openembedded-core.git/meta/recipes-connectivity, branch dora

openssl: Fix for CVE-2014-3568

2014-11-06T11:42:22+00:00

Fix for no-ssl3 configuration option

This patch is a backport from OpenSSL_1.0.1j.

Signed-off-by: Sona Sarmadi 
Signed-off-by: Richard Purdie

openssl: Fix for CVE-2014-3567

2014-11-06T11:42:22+00:00

Fix for session tickets memory leak.

This patch is a backport from OpenSSL_1.0.1j.

Signed-off-by: Sona Sarmadi 
Signed-off-by: Richard Purdie

openssl: Fix for CVE-2014-3513

2014-11-06T11:42:22+00:00

Fix for SRTP Memory Leak

This patch is a backport from OpenSSL_1.0.1j.

Signed-off-by: Sona Sarmadi 
Signed-off-by: Richard Purdie

openssl: Fix for CVE-2014-3566

2014-11-06T11:42:22+00:00

OpenSSL_1.0.1 SSLV3 POODLE VULNERABILITY (CVE-2014-3566)

This patch is a backport from OpenSSL_1.0.1j.

Signed-off-by: Sona Sarmadi 
Signed-off-by: Richard Purdie

openssl: fix for CVE-2010-5298

2014-06-10T16:05:53+00:00

Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL
through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote
attackers to inject data across sessions or cause a denial of service
(use-after-free and parsing error) via an SSL connection in a
multithreaded environment.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-5298

(From OE-Core master rev: 751f81ed8dc488c500837aeb3eb41ebf3237e10b)

Signed-off-by: Yue Tao 
Signed-off-by: Roy Li 
Signed-off-by: Saul Wold 
Signed-off-by: Richard Purdie 
Signed-off-by: Paul Eggleton 
Signed-off-by: Richard Purdie

openssl: fix CVE-2014-3470

2014-06-10T16:05:53+00:00

http://www.openssl.org/news/secadv_20140605.txt

Anonymous ECDH denial of service (CVE-2014-3470)

OpenSSL TLS clients enabling anonymous ECDH ciphersuites are subject to a
denial of service attack.

(Patch borrowed from Fedora.)

Signed-off-by: Paul Eggleton 
Signed-off-by: Richard Purdie

openssl: fix CVE-2014-0224

2014-06-10T16:05:53+00:00

http://www.openssl.org/news/secadv_20140605.txt

SSL/TLS MITM vulnerability (CVE-2014-0224)

An attacker using a carefully crafted handshake can force the use of weak
keying material in OpenSSL SSL/TLS clients and servers. This can be exploited
by a Man-in-the-middle (MITM) attack where the attacker can decrypt and
modify traffic from the attacked client and server.

The attack can only be performed between a vulnerable client *and*
server. OpenSSL clients are vulnerable in all versions of OpenSSL. Servers
are only known to be vulnerable in OpenSSL 1.0.1 and 1.0.2-beta1. Users
of OpenSSL servers earlier than 1.0.1 are advised to upgrade as a precaution.

(Patch borrowed from Fedora.)

Signed-off-by: Paul Eggleton 
Signed-off-by: Richard Purdie

openssl: fix CVE-2014-0221

2014-06-10T16:05:53+00:00

http://www.openssl.org/news/secadv_20140605.txt

DTLS recursion flaw (CVE-2014-0221)

By sending an invalid DTLS handshake to an OpenSSL DTLS client the code
can be made to recurse eventually crashing in a DoS attack.

Only applications using OpenSSL as a DTLS client are affected.

(Patch borrowed from Fedora.)

Signed-off-by: Paul Eggleton 
Signed-off-by: Richard Purdie

openssl: use upstream fix for CVE-2014-0198

2014-06-10T16:05:53+00:00

This replaces the fix for CVE-2014-0198 with one borrowed from Fedora,
which is the same as the patch which was actually applied upstream for
the issue, i.e.:

https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=b107586c0c3447ea22dba8698ebbcd81bb29d48c

Signed-off-by: Paul Eggleton 
Signed-off-by: Richard Purdie

openssl: fix CVE-2014-0195

2014-06-10T16:05:53+00:00

http://www.openssl.org/news/secadv_20140605.txt

DTLS invalid fragment vulnerability (CVE-2014-0195)

A buffer overrun attack can be triggered by sending invalid DTLS fragments
to an OpenSSL DTLS client or server. This is potentially exploitable to
run arbitrary code on a vulnerable client or server.

Only applications using OpenSSL as a DTLS client or server affected.

(Patch borrowed from Fedora.)

Signed-off-by: Paul Eggleton 
Signed-off-by: Richard Purdie