Commit Graph

7 Commits

Author SHA1 Message Date
Arne Fitzenreiter
a51ce2defa core114: add unbound initskript to updater.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-08-30 19:03:15 +02:00
Michael Tremer
0c55ec5a49 strongswan: Update to 5.6.0
Fixes CVE-2017-11185:

Fixed a DoS vulnerability in the gmp plugin that was caused by insufficient input validation
when verifying RSA signatures, which requires decryption with the operation m^e mod n,
where m is the signature, and e and n are the exponent and modulus of the public key.
The value m is an integer between 0 and n-1, however, the gmp plugin did not verify this.
So if m equals n the calculation results in 0, in which case mpz_export() returns NULL.
This result wasn't handled properly causing a null-pointer dereference.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-23 20:03:21 +01:00
Michael Tremer
455f261b15 core114: Ship updated squid
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-23 11:33:41 +01:00
Michael Tremer
fa9c7bd047 core114: Ship updated gnutls
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-23 11:31:56 +01:00
Michael Tremer
38b95ad5d9 core114: Ship updated unbound
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-23 11:29:55 +01:00
Michael Tremer
1d7d4460d6 core114: Ship updated hdparm
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-21 12:21:45 +01:00
Michael Tremer
05e7808cd6 Start Core Update 114
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-08-21 12:21:14 +01:00