AmadeusGhost 7436d6866f openssl: bump to 1.1.1j (#6410) ... This fixes 4 security vulnerabilities/bugs: - CVE-2021-2839 - SSLv2 vulnerability. Openssl 1.1.1 does not support SSLv2, but the affected functions still exist. Considered just a bug. - CVE-2021-2840 - calls EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. - CVE-2021-2841 - The X509_issuer_and_serial_hash() function attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it was failing to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. - Fixed SRP_Calc_client_key so that it runs in constant time. This could be exploited in a side channel attack to recover the password. The 3 CVEs above are currently awaiting analysis. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com> Co-authored-by: Eneas U de Queiroz <cotequeiroz@gmail.com>		2021-02-21 12:25:02 +08:00
..
argp-standalone	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
elfutils	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
gettext	update source	2017-09-06 19:19:45 +08:00
gettext-full	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
gmp	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
jansson	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
libbsd	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
libcxx	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
libdouble-conversion	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
libevent2	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
libiconv	update source	2017-09-06 19:19:45 +08:00
libiconv-full	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
libjson-c	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
libmnl	libmnl: update ABI version	2020-03-24 18:24:26 +08:00
libnetfilter-conntrack	libnetfilter_conntrack: Update V1.0.8 (#6094)	2020-12-25 16:15:32 +08:00
libnetfilter-cthelper	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
libnetfilter-cttimeout	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
libnetfilter-log	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
libnetfilter-queue	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
libnfnetlink	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
libnftnl	libmnl: update ABI version	2020-03-24 18:24:26 +08:00
libnl	libnl: update to lastest version	2019-11-23 09:58:26 -08:00
libnl-tiny	package: update ipv6 to latest (#3021)	2020-02-10 15:40:14 +08:00
libpcap	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
libroxml	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
libselinux	fix depends for libdevmapper & change host pkg name (#5325)	2020-08-18 01:40:34 +08:00
libsepol	fix depends for libdevmapper & change host pkg name (#5325)	2020-08-18 01:40:34 +08:00
libtool	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
libubox	ipq40xx: rework with new v5.4 essedma eth setting	2020-07-03 12:17:04 +08:00
libunwind	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
libusb	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
libusb-compat	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
lzo	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
mbedtls	mbedtls: update to 2.16.7 (#5377)	2020-08-30 21:17:26 +08:00
ncurses	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
nettle	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
nghttp2	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
openssl	openssl: bump to 1.1.1j (#6410)	2021-02-21 12:25:02 +08:00
pcre	fix depends for libdevmapper & change host pkg name (#5325)	2020-08-18 01:40:34 +08:00
popt	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
readline	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
sysfsutils	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
toolchain	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
uclibc++	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
uclient	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
ustream-ssl	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
wolfssl	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00
zlib	Sync to snapshot kernel 5.4 version	2020-07-02 23:30:56 +08:00