Re: [OE-core] [PATCH] openssl: upgrade to 3.0.1

2021-12-20 Thread Richard Purdie
On Wed, 2021-12-15 at 11:11 +, Ross Burton wrote: > Major changes in 3.0.1: > > * Fixed invalid handling of X509_verify_cert() internal errors in libssl > ([CVE-2021-4044]) > * Allow fetching an operation from the provider that owns an unexportable > key > as a fallback if that is

[OE-core] [PATCH] openssl: upgrade to 3.0.1

2021-12-15 Thread Ross Burton
Major changes in 3.0.1: * Fixed invalid handling of X509_verify_cert() internal errors in libssl ([CVE-2021-4044]) * Allow fetching an operation from the provider that owns an unexportable key as a fallback if that is still allowed by the property query. Drop patches which were backpo