Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-current.git;a=commitdiff;h=6d9fe590425cadbf1326b9ebd67cd12fab38c2fa
commit 6d9fe590425cadbf1326b9ebd67cd12fab38c2fa Author: kikadf <[email protected]> Date: Mon Jun 2 15:28:24 2014 +0200 gnutls-3.2.12.1-2-x86_64 * Fix CVE-2014-3466 diff --git a/source/lib/gnutls/CVE-2014-3466.patch b/source/lib/gnutls/CVE-2014-3466.patch new file mode 100644 index 0000000..e19ed40 --- /dev/null +++ b/source/lib/gnutls/CVE-2014-3466.patch @@ -0,0 +1,12 @@ +diff -Naur gnutls-3.2.12/lib/gnutls_handshake.c gnutls-3.2.12.new/lib/gnutls_handshake.c +--- gnutls-3.2.12/lib/gnutls_handshake.c 2014-02-22 18:40:46.000000000 +0100 ++++ gnutls-3.2.12.new/lib/gnutls_handshake.c 2014-06-02 15:18:20.152782076 +0200 +@@ -1744,7 +1744,7 @@ + DECR_LEN(len, 1); + session_id_len = data[pos++]; + +- if (len < session_id_len) { ++ if (len < session_id_len || session_id_len > TLS_MAX_SESSION_ID_SIZE) { + gnutls_assert(); + return GNUTLS_E_UNSUPPORTED_VERSION_PACKET; + } diff --git a/source/lib/gnutls/FrugalBuild b/source/lib/gnutls/FrugalBuild index a7e3ff4..2716623 100644 --- a/source/lib/gnutls/FrugalBuild +++ b/source/lib/gnutls/FrugalBuild @@ -4,7 +4,7 @@ pkgname=gnutls pkgver=3.2.12.1 -pkgrel=1 +pkgrel=2 pkgdesc="A library which provides a secure layer over a reliable transport layer" url="http://www.gnu.org/software/gnutls/"; groups=('lib') @@ -17,9 +17,15 @@ source=(ftp://ftp.gnutls.org/gcrypt/gnutls/v3.2/$pkgname-$pkgver.tar.xz) Finclude texinfo signatures=($source.sig) +# FSA fix *** +source=(${source[@]} CVE-2014-3466.patch) +signatures=(${signatures[@]} '') +# *********** + build() { Fcd $pkgname-3.2.12 + Fpatchall Fmake --enable-gtk-doc make check || return 1 Fmakeinstall _______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
