CVS commit: pkgsrc/devel/libntlm

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Tue Jun  9 06:18:18 UTC 2020

Modified Files:
        pkgsrc/devel/libntlm: Makefile distinfo

Log Message:
libntlm: update to 1.6.

* Version 1.6 (released 2020-04-19)

** Fix buffer overflow in buildSmbNtlmAuth* function.  CVE-2019-17455.
Reported by Kirin in <https://gitlab.com/jas/libntlm/-/issues/2> and
patch provided by Cedric Buissart.  See newly introduced regression
check test_CVE-2019-17455.c for test of a vulnerable library.

** API and ABI modifications.
No changes since last version.


To generate a diff of this commit:
cvs rdiff -u -r1.21 -r1.22 pkgsrc/devel/libntlm/Makefile
cvs rdiff -u -r1.11 -r1.12 pkgsrc/devel/libntlm/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/libntlm/Makefile
diff -u pkgsrc/devel/libntlm/Makefile:1.21 pkgsrc/devel/libntlm/Makefile:1.22
--- pkgsrc/devel/libntlm/Makefile:1.21  Sat Jan 18 23:30:32 2020
+++ pkgsrc/devel/libntlm/Makefile       Tue Jun  9 06:18:17 2020
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.21 2020/01/18 23:30:32 rillig Exp $
+# $NetBSD: Makefile,v 1.22 2020/06/09 06:18:17 wiz Exp $
 
-DISTNAME=      libntlm-1.5
-CATEGORIES=    security
+DISTNAME=      libntlm-1.6
+CATEGORIES=    devel security
 MASTER_SITES=  http://www.nongnu.org/libntlm/releases/
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost

Index: pkgsrc/devel/libntlm/distinfo
diff -u pkgsrc/devel/libntlm/distinfo:1.11 pkgsrc/devel/libntlm/distinfo:1.12
--- pkgsrc/devel/libntlm/distinfo:1.11  Tue Nov 26 12:39:45 2019
+++ pkgsrc/devel/libntlm/distinfo       Tue Jun  9 06:18:17 2020
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.11 2019/11/26 12:39:45 wiz Exp $
+$NetBSD: distinfo,v 1.12 2020/06/09 06:18:17 wiz Exp $
 
-SHA1 (libntlm-1.5.tar.gz) = eaecb15173d41381862920cb78238c695b41f43a
-RMD160 (libntlm-1.5.tar.gz) = 831aaba9288014cc01eb92f80e704933afa64071
-SHA512 (libntlm-1.5.tar.gz) = 3592764b6cad21e2f4162997954c10c2122918ddb3496a3959e660c9a61103cc93bc65b8d26eff7f01055a3803c20539902fead4305dc0065747d6476704a8ba
-Size (libntlm-1.5.tar.gz) = 658935 bytes
+SHA1 (libntlm-1.6.tar.gz) = d6f9b69f154d82d0f9a49e9686b79fc03f21c3c6
+RMD160 (libntlm-1.6.tar.gz) = 673b3b2d18a8429565c09b52b309f598937ca081
+SHA512 (libntlm-1.6.tar.gz) = d68bc6b5cd7f5f70385ba78275a810fa46e60f761f0949f2262eef35ae052661739ef17ce3fc4ab75f7e8cfc788b1ccd7766d4ff0ee78db08ea4de3e224653f2
+Size (libntlm-1.6.tar.gz) = 688608 bytes