Tobias Klein found heap overflow in the VOC parser of libsndfile: [1], [2]. Libsndfile developers reported on the fixed heap overflow in the AIFF parser: [2]. Fix: The following patch updates the port to 1.0.20. I had verified that port builds fine and resulted sndfile-convert works fine. The following VuXML entry should be evaluated and added: <vuln vid="9e052189-4532-11de-9b62-0022156e8794"> <topic>libsndfile -- heap overflows in VOC and AIFF parsers</topic> <affects> <package> <name></name> <range><lt>1.0.20</lt></range> </package> </affects> <description> <body xmlns="http://www.w3.org/1999/xhtml"> <p>Tobias Klein reports:</p> <blockquote cite="http://www.trapkit.de/advisories/TKADV2009-006.txt"> <p>libsndfile contains a heap buffer overflow vulnerability while parsing malformed VOC (Creative Voice) media files. The vulnerability may be exploited by a (remote) attacker to execute arbitrary code in the context of an application using the libsndfile library.</p> </blockquote> <p>Additionally, libsndfile developers report on the unspecified buffer overflow in the AIFF parser.</p> </body> </description> <references> <bid>34978</bid> <url>http://secunia.com/advisories/35076/</url> <url>http://www.trapkit.de/advisories/TKADV2009-006.txt</url> <url>http://www.mega-nerd.com/erikd/Blog/CodeHacking/libsndfile/rel_20.html</url> </references> <dates> <discovery>2009-05-20</discovery> <entry>TODAY</entry> </dates> </vuln> --- vuln.xml ends here -----ijPq7B1wcanVnccH5pIsotUQQ3XSDC2js22K8UCYkFbrSdaF Content-Type: text/plain; name="upgrade-to-1.0.20.diff" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="upgrade-to-1.0.20.diff" From 0c044a85a2c0b69236015e0deaef3b7e5eca3e9a Mon Sep 17 00:00:00 2001 From: Eygene Ryabinkin <rea-fbsd@codelabs.ru> Date: Wed, 20 May 2009 15:54:21 +0400 ...and fix VOC and AIFF parsers heap overflows. Signed-off-by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> --- audio/libsndfile/Makefile | 4 ++-- audio/libsndfile/distinfo | 6 +++--- audio/libsndfile/pkg-plist | 1 - 3 files changed, 5 insertions(+), 6 deletions(-) diff --git a/audio/libsndfile/Makefile b/audio/libsndfile/Makefile index bfb6ae8..8f64c1e 100644 --- a/audio/libsndfile/Makefile +++ b/audio/libsndfile/Makefile @@ -6,7 +6,7 @@ # PORTNAME= libsndfile -PORTVERSION= 1.0.19 +PORTVERSION= 1.0.20 CATEGORIES= audio MASTER_SITES= http://www.mega-nerd.com/libsndfile/ @@ -43,7 +43,7 @@ post-patch: post-install: .if !defined(NOPORTDOCS) @${MKDIR} ${DOCSDIR} -.for file in AUTHORS ChangeLog NEWS README TODO +.for file in AUTHORS ChangeLog NEWS README ${INSTALL_DATA} ${WRKSRC}/${file} ${DOCSDIR} .endfor ${TAR} -C ${WRKSRC}/doc --exclude "*Makefile*" --exclude "*.in" \ diff --git a/audio/libsndfile/distinfo b/audio/libsndfile/distinfo index 5e9e5a5..63e5c5e 100644 --- a/audio/libsndfile/distinfo +++ b/audio/libsndfile/distinfo @@ -1,3 +1,3 @@ -MD5 (libsndfile-1.0.19.tar.gz) = 8fa24b0c0a8758543427c9741ea06924 -SHA256 (libsndfile-1.0.19.tar.gz) = 4b567a02e15bcae25fa1aeb3361b4e2cb8b2ce08e9b53faa81f77a34fb2b5419 -SIZE (libsndfile-1.0.19.tar.gz) = 924368 +MD5 (libsndfile-1.0.20.tar.gz) = e0553e12c7a467af44693e95e2eac668 +SHA256 (libsndfile-1.0.20.tar.gz) = 7517eb966579f8814b5efe307cb919c5b4e7b5c6729209ba1da95f31e8368dc7 +SIZE (libsndfile-1.0.20.tar.gz) = 927422 diff --git a/audio/libsndfile/pkg-plist b/audio/libsndfile/pkg-plist index 8c0270a..e8d63f3 100644 --- a/audio/libsndfile/pkg-plist +++ b/audio/libsndfile/pkg-plist @@ -18,7 +18,6 @@ libdata/pkgconfig/sndfile.pc %%PORTDOCS%%%%DOCSDIR%%/FAQ.html %%PORTDOCS%%%%DOCSDIR%%/NEWS %%PORTDOCS%%%%DOCSDIR%%/README -%%PORTDOCS%%%%DOCSDIR%%/TODO %%PORTDOCS%%%%DOCSDIR%%/api.html %%PORTDOCS%%%%DOCSDIR%%/bugs.html %%PORTDOCS%%%%DOCSDIR%%/command.html -- 1.6.3.1 How-To-Repeat: [1] http://www.trapkit.de/advisories/TKADV2009-006.txt [2] http://www.mega-nerd.com/erikd/Blog/CodeHacking/libsndfile/rel_20.html
Responsible Changed From-To: freebsd-ports-bugs->freebsd-multimedia Over to maintainer (via the GNATS Auto Assign Tool)
Responsible Changed From-To: freebsd-multimedia->miwi I'll take it.
miwi 2009-05-30 19:43:28 UTC FreeBSD ports repository Modified files: audio/libsndfile Makefile distinfo pkg-plist Log: - Update to 1.0.20 PR: 134751 Submitted by: Eygene Ryabinkin <rea-fbsd@codelabs.ru> Security: http://www.freebsd.org/ports/portaudit/6355efdb-4d4d-11de-8811-0030843d3802.html Revision Changes Path 1.44 +2 -2 ports/audio/libsndfile/Makefile 1.25 +3 -3 ports/audio/libsndfile/distinfo 1.14 +0 -1 ports/audio/libsndfile/pkg-plist _______________________________________________ cvs-all@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/cvs-all To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
State Changed From-To: open->closed Committed. Thanks!