From owner-freebsd-ports-bugs@FreeBSD.ORG Tue Nov 23 21:50:08 2010 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id CD21C1065696 for ; Tue, 23 Nov 2010 21:50:08 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 830218FC12 for ; Tue, 23 Nov 2010 21:50:08 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id oANLo8Ho049191 for ; Tue, 23 Nov 2010 21:50:08 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id oANLo8Mv049190; Tue, 23 Nov 2010 21:50:08 GMT (envelope-from gnats) Resent-Date: Tue, 23 Nov 2010 21:50:08 GMT Resent-Message-Id: <201011232150.oANLo8Mv049190@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Koop Mast Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1DE50106566B for ; Tue, 23 Nov 2010 21:42:13 +0000 (UTC) (envelope-from kwm@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id E58ED8FC0A for ; Tue, 23 Nov 2010 21:42:12 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id oANLgCKV048901 for ; Tue, 23 Nov 2010 21:42:12 GMT (envelope-from kwm@freefall.freebsd.org) Received: (from kwm@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id oANLgCuw048900; Tue, 23 Nov 2010 21:42:12 GMT (envelope-from kwm) Message-Id: <201011232142.oANLgCuw048900@freefall.freebsd.org> Date: Tue, 23 Nov 2010 21:42:12 GMT From: Koop Mast To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: Subject: ports/152529: [Patch] Update games/openttd to 1.0.5 X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Koop Mast List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Nov 2010 21:50:08 -0000 >Number: 152529 >Category: ports >Synopsis: [Patch] Update games/openttd to 1.0.5 >Confidential: no >Severity: serious >Priority: high >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Tue Nov 23 21:50:08 UTC 2010 >Closed-Date: >Last-Modified: >Originator: Koop Mast >Release: FreeBSD 8.1-STABLE i386 >Organization: >Environment: System: FreeBSD freefall.freebsd.org 8.1-STABLE FreeBSD 8.1-STABLE #2 r215627: Sun Nov 21 13:36:51 UTC 2010 simon@freefall.freebsd.org:/usr/obj/usr/src/sys/FREEFALL i386 >Description: Update OpenTTD to 1.0.5. And add vuxml entry for CVE-2010-4168. http://security.openttd.org/en/CVE-2010-4168 The patch is to silence some build warnings spam. >How-To-Repeat: >Fix: --- openttd-1.0.5.diff begins here --- Index: games/openttd/Makefile =================================================================== RCS file: /home/pcvs/ports/games/openttd/Makefile,v retrieving revision 1.31 diff -a -u -r1.31 Makefile --- games/openttd/Makefile 22 Aug 2010 12:30:53 -0000 1.31 +++ games/openttd/Makefile 23 Nov 2010 21:36:21 -0000 @@ -6,10 +6,9 @@ # PORTNAME= openttd -PORTVERSION= 1.0.3 +PORTVERSION= 1.0.5 CATEGORIES= games -MASTER_SITES= http://gb.binaries.openttd.org/binaries/releases/${PORTVERSION}/ \ - #SF/${PORTNAME}/${PORTNAME}/${PORTNAME}-${PORTVERSION} +MASTER_SITES= http://gb.binaries.openttd.org/binaries/releases/${PORTVERSION}/ MAINTAINER= danfe@FreeBSD.org COMMENT= An open source clone of Microprose Transport Tycoon Deluxe @@ -21,7 +20,8 @@ CONFIGURE_ARGS= --prefix-dir="${PREFIX}" --data-dir="${DATADIR_REL}" USE_BZIP2= yes USE_GMAKE= yes -INSTALLS_ICONS= yes +# We don't use installs_icons because it depends on a program shipped with gtk20 +#INSTALLS_ICONS= yes MAKE_JOBS_SAFE= yes DISTVERSIONSUFFIX= -source Index: games/openttd/distinfo =================================================================== RCS file: /home/pcvs/ports/games/openttd/distinfo,v retrieving revision 1.21 diff -a -u -r1.21 distinfo --- games/openttd/distinfo 22 Aug 2010 12:30:53 -0000 1.21 +++ games/openttd/distinfo 23 Nov 2010 21:36:21 -0000 @@ -1,3 +1,2 @@ -MD5 (openttd-1.0.3-source.tar.bz2) = cff60c624913a491ed3c91474e845722 -SHA256 (openttd-1.0.3-source.tar.bz2) = f52f2381c678de024d26ee465c8203323eb3484300c4dc182c0d68c439ee8c57 -SIZE (openttd-1.0.3-source.tar.bz2) = 5395672 +SHA256 (openttd-1.0.5-source.tar.bz2) = c353626b16b4b781db3c3c61f0ad651f5701e50f87439c4005b4456b63db09f8 +SIZE (openttd-1.0.5-source.tar.bz2) = 5684796 Index: games/openttd/pkg-plist =================================================================== RCS file: /home/pcvs/ports/games/openttd/pkg-plist,v retrieving revision 1.13 diff -a -u -r1.13 pkg-plist --- games/openttd/pkg-plist 22 Aug 2010 12:30:53 -0000 1.13 +++ games/openttd/pkg-plist 23 Nov 2010 21:36:21 -0000 @@ -18,6 +18,7 @@ @dirrm %%DATADIR%%/data %%DATADIR%%/lang/afrikaans.lng %%DATADIR%%/lang/arabic_egypt.lng +%%DATADIR%%/lang/belarusian.lng %%DATADIR%%/lang/brazilian_portuguese.lng %%DATADIR%%/lang/bulgarian.lng %%DATADIR%%/lang/catalan.lng Index: games/openttd/files/patch-src_string-func.h =================================================================== RCS file: games/openttd/files/patch-src_string-func.h diff -N games/openttd/files/patch-src_string-func.h --- /dev/null 1 Jan 1970 00:00:00 -0000 +++ games/openttd/files/patch-src_string-func.h 23 Nov 2010 21:36:21 -0000 @@ -0,0 +1,12 @@ +--- src/string_func.h.orig 2010-10-10 09:15:22.000000000 +0200 ++++ src/string_func.h 2010-10-10 09:19:08.000000000 +0200 +@@ -252,7 +252,8 @@ + #endif + + /* strndup is a GNU extension */ +-#if defined(_GNU_SOURCE) || (defined(__NetBSD_Version__) && 400000000 <= __NetBSD_Version__) ++#if defined(_GNU_SOURCE) || (defined(__NetBSD_Version__) && 400000000 <= __NetBSD_Version__) || \ ++ defined(__FreeBSD__) + # undef DEFINE_STRNDUP + #else + # define DEFINE_STRNDUP Index: security/vuxml/vuln.xml =================================================================== RCS file: /home/pcvs/ports/security/vuxml/vuln.xml,v retrieving revision 1.2253 diff -a -u -r1.2253 vuln.xml --- security/vuxml/vuln.xml 23 Nov 2010 19:02:12 -0000 1.2253 +++ security/vuxml/vuln.xml 23 Nov 2010 21:36:28 -0000 @@ -34,6 +34,34 @@ --> + + OpenTTD -- Denial of service (server/client) via invalid read + + + openttd + 1.0.01.0.5 + + + + +

The OpenTTD Team reports:

+
+

When a client disconnects, without sending the "quit" or "client + error" message, the server has a chance of reading and writing a + just freed piece of memory.

+
+ + + + CVE-2010-4168 + http://security.openttd.org/en/CVE-2010-4168 + + + 2010-11-20 + 2010-11-23 + + + horde-base -- XSS: VCARD attachments vulnerability --- openttd-1.0.5.diff ends here --- >Release-Note: >Audit-Trail: >Unformatted: