f705b2b3cc
problems noted in CAN-2004-0914:
Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as
used in XFree86 and other packages, include (1) multiple integer
overflows, (2) out-of-bounds memory accesses, (3) directory
traversal, (4) shell metacharacter, (5) endless loops, and (6)
memory leaks, which could allow remote attackers to obtain
sensitive information, cause a denial of service (application
crash), or execute arbitary code via a certain XPM image file.
Bump PKGREVISION to 4. Since this is a security-related fix, also
bump the BUILDLINK_RECOMMENDED version for this package.
12 lines
402 B
Text
12 lines
402 B
Text
$NetBSD: patch-as,v 1.1 2005/06/14 18:10:37 jlam Exp $
|
|
|
|
--- cxpm/cxpm.c.orig 1998-03-19 14:51:01.000000000 -0500
|
|
+++ cxpm/cxpm.c
|
|
@@ -77,6 +77,7 @@ sUngetc(data, c)
|
|
#include "../lib/data.c"
|
|
#include "../lib/parse.c"
|
|
#include "../lib/RdFToI.c" /* only for OpenReadFile and xpmDataClose */
|
|
+#include "../lib/s_popen.c"
|
|
#include "../lib/hashtab.c"
|
|
#include "../lib/misc.c"
|
|
#include "../lib/Attrib.c"
|