Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 27 Mar 2019 19:23:34 +0000 (UTC)
From:      Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
To:        ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org
Subject:   svn commit: r496975 - in head/lang/python36: . files
Message-ID:  <201903271923.x2RJNYQH072723@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: sunpoet
Date: Wed Mar 27 19:23:34 2019
New Revision: 496975
URL: https://svnweb.freebsd.org/changeset/ports/496975

Log:
  Fix CVE-2019-5010
  
  - Bump PORTREVISION for package change
  
  Obtained from:	https://github.com/python/cpython/commit/216a4d83c3b72f4fdcd81b588dc3f42cc461739a
  Reference:	https://bugs.python.org/issue35746
  Security:	d74371d2-4fee-11e9-a5cd-1df8a848de3d
  MFH:		2019Q1

Added:
  head/lang/python36/files/patch-bpo35746   (contents, props changed)
Modified:
  head/lang/python36/Makefile

Modified: head/lang/python36/Makefile
==============================================================================
--- head/lang/python36/Makefile	Wed Mar 27 19:23:29 2019	(r496974)
+++ head/lang/python36/Makefile	Wed Mar 27 19:23:34 2019	(r496975)
@@ -3,6 +3,7 @@
 
 PORTNAME=	python
 PORTVERSION=	${PYTHON_PORTVERSION}
+PORTREVISION=	1
 CATEGORIES=	lang python ipv6
 MASTER_SITES=	PYTHON/ftp/python/${PORTVERSION}
 PKGNAMESUFFIX=	${PYTHON_SUFFIX}

Added: head/lang/python36/files/patch-bpo35746
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/lang/python36/files/patch-bpo35746	Wed Mar 27 19:23:34 2019	(r496975)
@@ -0,0 +1,21 @@
+Obtained from:	https://github.com/python/cpython/commit/216a4d83c3b72f4fdcd81b588dc3f42cc461739a
+
+bpo-35746: Fix segfault in ssl's cert parser (GH-11569) (GH-11573)
+
+Fix a NULL pointer deref in ssl module. The cert parser did not handle CRL
+distribution points with empty DP or URI correctly. A malicious or buggy
+certificate can result into segfault.
+
+--- Modules/_ssl.c.orig
++++ Modules/_ssl.c
+@@ -1338,6 +1338,10 @@ _get_crl_dp(X509 *certificate) {
+         STACK_OF(GENERAL_NAME) *gns;
+ 
+         dp = sk_DIST_POINT_value(dps, i);
++        if (dp->distpoint == NULL) {
++            /* Ignore empty DP value, CVE-2019-5010 */
++            continue;
++        }
+         gns = dp->distpoint->name.fullname;
+ 
+         for (j=0; j < sk_GENERAL_NAME_num(gns); j++) {



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201903271923.x2RJNYQH072723>