pkgsrc-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[pkgsrc/trunk]: pkgsrc/security/polarssl Update polarssl to 1.2.12.
details: https://anonhg.NetBSD.org/pkgsrc/rev/a8031edecacc
branches: trunk
changeset: 641646:a8031edecacc
user: obache <obache%pkgsrc.org@localhost>
date: Fri Nov 14 11:21:12 2014 +0000
description:
Update polarssl to 1.2.12.
PolarSSL ChangeLog
= Version 1.2.12 released 2014-10-24
Security
* Remotely-triggerable memory leak when parsing some X.509 certificates
(server is not affected if it doesn't ask for a client certificate).
(Found using Codenomicon Defensics.)
Bugfix
* Fix potential bad read in parsing ServerHello (found by Adrien
Vialletelle).
* ssl_close_notify() could send more than one message in some circumstances
with non-blocking I/O.
* x509_crt_parse() did not increase total_failed on PEM error
* Fix compiler warnings on iOS (found by Sander Niemeijer).
* Don't print uninitialised buffer in ssl_mail_client (found by Marc Abel).
* Fix net_accept() regarding non-blocking sockets (found by Luca Pesce).
* ssl_read() could return non-application data records on server while
renegotation was pending, and on client when a HelloRequest was received.
* Fix warnings from Clang's scan-build (contributed by Alfred Klomp).
Changes
* X.509 certificates with more than one AttributeTypeAndValue per
RelativeDistinguishedName are not accepted any more.
* ssl_read() now returns POLARSSL_ERR_NET_WANT_READ rather than
POLARSSL_ERR_SSL_UNEXPECTED_MESSAGE on harmless alerts.
* Accept spaces at end of line or end of buffer in base64_decode().
diffstat:
security/polarssl/Makefile | 4 ++--
security/polarssl/distinfo | 8 ++++----
2 files changed, 6 insertions(+), 6 deletions(-)
diffs (27 lines):
diff -r 7dee6c525159 -r a8031edecacc security/polarssl/Makefile
--- a/security/polarssl/Makefile Fri Nov 14 10:08:09 2014 +0000
+++ b/security/polarssl/Makefile Fri Nov 14 11:21:12 2014 +0000
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.5 2014/07/16 10:03:57 obache Exp $
+# $NetBSD: Makefile,v 1.6 2014/11/14 11:21:12 obache Exp $
#
-DISTNAME= polarssl-1.2.11-gpl
+DISTNAME= polarssl-1.2.12-gpl
PKGNAME= ${DISTNAME:-gpl=}
CATEGORIES= security devel
MASTER_SITES= https://polarssl.org/download/
diff -r 7dee6c525159 -r a8031edecacc security/polarssl/distinfo
--- a/security/polarssl/distinfo Fri Nov 14 10:08:09 2014 +0000
+++ b/security/polarssl/distinfo Fri Nov 14 11:21:12 2014 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.3 2014/07/16 10:03:57 obache Exp $
+$NetBSD: distinfo,v 1.4 2014/11/14 11:21:12 obache Exp $
-SHA1 (polarssl-1.2.11-gpl.tgz) = 40cb3a833245273946c2075e6c948bbcda8a1be9
-RMD160 (polarssl-1.2.11-gpl.tgz) = 8c9ff2687ded57e1b0ef5b351f61019b6e9c7347
-Size (polarssl-1.2.11-gpl.tgz) = 1020170 bytes
+SHA1 (polarssl-1.2.12-gpl.tgz) = 78cb31a960e4fffaefe7b838f7869072d1e15929
+RMD160 (polarssl-1.2.12-gpl.tgz) = 1cfba1607651c008e8bca83553a0988283535a09
+Size (polarssl-1.2.12-gpl.tgz) = 1021400 bytes
SHA1 (patch-Makefile) = d35397c1df60e384c2a0826844ac8765fd1fef1a
Home |
Main Index |
Thread Index |
Old Index