Home
Reading
Searching
Subscribe
Sponsors
Statistics
Posting
Contact
Spam
Lists
Links
About
Hosting
Filtering
Features Download
Marketing
Archives
FAQ
Blog
 
Gmane
From: <updates <at> fedoraproject.org>
Subject: [SECURITY] Fedora 18 Update: polarssl-1.2.8-1.fc18
Newsgroups: gmane.linux.redhat.fedora.package.announce
Date: Friday 20th September 2013 16:27:34 UTC (over 3 years ago)
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-16356
2013-09-11 00:36:40
--------------------------------------------------------------------------------

Name        : polarssl
Product     : Fedora 18
Version     : 1.2.8
Release     : 1.fc18
URL         : http://polarssl.org/
Summary     : Light-weight cryptographic and SSL/TLS library
Description :
PolarSSL is a light-weight open source cryptographic and SSL/TLS
library written in C. PolarSSL makes it easy for developers to include
cryptographic and SSL/TLS capabilities in their (embedded)
applications with as little hassle as possible.

--------------------------------------------------------------------------------
Update Information:

PolarSSL 1.2.8
--------------------------------------------------------------------------------
ChangeLog:

* Mon Sep  9 2013 Mads Kiilerich  - 1.2.8-1
- polarssl 1.2.8
* Wed Apr 17 2013 Peter Robinson  1.2.7-1
- Update 1.2.7 (Fix FTBFS on ARM), cleanup SPEC
* Sun Mar 31 2013 Mads Kiilerich  - 1.2.6-1
- polarssl-1.2.6
    - TLS and DTLS protocol issue:      CVE-2013-0169  (bug 907589)
    - out-of-bounds comparisons:        CVE-2013-1621  (bug 908423)
* Sun Feb  3 2013 Mads Kiilerich  - 1.2.5-1
- polarssl-1.2.5
* Thu Jan 31 2013 Mads Kiilerich  - 1.2.4-1
- polarssl-1.2.4
* Sun Jan 20 2013 Mads Kiilerich  - 1.2.3-1
- polarssl-1.2.3
* Sat Jan 19 2013 Mads Kiilerich  - 1.1.5-1
- polarssl-1.1.5
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #997767 - CVE-2013-4623 polarssl: denial of service (infinite
loop) when parsing certain PEM encoded certificates
        https://bugzilla.redhat.com/show_bug.cgi?id=997767
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update polarssl' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on
the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
[email protected]
https://admin.fedoraproject.org/mailman/listinfo/package-announce
 
CD: 3ms