CVSROOT:        /cvs
Module name:    ports
Changes by:     [email protected]   2015/04/03 12:24:59

Modified files:
        archivers/libzip: Tag: OPENBSD_5_6 Makefile 
Added files:
        archivers/libzip/patches: Tag: OPENBSD_5_6 
                                  patch-lib_zip_dirent_c 

Log message:
Patch libzip for CVE-2015-2331; int overflow leading to a heap overflow.
Upstream's patch depends on other changes; for us, we can simplify things
and just use reallocarray. (added in 5.6 so it's OK for this MFC as well)

Reply via email to