From owner-cvs-ports@FreeBSD.ORG Fri Feb 3 11:08:45 2006 Return-Path: X-Original-To: cvs-ports@FreeBSD.org Delivered-To: cvs-ports@FreeBSD.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 657E816A420; Fri, 3 Feb 2006 11:08:45 +0000 (GMT) (envelope-from lofi@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1107F43D58; Fri, 3 Feb 2006 11:08:44 +0000 (GMT) (envelope-from lofi@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id k13B8hXP080281; Fri, 3 Feb 2006 11:08:43 GMT (envelope-from lofi@repoman.freebsd.org) Received: (from lofi@localhost) by repoman.freebsd.org (8.13.1/8.13.1/Submit) id k13B8hiG080280; Fri, 3 Feb 2006 11:08:43 GMT (envelope-from lofi) Message-Id: <200602031108.k13B8hiG080280@repoman.freebsd.org> From: Michael Nottebrock Date: Fri, 3 Feb 2006 11:08:43 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: ports/graphics/kdegraphics3 Makefile ports/graphics/kdegraphics3/files patch-post-3.5.1-kdegraphics-CVE-2006-0301.diff X-BeenThere: cvs-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Feb 2006 11:08:45 -0000 lofi 2006-02-03 11:08:43 UTC FreeBSD ports repository Modified files: graphics/kdegraphics3 Makefile Added files: graphics/kdegraphics3/files patch-post-3.5.1-kdegraphics-CVE-2006-0301.diff Log: No KDE release without an xpdf-inherited security issue. Security: CVE-2006-0301, http://www.kde.org/info/security/advisory-20060202-1.txt kpdf, the KDE pdf viewer, shares code with xpdf. xpdf contains a heap based buffer overflow in the splash rasterizer engine that can crash kpdf or even execute arbitrary code. Revision Changes Path 1.106 +1 -0 ports/graphics/kdegraphics3/Makefile 1.1 +50 -0 ports/graphics/kdegraphics3/files/patch-post-3.5.1-kdegraphics-CVE-2006-0301.diff (new)