OpenPKG CVS Repository
http://cvs.openpkg.org/
____________________________________________________________________________
Server: cvs.openpkg.org Name: Ralf S. Engelschall
Root: /v/openpkg/cvs Email: [EMAIL PROTECTED]
Module: openpkg-src Date: 19-Feb-2006 13:00:40
Branch: OPENPKG_2_3_SOLID Handle: 2006021912003901
Modified files: (Branch: OPENPKG_2_3_SOLID)
openpkg-src/tin tin.patch tin.spec
Log:
Security Fix
Summary:
Revision Changes Path
1.1.16.2 +18 -0 openpkg-src/tin/tin.patch
1.43.2.3 +1 -1 openpkg-src/tin/tin.spec
____________________________________________________________________________
patch -p0 <<'@@ .'
Index: openpkg-src/tin/tin.patch
============================================================================
$ cvs diff -u -r1.1.16.1 -r1.1.16.2 tin.patch
--- openpkg-src/tin/tin.patch 5 Sep 2005 14:54:30 -0000 1.1.16.1
+++ openpkg-src/tin/tin.patch 19 Feb 2006 12:00:39 -0000 1.1.16.2
@@ -121,3 +121,21 @@
{
bracount++;
if (bracount > EXTRACT_BASIC_MAX) bracket_length += 3;
+
+------------------------------------------------------------------------------
+
+Security Fix
+
+Index: src/mail.c
+--- src/mail.c 2005-12-02 12:07:36 +0100
++++ src/mail.c 2006-01-19 23:40:13 +0100
+@@ -369,7 +369,7 @@
+ space = strlen(ptr) + 1;
+ groupname = my_malloc(space);
+ } else {
+- while (strlen(ptr) > space) { /* realloc needed? */
++ while (space < strlen(ptr) + 1) { /* realloc needed? */
+ space <<= 1; /* double size */
+ groupname = my_realloc(groupname, space);
+ }
+
@@ .
patch -p0 <<'@@ .'
Index: openpkg-src/tin/tin.spec
============================================================================
$ cvs diff -u -r1.43.2.2 -r1.43.2.3 tin.spec
--- openpkg-src/tin/tin.spec 5 Sep 2005 14:54:30 -0000 1.43.2.2
+++ openpkg-src/tin/tin.spec 19 Feb 2006 12:00:40 -0000 1.43.2.3
@@ -38,7 +38,7 @@
Group: News
License: GPL
Version: %{V_major}.%{V_minor}
-Release: 2.3.1
+Release: 2.3.2
# list of sources
Source0:
ftp://ftp.tin.org/pub/news/clients/tin/v%{V_major}/tin-%{version}.tar.bz2
@@ .
______________________________________________________________________
The OpenPKG Project www.openpkg.org
CVS Repository Commit List openpkg-cvs@openpkg.org
