diff options
| author | T.O. Radzy Radzykewycz <radzy@windriver.com> | 2016-11-15 14:14:38 -0800 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2017-01-11 11:46:40 +0000 |
| commit | 0066e5c5559009f250b6e5953d5830db2c8769e1 (patch) | |
| tree | 440e1ce91967b400c29589e3c856859003ea5376 /scripts/lib/devtool/sdk.py | |
| parent | 7e5fd5914e15397a56425130c2322ace67da2ee4 (diff) | |
| download | openembedded-core-0066e5c5559009f250b6e5953d5830db2c8769e1.tar.gz openembedded-core-0066e5c5559009f250b6e5953d5830db2c8769e1.tar.bz2 openembedded-core-0066e5c5559009f250b6e5953d5830db2c8769e1.zip | |
OpenSSL: CVE-2004-2761 replace MD5 hash algorithm
Use SHA256 as default digest for OpenSSL instead of MD5.
CVE: CVE-2004-2761
The MD5 Message-Digest Algorithm is not collision resistant,
which makes it easier for context-dependent attackers to
conduct spoofing attacks, as demonstrated by attacks on the
use of MD5 in the signature algorithm of an X.509 certificate.
Upstream-Status: Backport
Backport from OpenSSL 2.0 to OpenSSL 1.0.2
Commit f8547f62c212837dbf44fb7e2755e5774a59a57b
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
(From OE-Core rev: f924428cf0c22a0b62769f8f31f11f173f25014f)
Signed-off-by: Zhang Xiao <xiao.zhang@windriver.com>
Signed-off-by: T.O. Radzy Radzykewycz <radzy@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'scripts/lib/devtool/sdk.py')
0 files changed, 0 insertions, 0 deletions