diff --git a/srcpkgs/polarssl/patches/CVE-2015-1182.patch b/srcpkgs/polarssl/patches/CVE-2015-1182.patch
new file mode 100644
index 00000000000..3d2de7c76df
--- /dev/null
+++ b/srcpkgs/polarssl/patches/CVE-2015-1182.patch
@@ -0,0 +1,11 @@
+--- library/asn1parse.c
++++ library/asn1parse.c
+@@ -278,6 +278,8 @@ int asn1_get_sequence_of( unsigned char **p,
+             if( cur->next == NULL )
+                 return( POLARSSL_ERR_ASN1_MALLOC_FAILED );
+
++            memset( cur->next, 0, sizeof( asn1_sequence ) );
++
+             cur = cur->next;
+         }
+     }
diff --git a/srcpkgs/polarssl/template b/srcpkgs/polarssl/template
index d2231b5de10..dc13d2d17c9 100644
--- a/srcpkgs/polarssl/template
+++ b/srcpkgs/polarssl/template
@@ -1,7 +1,7 @@
 # Template file for 'polarssl'
 pkgname=polarssl
 version=1.3.9
-revision=3
+revision=4
 build_style=cmake
 configure_args="-DENABLE_ZLIB_SUPPORT=on -DUSE_SHARED_POLARSSL_LIBRARY=on"
 hostmakedepends="cmake perl"