[pkgsrc/pkgsrc-2005Q3]: pkgsrc/www/lynx Pullup ticket 841 - requested by Fred...

[seb <seb%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/8533332653c2
branches:  pkgsrc-2005Q3
changeset: 499610:8533332653c2
user:      seb <seb%pkgsrc.org@localhost>
date:      Thu Oct 20 09:21:01 2005 +0000

description:
Pullup ticket 841 - requested by Frederick Bruckman
security fix for www/lynx

Revisions pulled up:
- pkgsrc/www/lynx/Makefile                                    1.83
- pkgsrc/www/lynx/distinfo                                    1.17

   Module Name: pkgsrc
   Committed By:        fredb
   Date:                Tue Oct 18 15:59:20 UTC 2005

   Modified Files:
        pkgsrc/www/lynx: Makefile distinfo

   Log Message:
   Update to 2.8.5 patchlevel 3 for a security issue.  From the ChangeLog:

   2004-10-17 (2.8.5rel.3 fixes from 2.8.6dev.14)
   * eliminate fixed-size buffers in LYExpandHostForURL() to guard against
      buffer overflow resulting from too-long domain prefix/suffix data from
      lynx.cfg (report by Ulf Harnhammar, CAN-2005-3120) -TD

diffstat:

 www/lynx/Makefile |  8 ++++----
 www/lynx/distinfo |  5 ++++-
 2 files changed, 8 insertions(+), 5 deletions(-)

diffs (43 lines):

diff -r 7daf07e052ac -r 8533332653c2 www/lynx/Makefile
--- a/www/lynx/Makefile Wed Oct 19 22:05:45 2005 +0000
+++ b/www/lynx/Makefile Thu Oct 20 09:21:01 2005 +0000
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.82 2005/07/25 15:33:31 tron Exp $
+# $NetBSD: Makefile,v 1.82.2.1 2005/10/20 09:21:01 seb Exp $
 
 DISTNAME=      lynx2.8.5
-PKGNAME=       lynx-2.8.5.2
-PKGREVISION=   2
+PKGNAME=       lynx-2.8.5.3
+#PKGREVISION=  0
 CATEGORIES=    www
 MASTER_SITES=  http://lynx.isc.org/${DISTNAME}/ \
                ftp://ftp.nl.uu.net/pub/unix/www/lynx/${DISTNAME}/ \
@@ -12,7 +12,7 @@
 
 PATCH_DIST_STRIP= -p1
 PATCH_SITES=   ${MASTER_SITES:=patches/}
-PATCHFILES=    2.8.5rel.2.patch.gz
+PATCHFILES=    2.8.5rel.2.patch.gz 2.8.5rel.3.patch.gz
 
 MAINTAINER=    fredb%NetBSD.org@localhost
 HOMEPAGE=      http://lynx.isc.org/
diff -r 7daf07e052ac -r 8533332653c2 www/lynx/distinfo
--- a/www/lynx/distinfo Wed Oct 19 22:05:45 2005 +0000
+++ b/www/lynx/distinfo Thu Oct 20 09:21:01 2005 +0000
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.16 2005/05/25 13:45:36 fredb Exp $
+$NetBSD: distinfo,v 1.16.4.1 2005/10/20 09:21:01 seb Exp $
 
 SHA1 (lynx/lynx2.8.5.tar.bz2) = c70866f67c1365b55e0c9c0c569190f5919d28d4
 RMD160 (lynx/lynx2.8.5.tar.bz2) = 80d20261ac6eaebe1d940fb5de485daaad7bb3b7
@@ -6,6 +6,9 @@
 SHA1 (lynx/2.8.5rel.2.patch.gz) = f2f6cf025a11a860ce2af98ef9c3c0cf0699a8ee
 RMD160 (lynx/2.8.5rel.2.patch.gz) = 827a440a5aa311d740a8b459f639b20cdcd9d481
 Size (lynx/2.8.5rel.2.patch.gz) = 2445 bytes
+SHA1 (lynx/2.8.5rel.3.patch.gz) = 3df403358d24f2e3ebbe89732710f0e92af0242c
+RMD160 (lynx/2.8.5rel.3.patch.gz) = 51eaf9b8df1a97aba47d2ee18a90af20a9bf93f0
+Size (lynx/2.8.5rel.3.patch.gz) = 4376 bytes
 SHA1 (patch-aa) = ac17101b5dfa296298f1fcd58e8b14673c2855bb
 SHA1 (patch-ae) = 5dff036d9fc35dca528acb530f779dce4a98cddd
 SHA1 (patch-af) = 819cdfae5e8181423f5be68cc202a6e074560e75