Bug 464206 (CVE-2013-0169)

Summary:	<net-libs/polarssl-1.2.6: TLS and DTLS protocol issue (CVE-2013-0169)
Product:	Gentoo Security	Reporter:	Manuel Rüger (RETIRED) <mrueg>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	minor	CC:	tommy
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B3 [glsa]
Package list:		Runtime testing required:	---
Bug Depends on:	473984
Bug Blocks:

Description Manuel Rüger (RETIRED) gentoo-dev

2013-04-02 16:00:52 UTC

See also https://polarssl.org/tech-updates/releases/polarssl-1.2.6-released and https://polarssl.org/tech-updates/releases/polarssl-1.1.6-released (if 1.1.x is still maintained in Gentoo)

Comment 1 Sean Amoss (RETIRED) gentoo-dev

2013-04-06 21:08:30 UTC

Thank you for the report, Manuel.

Comment 2 Thomas Sachau gentoo-dev

2013-06-23 12:25:34 UTC

version 1.2.8 just added, which also fixes the following DoS:
https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2013-03

Comment 3 Sergey Popov (RETIRED) gentoo-dev

2013-10-17 08:12:41 UTC

Added to existing GLSA draft

Comment 4 GLSAMaker/CVETool Bot gentoo-dev

2013-10-17 09:03:29 UTC

This issue was resolved and addressed in
 GLSA 201310-10 at http://security.gentoo.org/glsa/glsa-201310-10.xml
by GLSA coordinator Sergey Popov (pinkbyte).