hak5
/
openwrt-owl
mirror of https://github.com/hak5/openwrt-owl.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
37,199 Commits
4 Branches
8 Tags
169 MiB
Commit Graph

9 Commits (799d0dddf608ff012b49282d5832ddd2ef1b916e)

Author SHA1 Message Date
Magnus Kroken 6926325829 openssl: update to 1.0.2i 
Drop 302-fix_no_cmac_build.patch, it has been applied upstream.

Security fixes:
* (Severity: High) OCSP Status Request extension unbounded memory growth (CVE-2016-6304)
* (Severity: Moderate) SSL_peek() hang on empty record (CVE-2016-6305)
* 10 Low severity issues

Security advisory: https://www.openssl.org/news/secadv/20160922.txt
Changelog: https://www.openssl.org/news/cl102.txt

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
 2016-09-24 13:28:59 +02:00
Felix Fietkau 2911212962 openssl: update to 1.0.2f (fixes CVE-2016-0701, CVE-2015-3197) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 48531
 2016-01-28 18:20:06 +00:00
Hauke Mehrtens 82c491708b openssl: update to version 1.0.2e 
This fixes the following security problems:
* CVE-2015-3193
* CVE-2015-3194
* CVE-2015-3195)

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

SVN-Revision: 47726
 2015-12-03 21:01:57 +00:00
Jo-Philipp Wich 48d9137d31 openssl: update to v1.0.2d (CVE-2015-1793) 
During certificate verification, OpenSSL (starting from version 1.0.1n and
1.0.2b) will attempt to find an alternative certificate chain if the first
attempt to build such a chain fails. An error in the implementation of this
logic can mean that an attacker could cause certain checks on untrusted
certificates to be bypassed, such as the CA flag, enabling them to use a valid
leaf certificate to act as a CA and "issue" an invalid certificate.

This issue will impact any application that verifies certificates including
SSL/TLS/DTLS clients and SSL/TLS/DTLS servers using client authentication.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 46285
 2015-07-09 13:04:27 +00:00
Steven Barth 89c8d78d31 openssl: 1.0.2b (hey, we made it nearly 3 months this time!) 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 45946
 2015-06-11 20:28:44 +00:00
Steven Barth 2ca8a6cce4 openssl: bump to 1.0.2 
Fixes CVE-2014-3513, CVE-2014-3567, CVE-2014-3568, CVE-2014-3566

Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 44332
 2015-02-09 12:04:00 +00:00
Felix Fietkau c2bbaf439c openssl: update to 1.0.1f 
This version includes this changes:

    Don't include gmt_unix_time in TLS server and client random values
    Fix for TLS record tampering bug CVE-2013-4353
    Fix for TLS version checking bug CVE-2013-6449
    Fix for DTLS retransmission bug CVE-2013-6450

Signed-off-by: Peter Wagner <tripolar@gmx.at>

SVN-Revision: 39853
 2014-03-09 13:23:41 +00:00
Tim Yardley b521113aa1 openssl: security update to 1.0.1d to address CBC TLS issue 
addressing
CVE-2013-0169: 4th February 2013

Signed-off-by: Tim Yardley <yardley@gmail.com>

SVN-Revision: 35524
 2013-02-08 19:36:06 +00:00
Felix Fietkau 48db59fab7 move library packages to package/libs/ 
SVN-Revision: 33657
 2012-10-08 11:24:12 +00:00