Date: Thu, 27 Mar 2008 16:08:59 GMT From: Michael Scheidell <scheidell@secnap.net> To: freebsd-gnats-submit@FreeBSD.org Subject: ports/122162: Maintainer-Update: SpamAssassin Security Dependency update Message-ID: <200803271608.m2RG8xYD071194@www.freebsd.org> Resent-Message-ID: <200803271610.m2RGA3mT090643@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 122162
>Category: ports
>Synopsis: Maintainer-Update: SpamAssassin Security Dependency update
>Confidential: no
>Severity: non-critical
>Priority: medium
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: maintainer-update
>Submitter-Id: current-users
>Arrival-Date: Thu Mar 27 16:10:02 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator: Michael Scheidell
>Release: 6.3
>Organization:
SECNAP Network Security
>Environment:
na
>Description:
Hi,
We have been able to trigger a "croak" assertion in the code of Net::DNS by
responding to the package with a malformed DNS response.
The croak itself doesn't allow you to overflow or execute arbitrary code, but
as it cannot be captured using normal Perl code - as with an eval() function
for example - a user of the Net::DNS package can be caused to "crash", his
program to forcefully terminate if it encounters this DNS response.
The problem steams from the fact that:
if ($self->{"rdlength"} > 0) {
$self->{"address"} = inet_ntoa(substr($$data, $offset, 4));
}
found in Net/DNS/RR/A.pm
updated in 0.63.
FreeBsd ports for p5-Net-DNS has been at 0.63 for 10 days.
Patch just adjusts the dependency and bumps portrevision to trigger a rebuild based on dependencies (portupgrade -R p5-Mail-SpamAssassin)
>How-To-Repeat:
'croak' the DNS.
>Fix:
Fix bumps portrevision and dependency on p5-Net-DNS from 0.60 to 0.63
I would attach a patch, but for some reason, even if I do 'magic things' to the file, you don't like it:
There is an error with your problem report submission. The problem was:
Patch file has wrong content type: got application/x-download but was expecting one matching text/.* or application/shar.
Try renaming the file to have a .txt extension to convince your browser to do the right thing.
diff -bBru /var/tmp/sa324_2/ ./
diff -bBru /var/tmp/sa324_2/Makefile ./Makefile
--- /var/tmp/sa324_2/Makefile Tue Feb 12 23:13:42 2008
+++ ./Makefile Thu Mar 27 11:40:07 2008
@@ -7,7 +7,7 @@
PORTNAME= Mail-SpamAssassin
PORTVERSION= 3.2.4
-PORTREVISION= 2
+PORTREVISION= 3
CATEGORIES= mail perl5
MASTER_SITES= ${MASTER_SITE_APACHE:S/$/:apache/} ${MASTER_SITE_PERL_CPAN:S/$/:cpan/}
MASTER_SITE_SUBDIR= spamassassin/source/:apache Mail/:cpan
@@ -17,7 +17,7 @@
MAINTAINER= scheidell@secnap.net
COMMENT= A highly efficient mail filter for identifying spam
-BUILD_DEPENDS= p5-Net-DNS>=0.60:${PORTSDIR}/dns/p5-Net-DNS \
+BUILD_DEPENDS= p5-Net-DNS>=0.63:${PORTSDIR}/dns/p5-Net-DNS \
p5-IO-Zlib>=1.04:${PORTSDIR}/archivers/p5-IO-Zlib \
p5-HTML-Parser>=3.43:${PORTSDIR}/www/p5-HTML-Parser \ p5-IO-Compress-Zlib>=2.04:${PORTSDIR}/archivers/p5-IO-Compress-Zlib \
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200803271608.m2RG8xYD071194>