diff options
| author | jmmv <jmmv@pkgsrc.org> | 2005-04-12 20:12:02 +0000 |
|---|---|---|
| committer | jmmv <jmmv@pkgsrc.org> | 2005-04-12 20:12:02 +0000 |
| commit | ec2fbc2586680903efd52d0a652a249b6b076477 (patch) | |
| tree | d968d5c8b1c98ffd0e61129f8e9aa5d5c00fbd9f /sysutils | |
| parent | c6381a0113b8a97fd99ea286264ee9f62346073e (diff) | |
| download | pkgsrc-ec2fbc2586680903efd52d0a652a249b6b076477.tar.gz | |
Apply patch from Gentoo to fix security problem in the cdda module. Bump
gnome-vfs2-cdda's module to 1.
Quoting the Gentoo advisory: "The GnomeVFS and libcdaudio libraries contain
a buffer overflow that can be triggered by a large CDDB response, potentially
allowing the execution of arbitrary code."
See http://www.gentoo.org/security/en/glsa/glsa-200504-07.xml and
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0706 for more
information.
Diffstat (limited to 'sysutils')
| -rw-r--r-- | sysutils/gnome-vfs2/distinfo | 3 | ||||
| -rw-r--r-- | sysutils/gnome-vfs2/patches/patch-ac | 13 |
2 files changed, 15 insertions, 1 deletions
diff --git a/sysutils/gnome-vfs2/distinfo b/sysutils/gnome-vfs2/distinfo index 41484fc3faa..5b45ffd9685 100644 --- a/sysutils/gnome-vfs2/distinfo +++ b/sysutils/gnome-vfs2/distinfo @@ -1,10 +1,11 @@ -$NetBSD: distinfo,v 1.35 2005/04/05 20:29:04 rillig Exp $ +$NetBSD: distinfo,v 1.36 2005/04/12 20:12:02 jmmv Exp $ SHA1 (gnome-vfs-2.10.0.tar.bz2) = ae6524a48a6acc43db58cc1d0c63132977e5fbf3 RMD160 (gnome-vfs-2.10.0.tar.bz2) = 528962e887c8e6690a710c13e0910f69fbe1ae4d Size (gnome-vfs-2.10.0.tar.bz2) = 1901027 bytes SHA1 (patch-aa) = a5a3ac6be3e2a888eaaab108807d2aff651e62db SHA1 (patch-ab) = 6320180870f234a150dfe40f8f990deec7a2a0b5 +SHA1 (patch-ac) = 6c9604b57eab2429935dffac8c17e09fa6e3e53a SHA1 (patch-ad) = 326e835c7fd1d2e25ac2ae4736347d38ffe8ea06 SHA1 (patch-ae) = 32fe1a4e82d96bf80f3364704e7369a4ee778e0f SHA1 (patch-af) = ebbd81c92403cd429a807f9a89c81971d1c4fb88 diff --git a/sysutils/gnome-vfs2/patches/patch-ac b/sysutils/gnome-vfs2/patches/patch-ac new file mode 100644 index 00000000000..4c1bc805d05 --- /dev/null +++ b/sysutils/gnome-vfs2/patches/patch-ac @@ -0,0 +1,13 @@ +$NetBSD: patch-ac,v 1.5 2005/04/12 20:12:02 jmmv Exp $ + +--- modules/cdda-cddb.c.orig 2004-07-25 15:40:35.000000000 +0000 ++++ modules/cdda-cddb.c +@@ -440,7 +440,7 @@ CDDBDoQuery (cdrom_drive *cd_desc, CDDBS + query->query_match=MATCH_INEXACT; + query->query_matches=0; + +- while(!CDDBReadLine(socket,inbuffer,256)) { ++ while(query->query_matches < MAX_INEXACT_MATCHES && !CDDBReadLine(socket,inbuffer,256)) { + query->query_list[query->query_matches].list_genre= + CDDBGenreValue(ChopWhite(strtok(inbuffer," "))); + |