-- > From: openembedded-core-boun...@lists.openembedded.org > [mailto:openembedded-core-boun...@lists.openembedded.org] On Behalf > Of Sona Sarmadi > Sent: den 14 december 2015 11:25 > To: openembedded-core@lists.openembedded.org > Subject: [OE-core] [PATCH][dizzy] openssl: C

Re: [OE-core] [PATCH][dizzy] openssl: CVE-2015-3194, CVE-2015-3195

2015-12-15 Thread Fan Xin
@lists.openembedded.org Subject: [OE-core] [PATCH][dizzy] openssl: CVE-2015-3194, CVE-2015-3195 Fixes following vulnerabilities: Certificate verify crash with missing PSS parameter (CVE-2015-3194) X509_ATTRIBUTE memory leak (CVE-2015-3195) References: https://openssl.org/news/secadv/20151203.txt http

[OE-core] [PATCH][dizzy] openssl: CVE-2015-3194, CVE-2015-3195

2015-12-14 Thread Sona Sarmadi
Fixes following vulnerabilities: Certificate verify crash with missing PSS parameter (CVE-2015-3194) X509_ATTRIBUTE memory leak (CVE-2015-3195) References: https://openssl.org/news/secadv/20151203.txt http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194