Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 10 Feb 2005 11:11:54 -0500 (EST)
From:      Wesley Shields <wxs@csh.rit.edu>
To:        FreeBSD-gnats-submit@FreeBSD.org
Cc:        onatan@gmail.com
Subject:   ports/77349: [SECURITY UPDATE]: security/libtomcrypt
Message-ID:  <200502101611.j1AGBs7e016137@syn.csh.rit.edu>
Resent-Message-ID: <200502101620.j1AGKMtv026656@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         77349
>Category:       ports
>Synopsis:       [SECURITY UPDATE]: security/libtomcrypt
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          update
>Submitter-Id:   current-users
>Arrival-Date:   Thu Feb 10 16:20:22 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     Wesley Shields
>Release:        FreeBSD 5.3-RELEASE-p5 i386
>Organization:
>Environment:
System: FreeBSD syn 5.3-RELEASE-p5 FreeBSD 5.3-RELEASE-p5 #0: Fri Jan 28 22:20:51 EST 2005 root@syn:/usr/obj/usr/src/sys/GENERIC i386

>Description:

Libtomcrypt released a patchset to fix a few security bugs.

>How-To-Repeat:

N/A

>Fix:

The attached patch will update the port.  I'm not entirely sure this is
the best way to do it, but using PATCHFILES would not work correctly and
this was one of the ways I was able to get it to update easily.  If
there is a better way to do it (ideally getting PATCHFILES to work) I
would be glad to hear of it.

The maintainer has been CC'ed on this.

diff -ruN security/libtomcrypt.orig/Makefile security/libtomcrypt/Makefile
--- security/libtomcrypt.orig/Makefile	Tue Feb  8 12:43:44 2005
+++ security/libtomcrypt/Makefile	Thu Feb 10 10:49:29 2005
@@ -7,9 +7,20 @@
 
 PORTNAME=	libtomcrypt
 PORTVERSION=	1.00
+PORTREVISION=	1
 CATEGORIES=	security
-MASTER_SITES=	http://libtomcrypt.org/files/
-DISTNAME=	crypt-${PORTVERSION}
+MASTER_SITES=	http://libtomcrypt.org/files/:source \
+		http://libtomcrypt.org/files/patch-1.00/:patch
+DISTFILES=	crypt-${PORTVERSION}.tar.bz2:source \
+		ltc-1.00-001.tar.bz2:patch
+
+EXTRA_PATCHES=	${WRKDIR}/src/pk/pkcs1/pkcs_1_oaep_encode.c.patch \
+		${WRKDIR}/src/pk/pkcs1/pkcs_1_oaep_decode.c.patch \
+		${WRKDIR}/src/misc/base64/base64_decode.c.patch \
+		${WRKDIR}/src/headers/tomcrypt.h.patch \
+		${WRKDIR}/makefile.shared.patch \
+		${WRKDIR}/makefile.patch \
+		${WRKDIR}/changes.patch \
 
 MAINTAINER=	onatan@gmail.com
 COMMENT=	Comprehensive, modular and portable cryptographic toolkit
diff -ruN security/libtomcrypt.orig/distinfo security/libtomcrypt/distinfo
--- security/libtomcrypt.orig/distinfo	Tue Feb  8 12:43:44 2005
+++ security/libtomcrypt/distinfo	Thu Feb 10 10:11:54 2005
@@ -1,2 +1,4 @@
 MD5 (crypt-1.00.tar.bz2) = 73a896e5e8f636dd14c1517f572ddaa1
 SIZE (crypt-1.00.tar.bz2) = 940439
+MD5 (ltc-1.00-001.tar.bz2) = fa7a398e554754098259a1a3a5997672
+SIZE (ltc-1.00-001.tar.bz2) = 1868

>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200502101611.j1AGBs7e016137>