---
- branch: MAIN
  date: Tue Jun  9 06:18:18 UTC 2020
  files:
  - new: '1.22'
    old: '1.21'
    path: pkgsrc/devel/libntlm/Makefile
    pathrev: pkgsrc/devel/libntlm/Makefile@1.22
    type: modified
  - new: '1.12'
    old: '1.11'
    path: pkgsrc/devel/libntlm/distinfo
    pathrev: pkgsrc/devel/libntlm/distinfo@1.12
    type: modified
  id: 20200609T061818Z.653120ebdd95a6da26ddfbd00ae2292c812d174f
  log: |
    libntlm: update to 1.6.

    * Version 1.6 (released 2020-04-19)

    ** Fix buffer overflow in buildSmbNtlmAuth* function.  CVE-2019-17455.
    Reported by Kirin in <https://gitlab.com/jas/libntlm/-/issues/2> and
    patch provided by Cedric Buissart.  See newly introduced regression
    check test_CVE-2019-17455.c for test of a vulnerable library.

    ** API and ABI modifications.
    No changes since last version.
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/devel/libntlm'
  unixtime: '1591683498'
  user: wiz