Subject: CVS commit: pkgsrc/time/pcal
To: None <pkgsrc-changes@NetBSD.org>
From: Lubomir Sedlacik <salo@netbsd.org>
List: pkgsrc-changes
Date: 03/20/2005 21:34:17
Module Name:	pkgsrc
Committed By:	salo
Date:		Sun Mar 20 21:34:17 UTC 2005

Modified Files:
	pkgsrc/time/pcal: Makefile distinfo
Added Files:
	pkgsrc/time/pcal/patches: patch-af patch-ag

Log Message:
Security fix for CAN-2004-1289.

"Multiple buffer overflows in the getline function in pcalutil.c and the
 get_holiday function in readfile.c for pcal 4.7.1 allow remote attackers
 to execute arbitrary code via a crafted calendar file."

Partial patch from Debian.  Bump PKGREVISION.


To generate a diff of this commit:
cvs rdiff -r1.6 -r1.7 pkgsrc/time/pcal/Makefile
cvs rdiff -r1.4 -r1.5 pkgsrc/time/pcal/distinfo
cvs rdiff -r0 -r1.1 pkgsrc/time/pcal/patches/patch-af \
    pkgsrc/time/pcal/patches/patch-ag

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.