ChangeLog for: 2014-08-08 20:02:50
Welcome pi kernel!  Unless we reach kernel 3.14.159, this is probably the best
approximation we're going to get.  :-)
a/kernel-firmware-20140807git-noarch-1.txz:  Upgraded.
a/kernel-generic-3.14.16-x86_64-1.txz:  Upgraded.
a/kernel-huge-3.14.16-x86_64-1.txz:  Upgraded.
a/kernel-modules-3.14.16-x86_64-1.txz:  Upgraded.
a/openssl-solibs-1.0.1i-x86_64-1.txz:  Upgraded.
  (* Security fix *)
d/kernel-headers-3.14.16-x86-1.txz:  Upgraded.
k/kernel-source-3.14.16-noarch-1.txz:  Upgraded.
n/openssl-1.0.1i-x86_64-1.txz:  Upgraded.
  This update fixes several security issues:
  Double Free when processing DTLS packets (CVE-2014-3505)
  DTLS memory exhaustion (CVE-2014-3506)
  DTLS memory leak from zero-length fragments (CVE-2014-3507)
  Information leak in pretty printing functions (CVE-2014-3508)
  Race condition in ssl_parse_serverhello_tlsext (CVE-2014-3509)
  OpenSSL DTLS anonymous EC(DH) denial of service (CVE-2014-3510)
  OpenSSL TLS protocol downgrade attack (CVE-2014-3511)
  SRP buffer overrun (CVE-2014-3512)
  Crash with SRP ciphersuite in Server Hello message (CVE-2014-5139)
  For more information, see:
    https://www.openssl.org/news/secadv_20140806.txt
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139
  (* Security fix *)
isolinux/initrd.img:  Rebuilt.
kernels/*:  Upgraded.
usb-and-pxe-installers/usbboot.img:  Rebuilt.