CVS commit: [pkgsrc-2020Q1] pkgsrc/devel/libntlm

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Tue Jun  9 11:59:46 UTC 2020

Modified Files:
        pkgsrc/devel/libntlm [pkgsrc-2020Q1]: Makefile distinfo

Log Message:
Pullup ticket #6234 - requested by wiz
devel/libntlm: security fix

Revisions pulled up:
- devel/libntlm/Makefile                                        1.22
- devel/libntlm/distinfo                                        1.12

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Tue Jun  9 06:18:18 UTC 2020

   Modified Files:
        pkgsrc/devel/libntlm: Makefile distinfo

   Log Message:
   libntlm: update to 1.6.

   * Version 1.6 (released 2020-04-19)

   ** Fix buffer overflow in buildSmbNtlmAuth* function.  CVE-2019-17455.
   Reported by Kirin in <https://gitlab.com/jas/libntlm/-/issues/2> and
   patch provided by Cedric Buissart.  See newly introduced regression
   check test_CVE-2019-17455.c for test of a vulnerable library.

   ** API and ABI modifications.
   No changes since last version.


To generate a diff of this commit:
cvs rdiff -u -r1.21 -r1.21.2.1 pkgsrc/devel/libntlm/Makefile
cvs rdiff -u -r1.11 -r1.11.2.1 pkgsrc/devel/libntlm/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/libntlm/Makefile
diff -u pkgsrc/devel/libntlm/Makefile:1.21 pkgsrc/devel/libntlm/Makefile:1.21.2.1
--- pkgsrc/devel/libntlm/Makefile:1.21  Sat Jan 18 23:30:32 2020
+++ pkgsrc/devel/libntlm/Makefile       Tue Jun  9 11:59:46 2020
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.21 2020/01/18 23:30:32 rillig Exp $
+# $NetBSD: Makefile,v 1.21.2.1 2020/06/09 11:59:46 bsiegert Exp $
 
-DISTNAME=      libntlm-1.5
-CATEGORIES=    security
+DISTNAME=      libntlm-1.6
+CATEGORIES=    devel security
 MASTER_SITES=  http://www.nongnu.org/libntlm/releases/
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost

Index: pkgsrc/devel/libntlm/distinfo
diff -u pkgsrc/devel/libntlm/distinfo:1.11 pkgsrc/devel/libntlm/distinfo:1.11.2.1
--- pkgsrc/devel/libntlm/distinfo:1.11  Tue Nov 26 12:39:45 2019
+++ pkgsrc/devel/libntlm/distinfo       Tue Jun  9 11:59:46 2020
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.11 2019/11/26 12:39:45 wiz Exp $
+$NetBSD: distinfo,v 1.11.2.1 2020/06/09 11:59:46 bsiegert Exp $
 
-SHA1 (libntlm-1.5.tar.gz) = eaecb15173d41381862920cb78238c695b41f43a
-RMD160 (libntlm-1.5.tar.gz) = 831aaba9288014cc01eb92f80e704933afa64071
-SHA512 (libntlm-1.5.tar.gz) = 3592764b6cad21e2f4162997954c10c2122918ddb3496a3959e660c9a61103cc93bc65b8d26eff7f01055a3803c20539902fead4305dc0065747d6476704a8ba
-Size (libntlm-1.5.tar.gz) = 658935 bytes
+SHA1 (libntlm-1.6.tar.gz) = d6f9b69f154d82d0f9a49e9686b79fc03f21c3c6
+RMD160 (libntlm-1.6.tar.gz) = 673b3b2d18a8429565c09b52b309f598937ca081
+SHA512 (libntlm-1.6.tar.gz) = d68bc6b5cd7f5f70385ba78275a810fa46e60f761f0949f2262eef35ae052661739ef17ce3fc4ab75f7e8cfc788b1ccd7766d4ff0ee78db08ea4de3e224653f2
+Size (libntlm-1.6.tar.gz) = 688608 bytes