PolarSSL: Multiple vulnerabilities

PolarSSL: Multiple vulnerabilities Multiple vulnerabilities have been found in PolarSSL, the worst of which may allow remote attackers to execute arbitrary code. polarssl 2018-01-15 2018-01-15 537108 620504 remote 1.3.9-r1

PolarSSL is a cryptographic library for embedded systems.

Multiple vulnerabilities have been discovered in PolarSSL. Please review the CVE identifiers referenced below for details.

A remote attacker might be able to execute arbitrary code, cause Denial of Service condition or obtain sensitive information.

There is no known workaround at this time.

Gentoo has discontinued support for PolarSSL and recommends that users unmerge the package:


      # emerge --unmerge "net-libs/polarssl"

CVE-2015-1182 CVE-2015-7575 jmbailey jmbailey