rapid7/meterpreter — pull request #86 by todb-r7 (2014-06-05 17:03:00+00:00)
Title: Bump to 0.9.8za (CVE-2014-0224 and friends)

Meterpreter's build scripts dynamically pull in OpenSSL from the canonical remote site, https://openssl.org.

This ensures that we pull in 0.9.8za, which is patched against the various OpenSSL vulns described at

https://www.openssl.org/news/secadv_20140605.txt

The SHA1sum should be:

adca1eb1a103a5536b24e1ed7e45051e2939731 openssl-0.9.8za.tar.gz

The MD5sum should be:

2f989915f8fea49aa1bc37aa58500cce openssl-0.9.8za.tar.gz

## Verification

- [ ] See the various automated builds pass
- [ ] Check the results to see that no vulnerable versions of 0.9.8 are compiled or linked. This would include anything below 0.9.8za
- [ ] Validated continued working functionality of Meterpreter over SSL-encrypted channels.
- [ ] TODO: Test with an appropriate Metasploit module (when available)