From owner-cvs-all@FreeBSD.ORG Wed Jan 14 21:24:58 2004 Return-Path: Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2BD0116A4CE; Wed, 14 Jan 2004 21:24:58 -0800 (PST) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 58BB843D64; Wed, 14 Jan 2004 21:24:57 -0800 (PST) (envelope-from will@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.12.10/8.12.10) with ESMTP id i0F5Ov0B038187; Wed, 14 Jan 2004 21:24:57 -0800 (PST) (envelope-from will@repoman.freebsd.org) Received: (from will@localhost) by repoman.freebsd.org (8.12.10/8.12.10/Submit) id i0F5OvJb038186; Wed, 14 Jan 2004 21:24:57 -0800 (PST) (envelope-from will) Message-Id: <200401150524.i0F5OvJb038186@repoman.freebsd.org> From: Will Andrews Date: Wed, 14 Jan 2004 21:24:57 -0800 (PST) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Subject: cvs commit: ports/deskutils/kdepim3 Makefileports/deskutils/kdepim3/files patch-vcf-kfile_vcf.cpp X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Jan 2004 05:24:58 -0000 will 2004/01/14 21:24:57 PST FreeBSD ports repository Modified files: deskutils/kdepim3 Makefile Added files: deskutils/kdepim3/files patch-vcf-kfile_vcf.cpp Log: Fix a buffer overflow in the file information reader of VCF files. See http://www.kde.org/info/security/advisory-20040114-1.txt and http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0988 for more info. Bump PORTREVISION as this is a strongly recommended patch. This approach is simpler than upgrading all KDE ports to 3.1.5, since we're going to upgrade them to 3.2 in under a month anyway. Submitted by: Andy Fawcett Revision Changes Path 1.31 +1 -0 ports/deskutils/kdepim3/Makefile 1.1 +24 -0 ports/deskutils/kdepim3/files/patch-vcf-kfile_vcf.cpp (new)