From owner-cvs-ports@FreeBSD.ORG Thu Dec 8 03:29:43 2005 Return-Path: X-Original-To: cvs-ports@FreeBSD.org Delivered-To: cvs-ports@FreeBSD.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5613716A420; Thu, 8 Dec 2005 03:29:43 +0000 (GMT) (envelope-from lofi@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0135A43D75; Thu, 8 Dec 2005 03:29:37 +0000 (GMT) (envelope-from lofi@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id jB83TaoW027811; Thu, 8 Dec 2005 03:29:36 GMT (envelope-from lofi@repoman.freebsd.org) Received: (from lofi@localhost) by repoman.freebsd.org (8.13.1/8.13.1/Submit) id jB83TaZM027810; Thu, 8 Dec 2005 03:29:36 GMT (envelope-from lofi) Message-Id: <200512080329.jB83TaZM027810@repoman.freebsd.org> From: Michael Nottebrock Date: Thu, 8 Dec 2005 03:29:36 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: ports/editors/koffice-kde3 Makefile ports/editors/koffice-kde3/files patch-post-1.3-koffice-CAN-2005-3193 ports/graphics/kdegraphics3 Makefile ports/graphics/kdegraphics3/files patch-post-3.4.3-kdegraphics-CAN-2005-3193 X-BeenThere: cvs-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Dec 2005 03:29:44 -0000 lofi 2005-12-08 03:29:36 UTC FreeBSD ports repository Modified files: editors/koffice-kde3 Makefile graphics/kdegraphics3 Makefile Added files: editors/koffice-kde3/files patch-post-1.3-koffice-CAN-2005-3193 graphics/kdegraphics3/files patch-post-3.4.3-kdegraphics-CAN-2005-3193 Log: Patch security issues in imported xpdf code. Security: CAN-2005-3193 Security: http://www.kde.org/info/security/advisory-20051207-1.txt Security: kpdf, the KDE pdf viewer and KOffice' pdf filter share code with xpdf. xpdf contains multiple integer overflow vulnerabilities that allow specially crafted pdf files, when opened, to overflow a heap allocated buffer and execute arbitrary code. Revision Changes Path 1.86 +1 -1 ports/editors/koffice-kde3/Makefile 1.1 +92 -0 ports/editors/koffice-kde3/files/patch-post-1.3-koffice-CAN-2005-3193 (new) 1.102 +1 -0 ports/graphics/kdegraphics3/Makefile 1.1 +174 -0 ports/graphics/kdegraphics3/files/patch-post-3.4.3-kdegraphics-CAN-2005-3193 (new)