Date: Thu, 20 Oct 2005 13:39:41 -0500 From: "Frank J. Laszlo" <laszlof@vonostingroup.com> To: FreeBSD-gnats-submit@FreeBSD.org Cc: sf@FreeBSD.org Subject: ports/87734: [UPDATE]: ftp/wget: SECURITY FIX: Update to version 1.10.2 Message-ID: <E1ESfKH-000FCb-9V@ion.franksworld.org> Resent-Message-ID: <200510201700.j9KH0VsB042944@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 87734
>Category: ports
>Synopsis: [UPDATE]: ftp/wget: SECURITY FIX: Update to version 1.10.2
>Confidential: no
>Severity: serious
>Priority: high
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: update
>Submitter-Id: current-users
>Arrival-Date: Thu Oct 20 17:00:30 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator: Frank J. Laszlo
>Release: FreeBSD 5.4-STABLE i386
>Organization:
>Environment:
System: FreeBSD ion.franksworld.org 5.4-STABLE FreeBSD 5.4-STABLE #0: Mon Jul 18 12:12:29 EDT 2005 laszlof@muffin.ubixos.com:/usr/obj/usr/src/sys/MUFFIN i386
>Description:
This patch will update ftp/wget to version 1.10.2. This version
contains fixes for a major security issue: a remotely exploitable
buffer overflow vulnerability in the NTLM authentication code.
The maintainer has been CC'd.
>How-To-Repeat:
>Fix:
--- wget-1.10.2.diff begins here ---
diff -NrU3 wget.orig/Makefile wget/Makefile
--- wget.orig/Makefile Thu Oct 20 13:31:33 2005
+++ wget/Makefile Thu Oct 20 13:31:46 2005
@@ -6,7 +6,7 @@
#
PORTNAME= wget
-DISTVERSION= 1.10.1
+DISTVERSION= 1.10.2
CATEGORIES= ftp www ipv6
MASTER_SITES= ${MASTER_SITE_GNU}
MASTER_SITE_SUBDIR= wget
diff -NrU3 wget.orig/distinfo wget/distinfo
--- wget.orig/distinfo Thu Oct 20 13:31:33 2005
+++ wget/distinfo Thu Oct 20 13:31:54 2005
@@ -1,2 +1,2 @@
-MD5 (wget-1.10.1.tar.gz) = 879a15cc9093796b8a5035ff0d0d25ad
-SIZE (wget-1.10.1.tar.gz) = 1212784
+MD5 (wget-1.10.2.tar.gz) = 795fefbb7099f93e2d346b026785c4b8
+SIZE (wget-1.10.2.tar.gz) = 1213056
--- wget-1.10.2.diff ends here ---
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E1ESfKH-000FCb-9V>