mbox

openssl: security update to 1.0.2f

Message ID 1453996171-31510-1-git-send-email-michael.tremer@ipfire.org
State Accepted
Commit a6c71642778020a832bb5da67db8ebd004d85bad
Headers

Message

Michael Tremer 29 Jan 2016, 2:49 a.m. UTC 
From: Arne Fitzenreiter <arne_f@ipfire.org>

changes:
* DH small subgroups - CVE-2016-0701
* SSLv2 doesn't block disabled ciphers - CVE-2015-3197
* Reject DH handshakes with parameters shorter than 1024 bits

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
---
 lfs/openssl | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)