diff options
| author | Paul Eggleton <paul.eggleton@linux.intel.com> | 2014-06-09 16:53:43 +0100 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2014-06-10 17:05:53 +0100 |
| commit | c707b3ea9e1fbff2c6a82670e4b1af2b4f53d5e2 (patch) | |
| tree | f159e6f39dd29d88f17d86eb2c29cbe50534f0d0 /scripts/runqemu-ifup | |
| parent | 68da848e0f7f026bf18707d8d59143177ff66f9b (diff) | |
| download | openembedded-core-c707b3ea9e1fbff2c6a82670e4b1af2b4f53d5e2.tar.gz openembedded-core-c707b3ea9e1fbff2c6a82670e4b1af2b4f53d5e2.tar.bz2 openembedded-core-c707b3ea9e1fbff2c6a82670e4b1af2b4f53d5e2.zip | |
openssl: fix CVE-2014-0195
http://www.openssl.org/news/secadv_20140605.txt
DTLS invalid fragment vulnerability (CVE-2014-0195)
A buffer overrun attack can be triggered by sending invalid DTLS fragments
to an OpenSSL DTLS client or server. This is potentially exploitable to
run arbitrary code on a vulnerable client or server.
Only applications using OpenSSL as a DTLS client or server affected.
(Patch borrowed from Fedora.)
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'scripts/runqemu-ifup')
0 files changed, 0 insertions, 0 deletions