diff options
| author | Gustavo Zacarias <gustavo@zacarias.com.ar> | 2015-11-12 16:30:46 -0300 |
|---|---|---|
| committer | Peter Korsgaard <peter@korsgaard.com> | 2015-11-12 22:24:50 +0100 |
| commit | 3fe2eb9ed02070a648f75e0eb120ce45b1064c70 (patch) | |
| tree | b5a0747215b8feb7953e36814fa50e79e4d124cd /package/perl-file-util/perl-file-util.mk | |
| parent | 3120db1508e02eca607c28b9abb6d97984ba7be0 (diff) | |
| download | buildroot-3fe2eb9ed02070a648f75e0eb120ce45b1064c70.tar.gz buildroot-3fe2eb9ed02070a648f75e0eb120ce45b1064c70.zip | |
polarssl: security bump to version 1.2.18
Fixes a potential heap corruption on Windows when
mbedtls_x509_crt_parse_path() is passed a path longer than 2GB. This
cannot be triggered remotely. Found by Guido Vranken, Intelworks.
Fixes a potential buffer overflow in some asn1_write_xxx() functions.
This cannot be triggered remotely unless you create X.509 certificates
based on untrusted input or write keys of untrusted origin. Found by
Guido Vranken, Intelworks.
The X509 max_pathlen constraint was not enforced on intermediate
certificates. Found by Nicholas Wilson, and fix and tests provided by
Janos Follath.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Diffstat (limited to 'package/perl-file-util/perl-file-util.mk')
0 files changed, 0 insertions, 0 deletions
