]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Require polarssl >= 1.2.10 for polarssl-builds, which fixes CVE-2013-5915.
authorSteffan Karger <steffan.karger@fox-it.com>
Tue, 22 Oct 2013 12:45:17 +0000 (14:45 +0200)
committerGert Doering <gert@greenie.muc.de>
Thu, 24 Oct 2013 11:41:51 +0000 (13:41 +0200)
commit402ace5477ba582fedf93b31d049d83860407351
treec261b59e503624f18d5eeef7a67ee46255c7bce9
parent8f5a4598662f4b2abe7acfe8f68c90a8b03f2dc8
Require polarssl >= 1.2.10 for polarssl-builds, which fixes CVE-2013-5915.

PolarSSL 1.2.9 fixes a possible timing attack in PolarSSL's RSA-CRT
implementation. See CVE-2013-5915 for details. This commit bumps the
minimum polarssl version required by configure.ac to 1.2.10, because 1.2.9
also introduced a memory leak, which is fixed in 1.2.10.

Signed-off-by: Steffan Karger <steffan.karger@fox-it.com>
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <1382445917-2974-1-git-send-email-steffan.karger@fox-it.com>
URL: http://article.gmane.org/gmane.network.openvpn.devel/7925
Signed-off-by: Gert Doering <gert@greenie.muc.de>
(cherry picked from commit 92d21e3fed33aad966b7b0ca6568e0cda8c7a8b5)
configure.ac