Skip to contentSkip to conversation

libtasn1: security bump to version 4.13

PATCH New Baruch Siach 3 participants 3 messages Feb 8, 2018 – Apr 10, 2018

lore
Share & tools
lore

Baruch Siach

author
#0 lore raw

PATCH 1/1 libtasn1: security bump to version 4.13

CVE-2017-10790: NULL pointer dereference and crash when reading crafted input

CVE-2018-6003: Stack exhaustion due to indefinite recursion during BER decoding

Add license files hashes.

Cc Stefan Fr?berg <[email protected]>
Signed-off-by Baruch Siach <[email protected]>
---
 package/libtasn1/libtasn1.hash | 6 +++++-
 package/libtasn1/libtasn1.mk   | 2 +-
 2 files changed, 6 insertions(+), 2 deletions(-)
package/libtasn1/libtasn1.hash +5 -1
index 699c14050a8a..9ed7a7a42c97 100644
@@ -1,2 +1,6 @@
 # Locally calculated after checking pgp signature
-sha256	6753da2e621257f33f5b051cc114d417e5206a0818fe0b1ecfd6153f70934753	libtasn1-4.12.tar.gz
+# https://ftp.gnu.org/gnu/libtasn1/libtasn1-4.13.tar.gz.sig
+sha256	7e528e8c317ddd156230c4e31d082cd13e7ddeb7a54824be82632209550c8cca	libtasn1-4.13.tar.gz
+# Locally calculated
+sha256	8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903	COPYING
+sha256	dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551	COPYING.LIB
package/libtasn1/libtasn1.mk +1 -1
index b34a3b63f018..f14d57abd373 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBTASN1_VERSION = 4.12
+LIBTASN1_VERSION = 4.13
 LIBTASN1_SITE = $(BR2_GNU_MIRROR)/libtasn1
 LIBTASN1_DEPENDENCIES = host-bison
 LIBTASN1_LICENSE = GPL-3.0+ (tests, tools), LGPL-2.1+ (library)
Signature · 1 line
2.15.1
Applied
#1 lore raw

PATCH 1/1 libtasn1: security bump to version 4.13

Hello,

Quoted 6 lines · Baruch Siach

CVE-2017-10790: NULL pointer dereference and crash when reading crafted input

CVE-2018-6003: Stack exhaustion due to indefinite recursion during BER decoding

Quoted 8 lines

Add license files hashes.

Cc Stefan Fr?berg <[email protected]>
Signed-off-by Baruch Siach <[email protected]>
---
 package/libtasn1/libtasn1.hash | 6 +++++-
 package/libtasn1/libtasn1.mk   | 2 +-
 2 files changed, 6 insertions(+), 2 deletions(-)

Applied to master, thanks.

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Bootlin (formerly Free Electrons)
Embedded Linux and Kernel engineering
https://bootlin.com
#2 lore raw

PATCH 1/1 libtasn1: security bump to version 4.13

In reply to Baruch Siach
Quoted 5 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Baruch" == Baruch Siach <[email protected]> writes:

CVE-2017-10790: NULL pointer dereference and crash when reading crafted input

Quoted 7 lines

CVE-2018-6003: Stack exhaustion due to indefinite recursion during BER decoding

Add license files hashes.

Cc Stefan Fr?berg <[email protected]>
Signed-off-by Baruch Siach <[email protected]>

Committed to 2017.02.x, thanks.

Signature · 1 line
Bye, Peter Korsgaard