From owner-freebsd-ports-bugs@FreeBSD.ORG Mon Aug 22 17:30:27 2005 Return-Path: X-Original-To: freebsd-ports-bugs@hub.freebsd.org Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5D2B516A41F for ; Mon, 22 Aug 2005 17:30:27 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id EFF1E43D53 for ; Mon, 22 Aug 2005 17:30:25 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id j7MHUPpm087545 for ; Mon, 22 Aug 2005 17:30:25 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.3/8.13.1/Submit) id j7MHUP4v087544; Mon, 22 Aug 2005 17:30:25 GMT (envelope-from gnats) Resent-Date: Mon, 22 Aug 2005 17:30:25 GMT Resent-Message-Id: <200508221730.j7MHUP4v087544@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, toasty@dragondata.com Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 51F0D16A41F for ; Mon, 22 Aug 2005 17:20:22 +0000 (GMT) (envelope-from toasty@server12.stileproject.com) Received: from tokyo01.jp.mail.your.org (tokyo01.jp.mail.your.org [204.9.54.5]) by mx1.FreeBSD.org (Postfix) with ESMTP id EB45F43D45 for ; Mon, 22 Aug 2005 17:20:21 +0000 (GMT) (envelope-from toasty@server12.stileproject.com) Received: from mail.dragondata.com (server3-b.your.org [64.202.113.67]) by tokyo01.jp.mail.your.org (Postfix) with ESMTP id 399B22AD5637 for ; Mon, 22 Aug 2005 17:32:58 +0000 (UTC) Received: from server12.stileproject.com (server12-b.stileproject.com [64.202.113.12]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.dragondata.com (Postfix) with ESMTP id 434B73D1858; Mon, 22 Aug 2005 12:20:19 -0500 (CDT) Received: (from root@localhost) by server12.stileproject.com (8.12.10/8.12.6/Submit) id j7MHKI2q068531; Mon, 22 Aug 2005 12:20:18 -0500 (CDT) Message-Id: <200508221720.j7MHKI2q068531@server12.stileproject.com> Date: Mon, 22 Aug 2005 12:20:18 -0500 (CDT) From: toasty@dragondata.com To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: toasty@dragondata.com Subject: ports/85225: [maintainer update][security] Update port mail/elm to remove remote exploit X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: toasty@dragondata.com List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Aug 2005 17:30:27 -0000 >Number: 85225 >Category: ports >Synopsis: [maintainer update][security] Update port mail/elm to remove remote exploit >Confidential: no >Severity: serious >Priority: high >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: maintainer-update >Submitter-Id: current-users >Arrival-Date: Mon Aug 22 17:30:25 GMT 2005 >Closed-Date: >Last-Modified: >Originator: Kevin Day >Release: FreeBSD 5.2.1-RELEASE-p1 i386 >Organization: Dragondata >Environment: >Description: Port mail/elm has a remotely exploitable buffer overflow while parsing carefully crafted invalid headers in email messages. >How-To-Repeat: >Fix: diff -ruN elmold/Makefile elm/Makefile --- elmold/Makefile Sun Mar 7 04:59:53 2004 +++ elm/Makefile Mon Aug 22 12:14:29 2005 @@ -6,8 +6,8 @@ # PORTNAME= elm -PORTVERSION= 2.5.6 -PORTREVISION= 2 +PORTVERSION= 2.5.8 +PORTREVISION= 0 CATEGORIES= mail MASTER_SITES= ftp://ftp.virginia.edu/pub/elm/ \ http://www.dragondata.com/software/ @@ -17,6 +17,8 @@ COMMENT= A once-popular mail user agent, version 2.5.x BUILD_DEPENDS= ispell:${PORTSDIR}/textproc/ispell + +CFLAGS+= -D_SIZE_T WRKSRC= ${WRKDIR}/elm${PORTVERSION} NO_LATEST_LINK= yes diff -ruN elmold/distinfo elm/distinfo --- elmold/distinfo Wed Jul 14 13:31:47 2004 +++ elm/distinfo Mon Aug 22 12:04:57 2005 @@ -1,2 +1,2 @@ -MD5 (elm2.5.6.tar.gz) = 5ce17b50cb90f99ffc09e4df52f52648 -SIZE (elm2.5.6.tar.gz) = 606228 +MD5 (elm2.5.8.tar.gz) = f7a721c1cddbc8632ffe0cf65b045395 +SIZE (elm2.5.8.tar.gz) = 607078 diff -ruN elmold/files/patch-aa elm/files/patch-aa --- elmold/files/patch-aa Thu Oct 9 14:19:19 2003 +++ elm/files/patch-aa Mon Aug 22 12:06:31 2005 @@ -24,8 +24,8 @@ set `echo $libc $libnames | tr ' ' '\012' | sort | uniq` $echo $n "Extracting names from $* for later perusal...$c" nm $nm_opts $* 2>/dev/null >libc.tmp --$sed -n -e 's/^.* [ATDS] *[_.]*//p' -e 's/^.* [ATDS] //p' libc.list -+$sed -n -e 's/^.* [ATDSW] *[_.]*//p' -e 's/^.* [ATDSW] //p' libc.list +-$sed -n -e 's/^.* [ATDSU] *[_.]*//p' -e 's/^.* [ATDSU] //p' libc.list ++$sed -n -e 's/^.* [ATDSUW] *[_.]*//p' -e 's/^.* [ATDSUW] //p' libc.list if $contains '^printf$' libc.list >/dev/null 2>&1; then echo done elif $sed -n -e 's/^__*//' -e 's/^\([a-zA-Z_0-9$]*\).*xtern.*/\1/p' \ >Release-Note: >Audit-Trail: >Unformatted: