diff options
| author | Gustavo Zacarias <gustavo@zacarias.com.ar> | 2016-02-08 16:27:00 -0300 |
|---|---|---|
| committer | Thomas Petazzoni <thomas.petazzoni@free-electrons.com> | 2016-02-08 21:26:55 +0100 |
| commit | 7e1eec49a520081835e305f071c96eca0d4fd33e (patch) | |
| tree | 1bbe8bb4830e0bf8ca8fb2b74b9f3f712cde896c /package/polarssl | |
| parent | ee467ccd6397995cc0c2a87f7fd5b8f68bcd5b18 (diff) | |
polarssl: security bump to version 1.2.19
Fix bug in certificate validation that caused valid chains to be
rejected when the first intermediate certificate has
pathLenConstraint=0.
Removed potential leak in rsa_rsassa_pkcs1_v15_sign().
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Diffstat (limited to 'package/polarssl')
| -rw-r--r-- | package/polarssl/polarssl.hash | 4 | ||||
| -rw-r--r-- | package/polarssl/polarssl.mk | 2 |
2 files changed, 3 insertions, 3 deletions
diff --git a/package/polarssl/polarssl.hash b/package/polarssl/polarssl.hash index 71f7c290c..3f1871c8f 100644 --- a/package/polarssl/polarssl.hash +++ b/package/polarssl/polarssl.hash @@ -1,2 +1,2 @@ -# From https://tls.mbed.org/tech-updates/releases/mbedtls-2.2.0-2.1.3-1.3.15-and-polarssl.1.2.18-released -sha256 63c4ed4d9f6a241088e2287958f265403f874248d6a98b98f27cd3aa2f90f030 polarssl-1.2.18-gpl.tgz +# From https://tls.mbed.org/tech-updates/releases/mbedtls-2.2.1-2.1.4-1.3.16-and-polarssl.1.2.19-released +sha256 24cb1608a160101ead3c7240f35fc447fe7880cd60f7ed6c9db7a1d773ccd4b8 polarssl-1.2.19-gpl.tgz diff --git a/package/polarssl/polarssl.mk b/package/polarssl/polarssl.mk index d988bf10c..9199f28a0 100644 --- a/package/polarssl/polarssl.mk +++ b/package/polarssl/polarssl.mk @@ -5,7 +5,7 @@ ################################################################################ POLARSSL_SITE = https://tls.mbed.org/code/releases -POLARSSL_VERSION = 1.2.18 +POLARSSL_VERSION = 1.2.19 POLARSSL_SOURCE = polarssl-$(POLARSSL_VERSION)-gpl.tgz POLARSSL_CONF_OPTS = \ -DENABLE_PROGRAMS=$(if $(BR2_PACKAGE_POLARSSL_PROGRAMS),ON,OFF) |