Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (36m)  pkgsrc-2024Q1 (10d)  pkgsrc-2023Q4 (57d)  pkgsrc-2023Q2 (89d)  pkgsrc-2023Q3 (168d) 

2024-05-27 16:55:26 UTC Now

2020-06-09 11:59:46 UTC pkgsrc-2020Q1 commitmail json YAML

Pullup ticket #6234 - requested by wiz
devel/libntlm: security fix

Revisions pulled up:
- devel/libntlm/Makefile                                        1.22
- devel/libntlm/distinfo                                        1.12

---
  Module Name: pkgsrc
  Committed By: wiz
  Date: Tue Jun  9 06:18:18 UTC 2020

  Modified Files:
  pkgsrc/devel/libntlm: Makefile distinfo

  Log Message:
  libntlm: update to 1.6.

  * Version 1.6 (released 2020-04-19)

  ** Fix buffer overflow in buildSmbNtlmAuth* function.  CVE-2019-17455.
  Reported by Kirin in <https://gitlab.com/jas/libntlm/-/issues/2> and
  patch provided by Cedric Buissart.  See newly introduced regression
  check test_CVE-2019-17455.c for test of a vulnerable library.

  ** API and ABI modifications.
  No changes since last version.

(bsiegert)