Page MenuHomeFreeBSD
Files F136671195

D4393.id10774.diff
No OneTemporary
Actions

D4393.id10774.diff
View Options

Index: security/libressl/Makefile
===================================================================
--- security/libressl/Makefile
+++ security/libressl/Makefile
@@ -3,6 +3,7 @@
PORTNAME= libressl
PORTVERSION= 2.2.4
+PORTREVISION= 1
CATEGORIES= security devel
MASTER_SITES= OPENBSD/LibreSSL
@@ -27,6 +28,7 @@
USE_LDCONFIG= yes
INSTALL_TARGET= install-strip
+TEST_TARGET= check
.include <bsd.port.pre.mk>
Index: security/libressl/files/patch-crypto_rsa_rsa__ameth.c
===================================================================
--- /dev/null
+++ security/libressl/files/patch-crypto_rsa_rsa__ameth.c
@@ -0,0 +1,35 @@
+untrusted comment: signature from openbsd 5.7 base secret key
+RWSvUZXnw9gUb9nwe5ejJkFIRePsdQp8RQsCErF3noaEaVflJlEfeDvvY8BYhoqJKov8hLit4sBdW8E16mLrZIBdfQSB7FUPygc=
+
+OpenBSD 5.7 errata 21, Dec 3, 2015:
+
+CVE-2015-3194 - NULL pointer dereference in client certificate validation
+
+Apply by doing:
+ signify -Vep /etc/signify/openbsd-57-base.pub -x 021_clientcert.patch.sig \
+ -m - | (cd /usr/src && patch -p0)
+
+And then rebuild and install libcrypto:
+ cd /usr/src/lib/libcrypto
+ make obj
+ make depend
+ make
+ make install
+
+Index: crypto/rsa/rsa_ameth.c
+===================================================================
+RCS file: /cvs/src/lib/libssl/src/crypto/rsa/rsa_ameth.c,v
+retrieving revision 1.14
+retrieving revision 1.14.6.1
+diff -u -p -u -p -r1.14 -r1.14.6.1
+--- crypto/rsa/rsa_ameth.c 11 Feb 2015 04:05:14 -0000 1.14
++++ crypto/rsa/rsa_ameth.c 4 Dec 2015 04:13:43 -0000 1.14.6.1
+@@ -298,7 +298,7 @@ rsa_pss_decode(const X509_ALGOR *alg, X5
+ if (pss->maskGenAlgorithm) {
+ ASN1_TYPE *param = pss->maskGenAlgorithm->parameter;
+ if (OBJ_obj2nid(pss->maskGenAlgorithm->algorithm) == NID_mgf1 &&
+- param->type == V_ASN1_SEQUENCE) {
++ param && param->type == V_ASN1_SEQUENCE) {
+ p = param->value.sequence->data;
+ plen = param->value.sequence->length;
+ *pmaskHash = d2i_X509_ALGOR(NULL, &p, plen);

File Metadata

Mime Type
text/plain
Expires
Wed, Nov 19, 8:18 PM (1 h, 8 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
25672530
Default Alt Text
D4393.id10774.diff (1 KB)

Event Timeline