Commit ad951abd authored by Gustavo Zacarias's avatar Gustavo Zacarias Committed by Thomas Petazzoni
Browse files

polarssl: security bump to version 1.2.13 

Includes the previous CVE-2015-1182 fix (patch dropped) and other fixes
(security and non) from the 1.3 branch (no CVEs yet), see release notes:
https://polarssl.org/tech-updates/releases/polarssl-1.2.13-released



Signed-off-by: default avatarGustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: default avatarThomas Petazzoni <thomas.petazzoni@free-electrons.com>
parent f08a9db4

package/polarssl/0003-fix-CVE-2015-1182.patch

deleted100644 → 0
+0 −19
Original line number Diff line number Diff line 
Fix CVE-2015-1182 - Remote attack using crafted certificates.

Patch status: from upstream see:

https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2014-04



Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>



diff --git a/library/asn1parse.c b/library/asn1parse.c

index a3a2b56..e2117bf 100644

--- a/library/asn1parse.c

+++ b/library/asn1parse.c

@@ -278,6 +278,8 @@ int asn1_get_sequence_of( unsigned char **p,

             if( cur->next == NULL )

                 return( POLARSSL_ERR_ASN1_MALLOC_FAILED );



+            memset( cur->next, 0, sizeof( asn1_sequence ) );

+

             cur = cur->next;

         }

     }

package/polarssl/polarssl.hash

+2 −2
Original line number Diff line number Diff line 
# From https://polarssl.org/tech-updates/releases/polarssl-1.2.12-released

sha256	63dd60e78d25c438648607bb177b063dcf5fbf3ced9ee794fcb165d101940131	polarssl-1.2.12-gpl.tgz
 
# From https://polarssl.org/tech-updates/releases/polarssl-1.2.13-released

sha256	62f44f2a9f39b5cefb229e5dd2644ca20ead477cb1843d6ff30671624315b021	polarssl-1.2.13-gpl.tgz

package/polarssl/polarssl.mk

+1 −1
Original line number Diff line number Diff line
@@ -5,7 +5,7 @@ 
################################################################################



POLARSSL_SITE = https://polarssl.org/code/releases

POLARSSL_VERSION = 1.2.12

POLARSSL_VERSION = 1.2.13

POLARSSL_SOURCE = polarssl-$(POLARSSL_VERSION)-gpl.tgz

POLARSSL_CONF_OPTS = \

	-DENABLE_PROGRAMS=$(if $(BR2_PACKAGE_POLARSSL_PROGRAMS),ON,OFF)