diff options
| author | Bernd Kuhls <bernd.kuhls@t-online.de> | 2017-06-02 20:50:53 +0200 |
|---|---|---|
| committer | Thomas Petazzoni <thomas.petazzoni@free-electrons.com> | 2017-06-05 10:06:20 +0200 |
| commit | ff97e66c56512644577e8e86019f92bf935ed29e (patch) | |
| tree | 0c4588f12397fc2a5d52fd544aeb659ecee6495c /package/ipsec-tools | |
| parent | 5e835600cf72b3f2a17c740725634f594e192a6d (diff) | |
| download | buildroot-ff97e66c56512644577e8e86019f92bf935ed29e.tar.gz buildroot-ff97e66c56512644577e8e86019f92bf935ed29e.zip | |
package/ipsec-tools: add security patch to fix CVE-2015-4047
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Diffstat (limited to 'package/ipsec-tools')
| -rw-r--r-- | package/ipsec-tools/0004-CVE-2015-4047.patch | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/package/ipsec-tools/0004-CVE-2015-4047.patch b/package/ipsec-tools/0004-CVE-2015-4047.patch new file mode 100644 index 0000000000..f53fe5cc11 --- /dev/null +++ b/package/ipsec-tools/0004-CVE-2015-4047.patch @@ -0,0 +1,26 @@ +ipsec-tools: CVE-2015-4047: null pointer dereference crash in racoon + +See: https://bugs.gentoo.org/show_bug.cgi?id=550118 + +Downloaded from +https://gitweb.gentoo.org/repo/gentoo.git/tree/net-vpn/ipsec-tools/files/ipsec-tools-CVE-2015-4047.patch + +See also +https://sources.debian.net/src/ipsec-tools/1:0.8.2%2B20140711-8/debian/patches/bug785778-null-pointer-deref.patch/ + +Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> + +--- ./src/racoon/gssapi.c 9 Sep 2006 16:22:09 -0000 1.4 ++++ ./src/racoon/gssapi.c 19 May 2015 15:16:00 -0000 1.6 +@@ -192,6 +192,11 @@ + gss_name_t princ, canon_princ; + OM_uint32 maj_stat, min_stat; + ++ if (iph1->rmconf == NULL) { ++ plog(LLV_ERROR, LOCATION, NULL, "no remote config\n"); ++ return -1; ++ } ++ + gps = racoon_calloc(1, sizeof (struct gssapi_ph1_state)); + if (gps == NULL) { + plog(LLV_ERROR, LOCATION, NULL, "racoon_calloc failed\n"); |
