ChangeLog for: 2014-08-08 20:02:50

Welcome pi kernel! Unless we reach kernel 3.14.159, this is probably the best approximation we're going to get. :-) a/kernel-firmware-20140807git-noarch-1.txz: Upgraded. a/kernel-generic-3.14.16-x86_64-1.txz: Upgraded. a/kernel-huge-3.14.16-x86_64-1.txz: Upgraded. a/kernel-modules-3.14.16-x86_64-1.txz: Upgraded. a/openssl-solibs-1.0.1i-x86_64-1.txz: Upgraded. (* Security fix *) d/kernel-headers-3.14.16-x86-1.txz: Upgraded. k/kernel-source-3.14.16-noarch-1.txz: Upgraded. n/openssl-1.0.1i-x86_64-1.txz: Upgraded. This update fixes several security issues: Double Free when processing DTLS packets (CVE-2014-3505) DTLS memory exhaustion (CVE-2014-3506) DTLS memory leak from zero-length fragments (CVE-2014-3507) Information leak in pretty printing functions (CVE-2014-3508) Race condition in ssl_parse_serverhello_tlsext (CVE-2014-3509) OpenSSL DTLS anonymous EC(DH) denial of service (CVE-2014-3510) OpenSSL TLS protocol downgrade attack (CVE-2014-3511) SRP buffer overrun (CVE-2014-3512) Crash with SRP ciphersuite in Server Hello message (CVE-2014-5139) For more information, see: https://www.openssl.org/news/secadv_20140806.txt http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139 (* Security fix *) isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt.