mr/openwrt
2
0
Fork 1
Code Issues 7 Pull Requests Releases Wiki Activity
84b89e4ec4
openwrt/package/libs
History
Jo-Philipp Wich 48d9137d31 openssl: update to v1.0.2d (CVE-2015-1793) 
During certificate verification, OpenSSL (starting from version 1.0.1n and
1.0.2b) will attempt to find an alternative certificate chain if the first
attempt to build such a chain fails. An error in the implementation of this
logic can mean that an attacker could cause certain checks on untrusted
certificates to be bypassed, such as the CA flag, enabling them to use a valid
leaf certificate to act as a CA and "issue" an invalid certificate.

This issue will impact any application that verifies certificates including
SSL/TLS/DTLS clients and SSL/TLS/DTLS servers using client authentication.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 46285
2015-07-09 13:04:27 +00:00
..
argp-standalone argp-standalone: import package from packages.git 2015-06-14 17:43:28 +00:00
cyassl cyassl: update to wolfssl 3.6.0 2015-07-03 23:20:36 +00:00
elfutils elfutils: bump to 0.163 2015-06-29 06:47:31 +00:00
gettext Add a few SPDX tags 2014-11-02 12:20:54 +00:00
gettext-full gettext-full: update to v0.19.4 2015-01-09 14:51:29 +00:00
gmp gmp: use http instead of ftp download (#18805) 2015-01-23 10:54:56 +00:00
libbsd packages: use $(LN) macro, make symlinks relative 2015-04-03 00:07:43 +00:00
libconfig license info - revert r43155 2014-11-03 09:56:44 +00:00
libevent2 libevent2: remove defunct download mirror 2015-02-10 18:55:44 +00:00
libiconv Add a few SPDX tags 2014-11-02 12:20:54 +00:00
libiconv-full libiconv-full: fix build with fortify source 2015-06-25 12:13:57 +00:00
libjson-c json-c: merge an upstream fix for a compiler warning (fixes #19187) 2015-03-16 07:54:55 +00:00
libmnl license info - revert r43155 2014-11-03 09:56:44 +00:00
libnetfilter-conntrack update libnetfilter_conntrack to version 1.0.4 2015-03-28 10:19:04 +00:00
libnetfilter-cthelper conntrack-tools: update package (along with associated libraries) to the latest version, fix musl build issues 2015-03-28 10:19:26 +00:00
libnetfilter-cttimeout conntrack-tools: update package (along with associated libraries) to the latest version, fix musl build issues 2015-03-28 10:19:26 +00:00
libnetfilter-log Add a few SPDX tags 2014-11-02 12:20:54 +00:00
libnetfilter-queue conntrack-tools: update package (along with associated libraries) to the latest version, fix musl build issues 2015-03-28 10:19:26 +00:00
libnfnetlink conntrack-tools: update package (along with associated libraries) to the latest version, fix musl build issues 2015-03-28 10:19:26 +00:00
libnftnl libnftnl: bump to upstream release 1.0.3 2014-12-16 09:22:49 +00:00
libnl license info - revert r43155 2014-11-03 09:56:44 +00:00
libnl-tiny libnl-tiny: honor CFLAGS when linking 2015-06-18 08:13:04 +00:00
libpcap libpcap: fixup libtool 2015-06-20 17:37:28 +00:00
libreadline libreadline: cleanup Makefile, fix shlib perms 2015-04-01 15:11:32 +00:00
libroxml packages: remove uneeded PKG_BUILD_DIR overrides 2015-02-22 01:31:21 +00:00
librpc librpc: update to the latest version, fixes musl compatibility issues (#19445) 2015-04-10 20:02:55 +00:00
libtool libtool: enable passthrough for SSP options 2015-06-19 13:45:48 +00:00
libubox libubox: fix MD5 for musl on big-endian platforms 2015-06-29 14:12:38 +00:00
libusb libusb: update to version 1.0.19 2015-01-11 16:14:23 +00:00
libusb-compat libusb-compat: fix musl compatibility issues 2015-06-18 06:39:09 +00:00
lzo lzo: disable unaligned access for everything except x86 2014-11-23 20:10:02 +00:00
ncurses ncurses: Fix building with gcc 5.1 2015-06-02 21:54:54 +00:00
nettle nettle: bump to 3.1.1 2015-05-03 11:19:42 +00:00
ocf-crypto-headers license info - revert r43155 2014-11-03 09:56:44 +00:00
openssl openssl: update to v1.0.2d (CVE-2015-1793) 2015-07-09 13:04:27 +00:00
polarssl polarssl: bump to 1.3.11 2015-06-08 07:38:13 +00:00
popt add pkgconfig information for popt library 2015-01-17 12:52:28 +00:00
sysfsutils license info - revert r43155 2014-11-03 09:56:44 +00:00
toolchain toolchain: drop obsolete references to the coldfire target 2015-03-25 14:29:17 +00:00
uclibc++ uclibc++: link libssp_nonshared only for musl 2015-07-06 08:55:28 +00:00
uclient uclient: update to the latest version, fixes a crash in processing redirect/disconnect after headers 2015-04-14 21:05:45 +00:00
ustream-ssl ustream-ssl: fix compilation against current PolarSSL/mbedTLS version 2015-06-09 16:52:12 +00:00
zlib Add a few SPDX tags 2014-11-02 12:20:54 +00:00