Re: [OE-core] [kirkstone][PATCHv2] openssl: fix CVE-2023-6237 Excessive time spent checking invalid RSA public keys

2024-01-18 Thread Randy MacLeod via lists.openembedded.org
On 2024-01-17 11:09 a.m., Steve Sakoman via lists.openembedded.org wrote: On Wed, Jan 17, 2024 at 1:47 AM Hitendra Prajapati via lists.openembedded.org wrote: Upstream-Status: Backport fromhttps://github.com/openssl/openssl/commit/e09fc1d746a4fd15bb5c3d7bbbab950aadd005db Signed-off-by:

Re: [OE-core] [kirkstone][PATCHv2] openssl: fix CVE-2023-6237 Excessive time spent checking invalid RSA public keys

2024-01-17 Thread Steve Sakoman
On Wed, Jan 17, 2024 at 1:47 AM Hitendra Prajapati via lists.openembedded.org wrote: > > Upstream-Status: Backport from > https://github.com/openssl/openssl/commit/e09fc1d746a4fd15bb5c3d7bbbab950aadd005db > > Signed-off-by: Hitendra Prajapati > --- > .../openssl/openssl/CVE-2023-6237.patch

[OE-core] [kirkstone][PATCHv2] openssl: fix CVE-2023-6237 Excessive time spent checking invalid RSA public keys

2024-01-17 Thread Hitendra Prajapati via lists.openembedded.org
Upstream-Status: Backport from https://github.com/openssl/openssl/commit/e09fc1d746a4fd15bb5c3d7bbbab950aadd005db Signed-off-by: Hitendra Prajapati --- .../openssl/openssl/CVE-2023-6237.patch | 127 ++ .../openssl/openssl_3.0.12.bb | 3 +- 2 files