aboutsummaryrefslogtreecommitdiff
path: root/package/openssl/openssl.hash
diff options
context:
space:
mode:
authorGravatar Gustavo Zacarias <gustavo@zacarias.com.ar>2015-03-19 11:34:40 -0300
committerGravatar Peter Korsgaard <peter@korsgaard.com>2015-03-19 21:50:58 +0100
commit85e7efff1afd1f00c2e83e7f71a80375824f42d4 (patch)
treef6f5ccc75ceaffccf20d394ab13018129c208cf0 /package/openssl/openssl.hash
parent6e404d5294f7fa503fc62ff0eec2a647402434fe (diff)
downloadbuildroot-85e7efff1afd1f00c2e83e7f71a80375824f42d4.tar.gz
buildroot-85e7efff1afd1f00c2e83e7f71a80375824f42d4.tar.bz2
openssl: security bump to version 1.0.2a
Fixes: CVE-2015-0291 - ClientHello sigalgs DoS CVE-2015-0290 - Multiblock corrupted pointer CVE-2015-0207 - Segmentation fault in DTLSv1_listen CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp CVE-2015-0208 - Segmentation fault for invalid PSS parameters CVE-2015-0287 - ASN.1 structure reuse memory corruption CVE-2015-0289 - PKCS7 NULL pointer dereferences CVE-2015-0293 - DoS via reachable assert in SSLv2 servers CVE-2015-1787 - Empty CKE with client auth and DHE CVE-2015-0285 - Handshake with unseeded PRNG CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref musl patch removed since it's no longer necessary. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Diffstat (limited to 'package/openssl/openssl.hash')
-rw-r--r--package/openssl/openssl.hash8
1 files changed, 4 insertions, 4 deletions
diff --git a/package/openssl/openssl.hash b/package/openssl/openssl.hash
index a8cb172005..c9987fca79 100644
--- a/package/openssl/openssl.hash
+++ b/package/openssl/openssl.hash
@@ -1,4 +1,4 @@
-# From https://www.openssl.org/source/openssl-1.0.2.tar.gz.md5
-# From https://www.openssl.org/source/openssl-1.0.2.tar.gz.sha1
-md5 38373013fc85c790aabf8837969c5eba openssl-1.0.2.tar.gz
-sha1 2f264f7f6bb973af444cd9fc6ee65c8588f610cc openssl-1.0.2.tar.gz
+# From https://www.openssl.org/source/openssl-1.0.2a.tar.gz.md5
+# From https://www.openssl.org/source/openssl-1.0.2a.tar.gz.sha1
+md5 a06c547dac9044161a477211049f60ef openssl-1.0.2a.tar.gz
+sha1 46ecd325b8e587fa491f6bb02ad4a9fb9f382f5f openssl-1.0.2a.tar.gz