[OE-core] [PATCH 0/2] Fix CVEs for openssl

[kai.kang at windriver.com]

From: Kai Kang <kai.kang at windriver.com>

Fix CVEs for openssl:

1.0.2p:
* CVE-2018-0734

1.1.1:
* CVE-2018-0734
* CVE-2018-0735

The following changes since commit 411184bfaa6269bf2926bb2a576c0922958cbbb3:

  xserver-xorg: fix CVE-2018-14665 (2018-11-01 13:27:26 +0000)

are available in the Git repository at:

  git://git.pokylinux.org/poky-contrib kangkai/cve
  http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/cve

Kai Kang (2):
  openssl: fix CVE-2018-0734 for both 1.0.2p and 1.1.1
  openssl: fix CVE-2018-0735 for 1.1.1

 .../openssl/0002-fix-CVE-2018-0734.patch      | 108 ++++++++++++++++++
 .../openssl/0003-fix-CVE-2018-0735.patch      |  50 ++++++++
 .../openssl10/0001-fix-CVE-2018-0734.patch    |  33 ++++++
 .../openssl/openssl10_1.0.2p.bb               |   1 +
 .../openssl/openssl_1.1.1.bb                  |   2 +
 5 files changed, 194 insertions(+)
 create mode 100644 meta/recipes-connectivity/openssl/openssl/0002-fix-CVE-2018-0734.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl/0003-fix-CVE-2018-0735.patch
 create mode 100644 meta/recipes-connectivity/openssl/openssl10/0001-fix-CVE-2018-0734.patch

-- 
2.18.0