From owner-freebsd-ports-bugs@FreeBSD.ORG Tue Aug 9 08:00:42 2005 Return-Path: X-Original-To: freebsd-ports-bugs@hub.freebsd.org Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1006A16A422 for ; Tue, 9 Aug 2005 08:00:42 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id D158C43D67 for ; Tue, 9 Aug 2005 08:00:40 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id j7980evU064841 for ; Tue, 9 Aug 2005 08:00:40 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.3/8.13.1/Submit) id j7980efC064836; Tue, 9 Aug 2005 08:00:40 GMT (envelope-from gnats) Resent-Date: Tue, 9 Aug 2005 08:00:40 GMT Resent-Message-Id: <200508090800.j7980efC064836@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Andrej Zverev Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 094FF16A421 for ; Tue, 9 Aug 2005 07:50:19 +0000 (GMT) (envelope-from az@inec.ru) Received: from waterwall.inec.ru (waterwall.inec.ru [213.148.3.225]) by mx1.FreeBSD.org (Postfix) with ESMTP id 038FD43D45 for ; Tue, 9 Aug 2005 07:50:17 +0000 (GMT) (envelope-from az@inec.ru) Received: from waterwall.inec.ru (root@localhost) by waterwall.inec.ru (8.13.1/8.12.6) with SMTP id j797pW27047465 for ; Tue, 9 Aug 2005 11:51:32 +0400 (MSD) Received: from az.inec.ru (msproxyoutif.intermediate.org [10.0.0.2]) by waterwall.inec.ru (8.13.1/8.12.6) with ESMTP id j797pWRX047460 for ; Tue, 9 Aug 2005 11:51:32 +0400 (MSD) Received: from az by az.inec.ru with local (Exim 4.51 (FreeBSD)) id 1E2OsK-000NAd-V0 for FreeBSD-gnats-submit@freebsd.org; Tue, 09 Aug 2005 11:50:16 +0400 Message-Id: Date: Tue, 09 Aug 2005 11:50:16 +0400 From: Andrej Zverev To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: Subject: ports/84691: [update] net/gaim - security CAN-2005-2370 X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Andrej Zverev List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Aug 2005 08:00:42 -0000 >Number: 84691 >Category: ports >Synopsis: [update] net/gaim - security CAN-2005-2370 >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Tue Aug 09 08:00:40 GMT 2005 >Closed-Date: >Last-Modified: >Originator: Andrej Zverev >Release: FreeBSD 5.4-RELEASE-p1 i386 >Organization: >Environment: System: FreeBSD az.inec.ru 5.4-RELEASE-p1 FreeBSD 5.4-RELEASE-p1 #2: Wed Jul 6 12:10:32 MSD 2005 root@az.inec.ru:/usr/obj/usr/src/sys/GENERIC i386 >Description: See CAN-2005-2370 Patch from debain project >How-To-Repeat: >Fix: --- gaim.diff begins here --- diff -Nru gaim.orig/Makefile gaim/Makefile --- gaim.orig/Makefile Sat Jul 9 21:35:43 2005 +++ gaim/Makefile Thu Aug 4 11:09:22 2005 @@ -7,6 +7,7 @@ PORTNAME= gaim PORTVERSION= 1.4.0 +PORTREVISION= 1 CATEGORIES?= net MASTER_SITES= ${MASTER_SITE_SOURCEFORGE} MASTER_SITE_SUBDIR= ${PORTNAME} diff -Nru gaim.orig/files/patch-src_protocols_gg_libgg.c gaim/files/patch-src_protocols_gg_libgg.c --- gaim.orig/files/patch-src_protocols_gg_libgg.c Thu Jan 1 03:00:00 1970 +++ gaim/files/patch-src_protocols_gg_libgg.c Thu Aug 4 10:58:29 2005 @@ -0,0 +1,16 @@ +# see CAN-2005-2370 +--- src/protocols/gg/libgg.c.orig Wed Mar 2 14:53:57 2005 ++++ src/protocols/gg/libgg.c Thu Aug 4 10:49:06 2005 +@@ -1099,7 +1099,11 @@ + e->event.status60.descr = buf; + + if (len > 4 && p[h->length - 5] == 0) +- e->event.status60.time = *((int*) (p + h->length - 4)); ++ { ++ uint32_t t; ++ memcpy(&t, p + h->length - 4, sizeof(uint32_t)); ++ e->event.status60.time = t; ++ } + } + + break; --- gaim.diff ends here --- >Release-Note: >Audit-Trail: >Unformatted: