From owner-cvs-all@FreeBSD.ORG Wed Jun 22 22:44:41 2005 Return-Path: X-Original-To: cvs-all@FreeBSD.org Delivered-To: cvs-all@FreeBSD.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 48AE516A41C; Wed, 22 Jun 2005 22:44:41 +0000 (GMT) (envelope-from simon@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 384A043D48; Wed, 22 Jun 2005 22:44:41 +0000 (GMT) (envelope-from simon@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id j5MMif0u078792; Wed, 22 Jun 2005 22:44:41 GMT (envelope-from simon@repoman.freebsd.org) Received: (from simon@localhost) by repoman.freebsd.org (8.13.1/8.13.1/Submit) id j5MMifHV078791; Wed, 22 Jun 2005 22:44:41 GMT (envelope-from simon) Message-Id: <200506222244.j5MMifHV078791@repoman.freebsd.org> From: "Simon L. Nielsen" Date: Wed, 22 Jun 2005 22:44:41 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: ports/archivers/gzip Makefile ports/archivers/gzip/files patch-gzip.c patch-zgrep.in X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Jun 2005 22:44:41 -0000 simon 2005-06-22 22:44:41 UTC FreeBSD ports repository Modified files: archivers/gzip Makefile Added files: archivers/gzip/files patch-gzip.c patch-zgrep.in Log: Fix directory traversal and permission race security vulnerabilities in gzip, and zgrep improper argument sanitation. Security: CAN-2005-0758, CAN-2005-0988, CAN-2005-1228 Security: FreeBSD-SA-05:11.gzip Obtained from: RedHat, Steve Grubb via RedHat, Debian Approved by: maintainer timeout (4 days; security) Revision Changes Path 1.12 +1 -1 ports/archivers/gzip/Makefile 1.1 +62 -0 ports/archivers/gzip/files/patch-gzip.c (new) 1.1 +29 -0 ports/archivers/gzip/files/patch-zgrep.in (new)