deepcrayon/buildroot
deepcrayon/buildroot
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

polarssl: security bump to version 1.2.13

Browse source 
Includes the previous CVE-2015-1182 fix (patch dropped) and other fixes
(security and non) from the 1.3 branch (no CVEs yet), see release notes:
https://polarssl.org/tech-updates/releases/polarssl-1.2.13-released

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
This commit is contained in:
Gustavo Zacarias 2015-02-18 15:16:09 -03:00 committed by Thomas Petazzoni
parent f08a9db47e
commit ad951abd86
3 changed files with 3 additions and 22 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

19
package/polarssl/0003-fix-CVE-2015-1182.patch
View file

@ -1,19 +0,0 @@
Fix CVE-2015-1182 - Remote attack using crafted certificates.
Patch status: from upstream see:
https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2014-04
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
diff --git a/library/asn1parse.c b/library/asn1parse.c
index a3a2b56..e2117bf 100644
--- a/library/asn1parse.c
+++ b/library/asn1parse.c
@@ -278,6 +278,8 @@ int asn1_get_sequence_of( unsigned char **p,
if( cur->next == NULL )
return( POLARSSL_ERR_ASN1_MALLOC_FAILED );
+ memset( cur->next, 0, sizeof( asn1_sequence ) );
+
cur = cur->next;
}
}

4
package/polarssl/polarssl.hash
View file

@ -1,2 +1,2 @@
# From https://polarssl.org/tech-updates/releases/polarssl-1.2.12-released
sha256 63dd60e78d25c438648607bb177b063dcf5fbf3ced9ee794fcb165d101940131 polarssl-1.2.12-gpl.tgz
# From https://polarssl.org/tech-updates/releases/polarssl-1.2.13-released
sha256 62f44f2a9f39b5cefb229e5dd2644ca20ead477cb1843d6ff30671624315b021 polarssl-1.2.13-gpl.tgz

2
package/polarssl/polarssl.mk
View file

@ -5,7 +5,7 @@
################################################################################
POLARSSL_SITE = https://polarssl.org/code/releases
POLARSSL_VERSION = 1.2.12
POLARSSL_VERSION = 1.2.13
POLARSSL_SOURCE = polarssl-$(POLARSSL_VERSION)-gpl.tgz
POLARSSL_CONF_OPTS = \
-DENABLE_PROGRAMS=$(if $(BR2_PACKAGE_POLARSSL_PROGRAMS),ON,OFF)