pkgsrc-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

pkg/51449: patch for stunnel security update to 5.35



>Number:         51449
>Category:       pkg
>Synopsis:       patch for stunnel security update to 5.35
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Mon Aug 29 10:40:01 +0000 2016
>Originator:     Matthew Mondor
>Release:        NetBSD 7.0_STABLE
>Organization:
>Environment:
System: NetBSD ninja.xisop 7.0_STABLE NetBSD 7.0_STABLE (GENERIC_MM) #0: Thu Jul 28 22:49:47 EDT 2016 root@ninja.xisop:/usr/obj/sys/arch/amd64/compile/GENERIC_MM amd64
Architecture: x86_64
Machine: amd64
>Description:

pkgsrc-2016Q2 and pkgsrc-current both still had 5.32 which comported
serious memory leaks.  A security vulnerability was also fixed for
5.35.  The dependency on zlib was also dropped.

>How-To-Repeat:
>Fix:

A patch is attached.

--MP_/xoKGXXFbj+30dtsl9BbMBdn
Content-Type: text/text-plain
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename=pkgsrc-security-stunnel.diff

Index: Makefile
===================================================================
RCS file: /data/rsync/netbsd-cvs/pkgsrc/security/stunnel/Makefile,v
retrieving revision 1.103
diff -u -r1.103 Makefile
--- Makefile	9 Jul 2016 06:38:57 -0000	1.103
+++ Makefile	29 Aug 2016 10:30:11 -0000
@@ -1,7 +1,7 @@
 # $NetBSD: Makefile,v 1.103 2016/07/09 06:38:57 wiz Exp $
 
-DISTNAME=		stunnel-5.32
-PKGREVISION=		1
+DISTNAME=		stunnel-5.35
+#PKGREVISION=		1
 CATEGORIES=		security
 MASTER_SITES=		http://www.stunnel.org/downloads/
 
@@ -57,6 +57,5 @@
 
 .include "options.mk"
 
-.include "../../devel/zlib/buildlink3.mk"
 .include "../../security/openssl/buildlink3.mk"
 .include "../../mk/bsd.pkg.mk"
Index: distinfo
===================================================================
RCS file: /data/rsync/netbsd-cvs/pkgsrc/security/stunnel/distinfo,v
retrieving revision 1.50
diff -u -r1.50 distinfo
--- distinfo	3 Jun 2016 23:12:06 -0000	1.50
+++ distinfo	29 Aug 2016 10:22:42 -0000
@@ -1,8 +1,8 @@
 $NetBSD: distinfo,v 1.50 2016/06/03 23:12:06 jym Exp $
 
-SHA1 (stunnel-5.32.tar.gz) = 44f64ee0f9c7235a00d33b8338d439dbc519c594
-RMD160 (stunnel-5.32.tar.gz) = 13157bd6b1b32ca87465ff11dcd9bceed424c480
-SHA512 (stunnel-5.32.tar.gz) = aad3b718a727ae23bc88bda027017a5e4e19d2d08c1d4e95087dae20d4ed994d0ce29e9ae4b4d40456a7d7aaeb10c30a4283c6be2965d7183982204a347781bc
-Size (stunnel-5.32.tar.gz) = 641907 bytes
+SHA1 (stunnel-5.35.tar.gz) = 90cafc2208aa3acefb503856482e163e9af463c4
+RMD160 (stunnel-5.35.tar.gz) = 92f7c680e9de49740094a531c5b466aa5ac9d453
+SHA512 (stunnel-5.35.tar.gz) = cdec7ddafbfac4a1d420704baec72fedbd655871137ec8283c066203c0859019c6e11ce00647e5b471a019409e4eb5e9525166eddd7ddffa25055b95c0cacd9e
+Size (stunnel-5.35.tar.gz) = 645148 bytes
 SHA1 (patch-aa) = b247aca629197887fb720f7a02d9b73d60bb0d37
 SHA1 (patch-ac) = 91b09d39fb968ad76952acdff250150d3e372c36

--MP_/xoKGXXFbj+30dtsl9BbMBdn--

>Unformatted:
 --MP_/xoKGXXFbj+30dtsl9BbMBdn
 Content-Type: text/plain; charset=US-ASCII
 Content-Transfer-Encoding: 7bit
 Content-Disposition: inline
 


Home | Main Index | Thread Index | Old Index