kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/chat/bitchx/distinfo

19 lines
1 KiB
Text
Raw Normal View History

Add patches for two longstanding security issues in bitchx: - CVE-2007-5839: e_hostname uses mktempnam in an unsafe manner. - CVE-2007-4584: p_mode classic buffer overflow using a static string.
2008-07-06 07:16:50 +02:00
$NetBSD: distinfo,v 1.17 2008/07/06 05:16:50 tonnerre Exp $
+ move the distfile digest/checksum value from files/md5 to distinfo + move the patch digest/checksum values from files/patch-sum to distinfo
2001-04-17 12:22:24 +02:00
Changes 1.1: * Fixed bug with using [$8] in expressions (Reported by BlackJac) (Patch from |Rain|) (BugID: 64) (powuh) * Fixed bug in /set show_end_of_msgs. When OFF prevented hooking of some end_of_msg numerics. (Reported by BlackJac) (Patch from |Rain|) (BugID: 51) (powuh) * Fixed incorrect ordering of operations in screen.c which caused an off-by-one access at the end ofthe buffer. (Patch from |Rain|) (BugID: 48) (powuh) * Fixed ischanvoice() to be compatiable with epic. Maintained reverse functionality as not to break existing scripts. (Patch from |Rain|) (BugID: 20) (powuh) * Fixed segfault with convert_output_format not honoring MAX_RECURSE. (Patch from |Rain|) (powuh) * Fixed possble rouge server exploit: If a rogue server sends us a ctcp request from an extremely large nickname (over about 512 bytes), we may attempt to alloca() a negative value, which under gcc will return a invalid pointer the contents of which will then be overwritten. (Reported by O_6) (Patch from |Rain|) (powuh) * Fixed segfault with channel mode parsing. (Patch from O_6) (powuh) * Removed auto_resume script, it's not needed any more (caf). * Fixed string copying snafu in gtkbitchx.c (reported by Huey) (caf). * Added STATUS_USER20 to STATUS_USER39 (patch from BlackJac) (caf).
2004-11-26 12:38:14 +01:00
SHA1 (ircii-pana-1.1-final.tar.gz) = b25635b62c7ff905b6492a4aaa88c43b5aa164f8
Add RMD160 digests in addition to SHA1 ones
2005-02-23 16:59:10 +01:00
RMD160 (ircii-pana-1.1-final.tar.gz) = 4105de2587964146e2391a26a8a16e3d0059a93f
Changes 1.1: * Fixed bug with using [$8] in expressions (Reported by BlackJac) (Patch from |Rain|) (BugID: 64) (powuh) * Fixed bug in /set show_end_of_msgs. When OFF prevented hooking of some end_of_msg numerics. (Reported by BlackJac) (Patch from |Rain|) (BugID: 51) (powuh) * Fixed incorrect ordering of operations in screen.c which caused an off-by-one access at the end ofthe buffer. (Patch from |Rain|) (BugID: 48) (powuh) * Fixed ischanvoice() to be compatiable with epic. Maintained reverse functionality as not to break existing scripts. (Patch from |Rain|) (BugID: 20) (powuh) * Fixed segfault with convert_output_format not honoring MAX_RECURSE. (Patch from |Rain|) (powuh) * Fixed possble rouge server exploit: If a rogue server sends us a ctcp request from an extremely large nickname (over about 512 bytes), we may attempt to alloca() a negative value, which under gcc will return a invalid pointer the contents of which will then be overwritten. (Reported by O_6) (Patch from |Rain|) (powuh) * Fixed segfault with channel mode parsing. (Patch from O_6) (powuh) * Removed auto_resume script, it's not needed any more (caf). * Fixed string copying snafu in gtkbitchx.c (reported by Huey) (caf). * Added STATUS_USER20 to STATUS_USER39 (patch from BlackJac) (caf).
2004-11-26 12:38:14 +01:00
Size (ircii-pana-1.1-final.tar.gz) = 2532476 bytes
SHA1 (patch-aa) = c184a5341217d21277060d07c4ed12c20f374dc8
SHA1 (patch-ab) = 843e1bdfe6bdd93c93944484edb56be7393f298d
Update to version 1.0c19. Changes unknown. Based on PR pkg/19296 from Juan RP.
2003-01-31 01:17:45 +01:00
SHA1 (patch-ac) = ba59735707ca8758d62e78b7756330aa933f2de7
Changes 1.1: * Fixed bug with using [$8] in expressions (Reported by BlackJac) (Patch from |Rain|) (BugID: 64) (powuh) * Fixed bug in /set show_end_of_msgs. When OFF prevented hooking of some end_of_msg numerics. (Reported by BlackJac) (Patch from |Rain|) (BugID: 51) (powuh) * Fixed incorrect ordering of operations in screen.c which caused an off-by-one access at the end ofthe buffer. (Patch from |Rain|) (BugID: 48) (powuh) * Fixed ischanvoice() to be compatiable with epic. Maintained reverse functionality as not to break existing scripts. (Patch from |Rain|) (BugID: 20) (powuh) * Fixed segfault with convert_output_format not honoring MAX_RECURSE. (Patch from |Rain|) (powuh) * Fixed possble rouge server exploit: If a rogue server sends us a ctcp request from an extremely large nickname (over about 512 bytes), we may attempt to alloca() a negative value, which under gcc will return a invalid pointer the contents of which will then be overwritten. (Reported by O_6) (Patch from |Rain|) (powuh) * Fixed segfault with channel mode parsing. (Patch from O_6) (powuh) * Removed auto_resume script, it's not needed any more (caf). * Fixed string copying snafu in gtkbitchx.c (reported by Huey) (caf). * Added STATUS_USER20 to STATUS_USER39 (patch from BlackJac) (caf).
2004-11-26 12:38:14 +01:00
SHA1 (patch-ad) = ba00fb80b1b980a32b70d84e4ca4db91e9fd5538
Update to version 1.0c19. Changes unknown. Based on PR pkg/19296 from Juan RP.
2003-01-31 01:17:45 +01:00
SHA1 (patch-ae) = 90c7e0a19c81e710392c675be650c57e64ee65b3
SHA1 (patch-af) = c79fcbcc57b8234d5918b1414219965b75e3c0d1
Add patches for two longstanding security issues in bitchx: - CVE-2007-5839: e_hostname uses mktempnam in an unsafe manner. - CVE-2007-4584: p_mode classic buffer overflow using a static string.
2008-07-06 07:16:50 +02:00
SHA1 (patch-ag) = fc0b31a959a5799122178a255006ee67521fb49a
SHA1 (patch-ah) = e3e8334298ba06e7980309a6b2e9b624e1fbd398
Fix pointers for cursor_not_in_display() & cursor_in_display(). Fixes BUS error on sparc64. Appears to apply to version Bitchx 1.1 too.
2004-06-27 02:35:04 +02:00
SHA1 (patch-an) = 59a6dc31a90b88bbffac5bb4629feaa2488afeff
Fixed the build on NetBSD with gcc4.
2007-03-17 14:25:46 +01:00
SHA1 (patch-ao) = ce6d8d68f39c54e5f174d294b0a72432b95fe89b
SHA1 (patch-ap) = 7cc6162de323bf07e52cbad7d4b4b54ac01d105e
SHA1 (patch-aq) = 97387bc2f7059f1a864f47ecd611ce62e13cb969
Fix for a security issue, CVE-2007-3360. A malicious server could direct the client into executing arbitrary code.
2007-06-25 16:15:21 +02:00
SHA1 (patch-ar) = 09286c5e21c6b8f6d35ab53146297c2e4f44ad55
Reference in a new issue Copy permalink