summaryrefslogtreecommitdiff
path: root/net/avahi
diff options
context:
space:
mode:
authoradrianp <adrianp>2008-12-23 12:08:17 +0000
committeradrianp <adrianp>2008-12-23 12:08:17 +0000
commit3efcc0157b57aba606e695949b8e3f0251217829 (patch)
tree9e5ef200a1a0d67b1850efd3d044b3480f3c7898 /net/avahi
parent8a4e4eee7e1ccd87afd8038a6991ff06fa08c151 (diff)
downloadpkgsrc-3efcc0157b57aba606e695949b8e3f0251217829.tar.gz
Fix for http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5081
Diffstat (limited to 'net/avahi')
-rw-r--r--net/avahi/Makefile4
-rw-r--r--net/avahi/distinfo3
-rw-r--r--net/avahi/patches/patch-ai16
3 files changed, 20 insertions, 3 deletions
diff --git a/net/avahi/Makefile b/net/avahi/Makefile
index 44eda245c1b..ce95f75c13e 100644
--- a/net/avahi/Makefile
+++ b/net/avahi/Makefile
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.2 2008/12/20 23:51:39 ahoka Exp $
+# $NetBSD: Makefile,v 1.3 2008/12/23 12:08:17 adrianp Exp $
DISTNAME= avahi-0.6.23
-PKGREVISION= 1
+PKGREVISION= 2
CATEGORIES= net
MASTER_SITES= http://avahi.org/download/
diff --git a/net/avahi/distinfo b/net/avahi/distinfo
index c160301feaa..0ad063e9141 100644
--- a/net/avahi/distinfo
+++ b/net/avahi/distinfo
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.2 2008/12/23 02:08:05 hasso Exp $
+$NetBSD: distinfo,v 1.3 2008/12/23 12:08:17 adrianp Exp $
SHA1 (avahi-0.6.23.tar.gz) = 54a0d1944e43805886aafccaf5cc3ec567f5cc9e
RMD160 (avahi-0.6.23.tar.gz) = cdb24199bb9d48eba0a98097b4fe5aee94b8367c
@@ -11,3 +11,4 @@ SHA1 (patch-ae) = ec99b721253b0181ae12ab392d98e79ede30ddba
SHA1 (patch-af) = 57a788ca492f15c0e05870ea5eb6c4048b30b9c5
SHA1 (patch-ag) = ddfcb74e5e34619245ad230a73c732261c2250ea
SHA1 (patch-ah) = 63758f0e5ca24a1570c0c8dfea05836d6cce73f0
+SHA1 (patch-ai) = 658dae685c3542c5d7f15cc8865e90a0292e4ad0
diff --git a/net/avahi/patches/patch-ai b/net/avahi/patches/patch-ai
new file mode 100644
index 00000000000..4c9bb72124f
--- /dev/null
+++ b/net/avahi/patches/patch-ai
@@ -0,0 +1,16 @@
+$NetBSD: patch-ai,v 1.1 2008/12/23 12:08:17 adrianp Exp $
+
+--- avahi-core/server.c.orig 2008-06-18 00:13:44.000000000 +0100
++++ avahi-core/server.c
+@@ -898,6 +898,11 @@ static void dispatch_packet(AvahiServer
+ return;
+ }
+
++ if (port <= 0) {
++ avahi_log_warn("Received packet from invalid source port.");
++ return;
++ }
++
+ if (avahi_address_is_ipv4_in_ipv6(src_address))
+ /* This is an IPv4 address encapsulated in IPv6, so let's ignore it. */
+ return;