From owner-cvs-all@FreeBSD.ORG Fri Feb 11 21:35:41 2005 Return-Path: Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 395CE16A4CE; Fri, 11 Feb 2005 21:35:41 +0000 (GMT) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1A1B843D1F; Fri, 11 Feb 2005 21:35:41 +0000 (GMT) (envelope-from naddy@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id j1BLZeaq016902; Fri, 11 Feb 2005 21:35:41 GMT (envelope-from naddy@repoman.freebsd.org) Received: (from naddy@localhost) by repoman.freebsd.org (8.13.1/8.13.1/Submit) id j1BLZe3t016901; Fri, 11 Feb 2005 21:35:40 GMT (envelope-from naddy) Message-Id: <200502112135.j1BLZe3t016901@repoman.freebsd.org> From: Christian Weisgerber Date: Fri, 11 Feb 2005 21:35:40 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Subject: cvs commit: ports/print/enscript-letter Makefile ports/print/enscript-letter/files patch-src_gsint.h patch-src_main.c patch-src_psgen.c patch-src_util.c X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Feb 2005 21:35:41 -0000 naddy 2005-02-11 21:35:40 UTC FreeBSD ports repository Modified files: print/enscript-letter Makefile Added files: print/enscript-letter/files patch-src_gsint.h patch-src_main.c patch-src_psgen.c patch-src_util.c Log: Security fixes: Erik Sjolund discovered several issues in enscript: it suffers from several buffer overflows (CAN-2004-1186), quotes and shell escape characters are insufficiently sanitized in filenames (CAN-2004-1185), and it supported taking input from an arbitrary command pipe, with unwanted side effects (CAN-2004-1184). Obtained from: Gentoo Revision Changes Path 1.23 +2 -1 ports/print/enscript-letter/Makefile 1.1 +15 -0 ports/print/enscript-letter/files/patch-src_gsint.h (new) 1.1 +48 -0 ports/print/enscript-letter/files/patch-src_main.c (new) 1.1 +37 -0 ports/print/enscript-letter/files/patch-src_psgen.c (new) 1.1 +82 -0 ports/print/enscript-letter/files/patch-src_util.c (new)