From owner-freebsd-ports-bugs@FreeBSD.ORG Thu Mar 27 16:10:03 2008 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7DB5E1065670 for ; Thu, 27 Mar 2008 16:10:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 5FAF88FC1E for ; Thu, 27 Mar 2008 16:10:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id m2RGA3jE090644 for ; Thu, 27 Mar 2008 16:10:03 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id m2RGA3mT090643; Thu, 27 Mar 2008 16:10:03 GMT (envelope-from gnats) Resent-Date: Thu, 27 Mar 2008 16:10:03 GMT Resent-Message-Id: <200803271610.m2RGA3mT090643@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Michael Scheidell Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 441BD1065670 for ; Thu, 27 Mar 2008 16:09:16 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21]) by mx1.freebsd.org (Postfix) with ESMTP id 37B9C8FC1C for ; Thu, 27 Mar 2008 16:09:16 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.14.2/8.14.2) with ESMTP id m2RG8xVD071195 for ; Thu, 27 Mar 2008 16:08:59 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.14.2/8.14.1/Submit) id m2RG8xYD071194; Thu, 27 Mar 2008 16:08:59 GMT (envelope-from nobody) Message-Id: <200803271608.m2RG8xYD071194@www.freebsd.org> Date: Thu, 27 Mar 2008 16:08:59 GMT From: Michael Scheidell To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: ports/122162: Maintainer-Update: SpamAssassin Security Dependency update X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Mar 2008 16:10:03 -0000 >Number: 122162 >Category: ports >Synopsis: Maintainer-Update: SpamAssassin Security Dependency update >Confidential: no >Severity: non-critical >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: maintainer-update >Submitter-Id: current-users >Arrival-Date: Thu Mar 27 16:10:02 UTC 2008 >Closed-Date: >Last-Modified: >Originator: Michael Scheidell >Release: 6.3 >Organization: SECNAP Network Security >Environment: na >Description: Hi, We have been able to trigger a "croak" assertion in the code of Net::DNS by responding to the package with a malformed DNS response. The croak itself doesn't allow you to overflow or execute arbitrary code, but as it cannot be captured using normal Perl code - as with an eval() function for example - a user of the Net::DNS package can be caused to "crash", his program to forcefully terminate if it encounters this DNS response. The problem steams from the fact that: if ($self->{"rdlength"} > 0) { $self->{"address"} = inet_ntoa(substr($$data, $offset, 4)); } found in Net/DNS/RR/A.pm updated in 0.63. FreeBsd ports for p5-Net-DNS has been at 0.63 for 10 days. Patch just adjusts the dependency and bumps portrevision to trigger a rebuild based on dependencies (portupgrade -R p5-Mail-SpamAssassin) >How-To-Repeat: 'croak' the DNS. >Fix: Fix bumps portrevision and dependency on p5-Net-DNS from 0.60 to 0.63 I would attach a patch, but for some reason, even if I do 'magic things' to the file, you don't like it: There is an error with your problem report submission. The problem was: Patch file has wrong content type: got application/x-download but was expecting one matching text/.* or application/shar. Try renaming the file to have a .txt extension to convince your browser to do the right thing. diff -bBru /var/tmp/sa324_2/ ./ diff -bBru /var/tmp/sa324_2/Makefile ./Makefile --- /var/tmp/sa324_2/Makefile Tue Feb 12 23:13:42 2008 +++ ./Makefile Thu Mar 27 11:40:07 2008 @@ -7,7 +7,7 @@ PORTNAME= Mail-SpamAssassin PORTVERSION= 3.2.4 -PORTREVISION= 2 +PORTREVISION= 3 CATEGORIES= mail perl5 MASTER_SITES= ${MASTER_SITE_APACHE:S/$/:apache/} ${MASTER_SITE_PERL_CPAN:S/$/:cpan/} MASTER_SITE_SUBDIR= spamassassin/source/:apache Mail/:cpan @@ -17,7 +17,7 @@ MAINTAINER= scheidell@secnap.net COMMENT= A highly efficient mail filter for identifying spam -BUILD_DEPENDS= p5-Net-DNS>=0.60:${PORTSDIR}/dns/p5-Net-DNS \ +BUILD_DEPENDS= p5-Net-DNS>=0.63:${PORTSDIR}/dns/p5-Net-DNS \ p5-IO-Zlib>=1.04:${PORTSDIR}/archivers/p5-IO-Zlib \ p5-HTML-Parser>=3.43:${PORTSDIR}/www/p5-HTML-Parser \ p5-IO-Compress-Zlib>=2.04:${PORTSDIR}/archivers/p5-IO-Compress-Zlib \ >Release-Note: >Audit-Trail: >Unformatted: