mirrors/meta-openembedded
1
0 Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-11-12 15:31:03 +00:00
Code Issues Projects Releases Wiki Activity

strongswan: patch CVE-2026-78130

Browse Source 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78130

[1]https://download.strongswan.org/security/CVE-2026-78130/strongswan-5.1.3-6.0.7_x509_ac_issuer_null.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78130).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit d831ff4ac9)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
This commit is contained in:
Ankur Tyagi committed 2026-10-13 21:32:54 +13:00
1 parent fd21700848
commit 359b6fb067
2 files changed
+50
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

meta-networking/recipes-support/strongswan/strongswan/CVE-2026-78130.patch
+49
View File
@@ -0,0 +1,49 @@
From 254d971bbe7479fe5fffc34cd1dd1e349a48e7aa Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Fri, 19 Jun 2026 11:57:48 +0200
Subject: [PATCH] x509: Avoid NULL-pointer dereference if issuerName is missing
in attribute certificate
If neither authoritiyKeyIdentifier nor issuerName are encoded in an
attribute certificate, the validation in `acert_validator.c:verify()`
will cause a NULL-pointer dereference via `issued_by()` (the lookup
with NULL identity will enumerate all trusted certificates).
Fixes: 26930a8c3e42 ("certificate factory can load certs from file")
Fixes: CVE-2026-78130
CVE: CVE-2026-78130
Upstream-Status: Backport [https://github.com/strongswan/strongswan/commit/bee6ce27761e1f38958be36ebe6688ef963c3d22]
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
src/libstrongswan/plugins/x509/x509_ac.c | 9 +++++++--
1 file changed, 7 insertions(+), 2 deletions(-)
diff --git a/src/libstrongswan/plugins/x509/x509_ac.c b/src/libstrongswan/plugins/x509/x509_ac.c
index 68b7cf9..11a847e 100644
--- a/src/libstrongswan/plugins/x509/x509_ac.c
+++ b/src/libstrongswan/plugins/x509/x509_ac.c
@@ -898,7 +898,11 @@ METHOD(certificate_t, has_issuer, id_match_t,
{
return ID_MATCH_PERFECT;
}
- return this->issuerName->matches(this->issuerName, issuer);
+ if (this->issuerName)
+ {
+ return this->issuerName->matches(this->issuerName, issuer);
+ }
+ return ID_MATCH_NONE;
}
METHOD(certificate_t, issued_by, bool,
@@ -935,7 +939,8 @@ METHOD(certificate_t, issued_by, bool,
}
else
{
- if (!this->issuerName->equals(this->issuerName,
+ if (!this->issuerName ||
+ !this->issuerName->equals(this->issuerName,
issuer->get_subject(issuer)))
{
return FALSE;
meta-networking/recipes-support/strongswan/strongswan_6.0.7.bb
+1
View File
@@ -16,6 +16,7 @@ SRC_URI = "https://download.strongswan.org/strongswan-${PV}.tar.bz2 \
file://CVE-2026-78129.patch \
file://CVE-2026-78133.patch \
file://CVE-2026-78131.patch \
file://CVE-2026-78130.patch \
"
SRC_URI[sha256sum] = "e518e34e159514f4c6ba80d1f926cb151e0dd4e3a1d94213171234b8b9ae6f55"