From owner-freebsd-ports-bugs@FreeBSD.ORG Sat Mar 1 00:00:02 2008 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 67F521065676 for ; Sat, 1 Mar 2008 00:00:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 49D478FC1D for ; Sat, 1 Mar 2008 00:00:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id m2100216001238 for ; Sat, 1 Mar 2008 00:00:02 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id m21002mN001237; Sat, 1 Mar 2008 00:00:02 GMT (envelope-from gnats) Resent-Date: Sat, 1 Mar 2008 00:00:02 GMT Resent-Message-Id: <200803010000.m21002mN001237@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Nick Barkas Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 932201065675 for ; Fri, 29 Feb 2008 23:55:08 +0000 (UTC) (envelope-from snb@smtp.earth.threerings.net) Received: from smtp.earth.threerings.net (smtp1.earth.threerings.net [64.127.109.108]) by mx1.freebsd.org (Postfix) with ESMTP id 876F78FC1A for ; Fri, 29 Feb 2008 23:55:08 +0000 (UTC) (envelope-from snb@smtp.earth.threerings.net) Received: by smtp.earth.threerings.net (Postfix, from userid 10038) id 4CE2D61EAF; Fri, 29 Feb 2008 15:55:08 -0800 (PST) Message-Id: <20080229235508.4CE2D61EAF@smtp.earth.threerings.net> Date: Fri, 29 Feb 2008 15:55:08 -0800 (PST) From: Nick Barkas To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: Subject: ports/121245: [patch] Fix for DoS vulnerability in www/lighttpd X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Nick Barkas List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 01 Mar 2008 00:00:02 -0000 >Number: 121245 >Category: ports >Synopsis: [patch] Fix for DoS vulnerability in www/lighttpd >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Sat Mar 01 00:00:01 UTC 2008 >Closed-Date: >Last-Modified: >Originator: Nick Barkas >Release: FreeBSD 6.2-RELEASE-p11 i386 >Organization: Three Rings Design, Inc. >Environment: System: FreeBSD mail1.earth.threerings.net 6.2-RELEASE-p11 FreeBSD 6.2-RELEASE-p11 #0: Wed Feb 13 07:00:04 UTC 2008 root@i386-builder.daemonology.net:/usr/obj/usr/src/sys/SMP i386 >Description: This is a fix for the DoS vulnerability described here: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-0983 >How-To-Repeat: >Fix: --- lighttpd.patch begins here --- diff -urN lighttpd.orig/Makefile lighttpd/Makefile --- lighttpd.orig/Makefile Sat Sep 22 16:13:46 2007 +++ lighttpd/Makefile Fri Feb 29 10:09:28 2008 @@ -7,7 +7,7 @@ PORTNAME= lighttpd PORTVERSION= 1.4.18 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= www MASTER_SITES= http://www.lighttpd.net/download/ \ http://mirrors.cat.pdx.edu/lighttpd/ diff -urN lighttpd.orig/files/patch-src_server.c lighttpd/files/patch-src_server.c --- lighttpd.orig/files/patch-src_server.c Wed Dec 31 16:00:00 1969 +++ lighttpd/files/patch-src_server.c Fri Feb 29 09:46:28 2008 @@ -0,0 +1,13 @@ +--- src/server.c ++++ src/server.c +@@ -697,9 +697,6 @@ int main (int argc, char **argv) { + } + } + +- /* #372: solaris need some fds extra for devpoll */ +- if (rlim.rlim_cur > 10) rlim.rlim_cur -= 10; +- + if (srv->event_handler == FDEVENT_HANDLER_SELECT) { + srv->max_fds = rlim.rlim_cur < FD_SETSIZE - 200 ? rlim.rlim_cur : FD_SETSIZE - 200; + } else { + --- lighttpd.patch ends here --- >Release-Note: >Audit-Trail: >Unformatted: