[pkgsrc/pkgsrc-2020Q1]: pkgsrc/devel/libntlm Pullup ticket #6234 - requested ...

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/dcecae6d8408
branches:  pkgsrc-2020Q1
changeset: 433983:dcecae6d8408
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Tue Jun 09 11:59:46 2020 +0000

description:
Pullup ticket #6234 - requested by wiz
devel/libntlm: security fix

Revisions pulled up:
- devel/libntlm/Makefile                                        1.22
- devel/libntlm/distinfo                                        1.12

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Tue Jun  9 06:18:18 UTC 2020

   Modified Files:
        pkgsrc/devel/libntlm: Makefile distinfo

   Log Message:
   libntlm: update to 1.6.

   * Version 1.6 (released 2020-04-19)

   ** Fix buffer overflow in buildSmbNtlmAuth* function.  CVE-2019-17455.
   Reported by Kirin in <https://gitlab.com/jas/libntlm/-/issues/2> and
   patch provided by Cedric Buissart.  See newly introduced regression
   check test_CVE-2019-17455.c for test of a vulnerable library.

   ** API and ABI modifications.
   No changes since last version.

diffstat:

 devel/libntlm/Makefile |   6 +++---
 devel/libntlm/distinfo |  10 +++++-----
 2 files changed, 8 insertions(+), 8 deletions(-)

diffs (29 lines):

diff -r 0b3b6386e86a -r dcecae6d8408 devel/libntlm/Makefile
--- a/devel/libntlm/Makefile    Tue Jun 09 11:59:41 2020 +0000
+++ b/devel/libntlm/Makefile    Tue Jun 09 11:59:46 2020 +0000
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.21 2020/01/18 23:30:32 rillig Exp $
+# $NetBSD: Makefile,v 1.21.2.1 2020/06/09 11:59:46 bsiegert Exp $
 
-DISTNAME=      libntlm-1.5
-CATEGORIES=    security
+DISTNAME=      libntlm-1.6
+CATEGORIES=    devel security
 MASTER_SITES=  http://www.nongnu.org/libntlm/releases/
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
diff -r 0b3b6386e86a -r dcecae6d8408 devel/libntlm/distinfo
--- a/devel/libntlm/distinfo    Tue Jun 09 11:59:41 2020 +0000
+++ b/devel/libntlm/distinfo    Tue Jun 09 11:59:46 2020 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.11 2019/11/26 12:39:45 wiz Exp $
+$NetBSD: distinfo,v 1.11.2.1 2020/06/09 11:59:46 bsiegert Exp $
 
-SHA1 (libntlm-1.5.tar.gz) = eaecb15173d41381862920cb78238c695b41f43a
-RMD160 (libntlm-1.5.tar.gz) = 831aaba9288014cc01eb92f80e704933afa64071
-SHA512 (libntlm-1.5.tar.gz) = 3592764b6cad21e2f4162997954c10c2122918ddb3496a3959e660c9a61103cc93bc65b8d26eff7f01055a3803c20539902fead4305dc0065747d6476704a8ba
-Size (libntlm-1.5.tar.gz) = 658935 bytes
+SHA1 (libntlm-1.6.tar.gz) = d6f9b69f154d82d0f9a49e9686b79fc03f21c3c6
+RMD160 (libntlm-1.6.tar.gz) = 673b3b2d18a8429565c09b52b309f598937ca081
+SHA512 (libntlm-1.6.tar.gz) = d68bc6b5cd7f5f70385ba78275a810fa46e60f761f0949f2262eef35ae052661739ef17ce3fc4ab75f7e8cfc788b1ccd7766d4ff0ee78db08ea4de3e224653f2
+Size (libntlm-1.6.tar.gz) = 688608 bytes