diff options
Diffstat (limited to 'security/gnutls')
| -rw-r--r-- | security/gnutls/Makefile | 2 | ||||
| -rw-r--r-- | security/gnutls/distinfo | 6 | ||||
| -rw-r--r-- | security/gnutls/files/patch-CVE-2008-4989 | 20 |
3 files changed, 24 insertions, 4 deletions
diff --git a/security/gnutls/Makefile b/security/gnutls/Makefile index 6eb183b2b2fc..a5fdad237602 100644 --- a/security/gnutls/Makefile +++ b/security/gnutls/Makefile @@ -6,7 +6,7 @@ # PORTNAME= gnutls -PORTVERSION= 2.4.1 +PORTVERSION= 2.4.2 PORTREVISION= 1 CATEGORIES= security net MASTER_SITES= http://josefsson.org/gnutls/releases/ \ diff --git a/security/gnutls/distinfo b/security/gnutls/distinfo index 914c3e554b08..742388c78939 100644 --- a/security/gnutls/distinfo +++ b/security/gnutls/distinfo @@ -1,3 +1,3 @@ -MD5 (gnutls-2.4.1.tar.bz2) = 573db36cb3f8472b0293cfa1f52c607a -SHA256 (gnutls-2.4.1.tar.bz2) = d91401a6828d7300dc2b1106ff99610479aa35af05d39746cacdab8cdc7be5fd -SIZE (gnutls-2.4.1.tar.bz2) = 4940118 +MD5 (gnutls-2.4.2.tar.bz2) = 148bde1f43cae2ea4265439df0da6399 +SHA256 (gnutls-2.4.2.tar.bz2) = 1c70e916c691c7c31ea3c8f2abeedae6c7dfda754e02b373287ceb5b46bfbb0e +SIZE (gnutls-2.4.2.tar.bz2) = 4958098 diff --git a/security/gnutls/files/patch-CVE-2008-4989 b/security/gnutls/files/patch-CVE-2008-4989 new file mode 100644 index 000000000000..0fcbc839f437 --- /dev/null +++ b/security/gnutls/files/patch-CVE-2008-4989 @@ -0,0 +1,20 @@ +--- lib/x509/verify.c.orig 2008-09-16 00:04:19.000000000 +0400 ++++ lib/x509/verify.c 2008-11-14 16:06:59.000000000 +0300 +@@ -414,17 +425,6 @@ + } + #endif + +- /* Check if the last certificate in the path is self signed. +- * In that case ignore it (a certificate is trusted only if it +- * leads to a trusted party by us, not the server's). +- */ +- if (gnutls_x509_crt_check_issuer (certificate_list[clist_size - 1], +- certificate_list[clist_size - 1]) > 0 +- && clist_size > 0) +- { +- clist_size--; +- } +- + /* Verify the certificate path (chain) + */ + for (i = clist_size - 1; i > 0; i--) |