summaryrefslogtreecommitdiff
path: root/chat/jabberd2
diff options
context:
space:
mode:
authorabs <abs>2004-11-29 17:55:08 +0000
committerabs <abs>2004-11-29 17:55:08 +0000
commit903b69a3780709fc45648b9d19e5bc72ab5191f4 (patch)
tree3e857cf9ea7bf684173aadb26cb6e245b10be257 /chat/jabberd2
parentc502176e94f29e42d1ca2a6dd1f62b499fdf57c5 (diff)
downloadpkgsrc-903b69a3780709fc45648b9d19e5bc72ab5191f4.tar.gz
Update jabberd2 to jabberd-2.0s4nb1, by pulling in patches from
http://www.marquard.net/jabber/#recommended, specifically patch 58 which fixes the remote exploit listed at: http://www.securityfocus.com/archive/1/382250 Patches included: 28* patch-jedi8-sm-object_c Remove incorrect semicolumn from os_object_free() in sm/object.c 29* patch-jedi-mysql-storage Fixes to mysql storage for boundary conditions 30* patch-base64 Fix length-related issues in base64 decoding routines 31* patch-sm-storage_db Fixes to storage_db.c to avoid roster corruption: "sm/storage_db inserts items in the filter hash table with keys which are located on the stack. This creates confusion when the code later tries to compare with these keys." 32* patch-nad-escape Fixes bug in _nad_escape() where escaping ]]> can cause a segfault when handling large messages where nad_realloc is called. 38* patch-jedi-pgsql-storage Fixes to pgsql storage for boundary conditions and incorrect buffer length calculation 46* patch-memleaks Fix minor memory leaks in digest-md5 authentication and nad_free() 47* patch-ns-fix Fixes omission of namespace declaration where a namespace has already been used in the XML stanza 48* patch-sm-nad-triplet Fixes omission of prefix on attributes processed by nad_parse (e.g. in queue storage) 49* patch-mod_disco_publish Corrects check for deleting previously published disco items from "delete" to "remove" (as per JEP-0030). 50* patch-sm-filter Alters filter handling and adds mysql/pgsql escaping on filter strings to allow brackets and apostrophes in resource names that form part of JIDs stored as roster entries 58* patch-c2s-buffers Fixes buffer overflow that can lead to segfault in c2s mysql and pgsql auth modules - see report by icbm (www.venustech.com.cn)
Diffstat (limited to 'chat/jabberd2')
0 files changed, 0 insertions, 0 deletions