Bug 149180 - Security update to fix archivers/libmspack Infinite Loop Denial of Service
Summary: Security update to fix archivers/libmspack Infinite Loop Denial of Service
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Max Khon
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-08-01 17:30 UTC by Esa Karkkainen
Modified: 2010-08-01 18:40 UTC (History)
1 user (show)

See Also:

Attachments
file.diff (1.13 KB, patch)
2010-08-01 17:30 UTC, Esa Karkkainen 		no flags Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Esa Karkkainen 2010-08-01 17:30:05 UTC 
Please see

<http://portaudit.FreeBSD.org/43024078-9b63-11df-8983-001d60d86f38.html>

How-To-Repeat: 
Install ports-mgmt/portaudit, run "portaudit -F" command and then try to
install archivers/libmspack.
Comment 1 Edwin Groothuis freebsd_committer freebsd_triage 2010-08-01 17:30:17 UTC 
Responsible Changed
From-To: freebsd-ports-bugs->fjoe

Over to maintainer (via the GNATS Auto Assign Tool)
Comment 2 Max Khon freebsd_committer freebsd_triage 2010-08-01 18:29:07 UTC 
State Changed
From-To: open->closed

The change is committed. You forgot to update pkg-plist however.
Comment 3 dfilter service freebsd_committer freebsd_triage 2010-08-01 18:29:07 UTC 
fjoe        2010-08-01 17:28:58 UTC

  FreeBSD ports repository

  Modified files:
    archivers/libmspack  Makefile distinfo pkg-plist 
  Log:
  Update to 0.2alpha.
  
  This fixes infinite loop in MS-ZIP.
  
  PR:             149180
  
  Revision  Changes    Path
  1.14      +1 -1      ports/archivers/libmspack/Makefile
  1.4       +3 -3      ports/archivers/libmspack/distinfo
  1.3       +1 -0      ports/archivers/libmspack/pkg-plist
_______________________________________________
cvs-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"