Subject: CVS commit: pkgsrc/net/ethereal
To: None <pkgsrc-changes@NetBSD.org>
From: Lubomir Sedlacik <salo@netbsd.org>
List: pkgsrc-changes
Date: 12/10/2005 21:55:35
Module Name:	pkgsrc
Committed By:	salo
Date:		Sat Dec 10 21:55:35 UTC 2005

Modified Files:
	pkgsrc/net/ethereal: Makefile distinfo
Added Files:
	pkgsrc/net/ethereal/patches: patch-ac

Log Message:
Security fix for CVE-2005-3651:

"Remote exploitation of an input validation vulnerability in the OSPF
protocol dissectors within Ethereal, as included in various vendors
operating system distributions, could allow attackers to crash the
vulnerable process or potentially execute arbitrary code."

http://www.idefense.com/application/poi/display?id=349&type=vulnerabilities

Patch from the Ethereal SVN repository.


To generate a diff of this commit:
cvs rdiff -r1.120 -r1.121 pkgsrc/net/ethereal/Makefile
cvs rdiff -r1.45 -r1.46 pkgsrc/net/ethereal/distinfo
cvs rdiff -r0 -r1.5 pkgsrc/net/ethereal/patches/patch-ac

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.