[oe-commits] Paul Eggleton : openssl: upgrade to 1.0.1h

[git at git.openembedded.org]

Module: openembedded-core.git
Branch: master
Commit: a3e80de6d423c272a287bf3538196b48ac5ddec1
URL:    http://git.openembedded.org/?p=openembedded-core.git&a=commit;h=a3e80de6d423c272a287bf3538196b48ac5ddec1

Author: Paul Eggleton <paul.eggleton at linux.intel.com>
Date:   Mon Jun  9 10:36:34 2014 +0100

openssl: upgrade to 1.0.1h

Fixes the following security issues:

* CVE-2014-0224
* CVE-2014-0221
* CVE-2014-0195
* CVE-2014-3470

The patch for CVE-2010-5298, CVE-2014-0198 and a fix for building the
documentation are integrated upstream in this release and so were
dropped. Additionally, a patch from upstream was added in order to
fix a failure during do_compile_ptest_base.

A similar upgrade was also submitted by Yao Xinpan <yaoxp at cn.fujitsu.com>
and Lei Maohui <leimaohui at cn.fujitsu.com>.

Signed-off-by: Paul Eggleton <paul.eggleton at linux.intel.com>

---

 .../openssl/heartbeat-test-private-api.patch       |  45 +++
 .../openssl/openssl/openssl-CVE-2010-5298.patch    |  24 --
 .../openssl/openssl-CVE-2014-0198-fix.patch        |  23 --
 .../openssl/openssl/openssl-fix-doc.patch          | 401 ---------------------
 .../{openssl_1.0.1g.bb => openssl_1.0.1h.bb}       |   8 +-
 5 files changed, 48 insertions(+), 453 deletions(-)

Diff:   http://git.openembedded.org/?p=openembedded-core.git/?a=commitdiff;h=a3e80de6d423c272a287bf3538196b48ac5ddec1