From owner-svn-ports-branches@freebsd.org Wed Mar 9 22:38:35 2016 Return-Path: Delivered-To: svn-ports-branches@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D4CDEACAFD5; Wed, 9 Mar 2016 22:38:35 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 8C5AC33D; Wed, 9 Mar 2016 22:38:35 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id u29McY1m090951; Wed, 9 Mar 2016 22:38:34 GMT (envelope-from feld@FreeBSD.org) Received: (from feld@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id u29McYam090948; Wed, 9 Mar 2016 22:38:34 GMT (envelope-from feld@FreeBSD.org) Message-Id: <201603092238.u29McYam090948@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: feld set sender to feld@FreeBSD.org using -f From: Mark Felder Date: Wed, 9 Mar 2016 22:38:34 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-branches@freebsd.org Subject: svn commit: r410732 - branches/2016Q1/security/libotr X-SVN-Group: ports-branches MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-branches@freebsd.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: SVN commit messages for all the branches of the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Mar 2016 22:38:35 -0000 Author: feld Date: Wed Mar 9 22:38:34 2016 New Revision: 410732 URL: https://svnweb.freebsd.org/changeset/ports/410732 Log: MFH: r410731 security/libotr: Update to 4.1.1 Changes: * Fix an integer overflow bug that can cause a heap buffer overflow (and from there remote code execution) on 64-bit platforms * Fix possible free() of an uninitialized pointer * Be stricter about parsing v3 fragments * Add a testsuite ("make check" to run it), but only on Linux for now, since it uses Linux-specific features such as epoll * Fix a memory leak when reading a malformed instance tag file * Protocol documentation clarifications Security: CVE-2016-2851 Approved by: ports-secteam (with hat) Modified: branches/2016Q1/security/libotr/Makefile branches/2016Q1/security/libotr/distinfo branches/2016Q1/security/libotr/pkg-plist Directory Properties: branches/2016Q1/ (props changed) Modified: branches/2016Q1/security/libotr/Makefile ============================================================================== --- branches/2016Q1/security/libotr/Makefile Wed Mar 9 22:37:52 2016 (r410731) +++ branches/2016Q1/security/libotr/Makefile Wed Mar 9 22:38:34 2016 (r410732) @@ -1,8 +1,7 @@ # $FreeBSD$ PORTNAME= libotr -PORTVERSION= 4.1.0 -PORTREVISION= 1 +PORTVERSION= 4.1.1 CATEGORIES= security net-im net MASTER_SITES= https://otr.cypherpunks.ca/ \ http://www.c-s.li/ports/ Modified: branches/2016Q1/security/libotr/distinfo ============================================================================== --- branches/2016Q1/security/libotr/distinfo Wed Mar 9 22:37:52 2016 (r410731) +++ branches/2016Q1/security/libotr/distinfo Wed Mar 9 22:38:34 2016 (r410732) @@ -1,4 +1,4 @@ -SHA256 (libotr-4.1.0.tar.gz) = 4fdb891940ec89d300190a98f69a9138248dcb8c8d337633fb981b8d0a9cd930 -SIZE (libotr-4.1.0.tar.gz) = 576771 -SHA256 (libotr-4.1.0.tar.gz.asc) = d77b093c282235977bbf8050a310f64f197e6ed05fb432b516e9e2dab272077b -SIZE (libotr-4.1.0.tar.gz.asc) = 190 +SHA256 (libotr-4.1.1.tar.gz) = 8b3b182424251067a952fb4e6c7b95a21e644fbb27fbd5f8af2b2ed87ca419f5 +SIZE (libotr-4.1.1.tar.gz) = 655791 +SHA256 (libotr-4.1.1.tar.gz.asc) = 3a24fe5ef490292295a5be7484d1148a4dbcace3a703279c9ea8ff7947215e90 +SIZE (libotr-4.1.1.tar.gz.asc) = 811 Modified: branches/2016Q1/security/libotr/pkg-plist ============================================================================== --- branches/2016Q1/security/libotr/pkg-plist Wed Mar 9 22:37:52 2016 (r410731) +++ branches/2016Q1/security/libotr/pkg-plist Wed Mar 9 22:38:34 2016 (r410732) @@ -23,7 +23,7 @@ include/libotr/version.h lib/libotr.a lib/libotr.so lib/libotr.so.5 -lib/libotr.so.5.1.0 +lib/libotr.so.5.1.1 libdata/pkgconfig/libotr.pc man/man1/otr_mackey.1.gz man/man1/otr_modify.1.gz