CVS commit: pkgsrc/textproc/libxml2

["Matthias Drochner" <drochner%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   drochner
Date:           Fri Mar  9 12:12:28 UTC 2012

Modified Files:
        pkgsrc/textproc/libxml2: Makefile distinfo
Added Files:
        pkgsrc/textproc/libxml2/patches: patch-CVE-2012-0841-aa
            patch-CVE-2012-0841-ab patch-CVE-2012-0841-ac

Log Message:
Add patch from upstream to add hash randomization.
Without that, (untrusted) input can fill hash buckets uneven, causing
high CPU load. (CVE-2012-0841)
To get a patch which is simple enough to get pulled up to the stable
pkgsrc branch, I've not touched "configure" but just assumed that
the POSIX functions rand(), srand() and time() are present.
bump PKGREV


To generate a diff of this commit:
cvs rdiff -u -r1.113 -r1.114 pkgsrc/textproc/libxml2/Makefile
cvs rdiff -u -r1.88 -r1.89 pkgsrc/textproc/libxml2/distinfo
cvs rdiff -u -r0 -r1.1 pkgsrc/textproc/libxml2/patches/patch-CVE-2012-0841-aa \
    pkgsrc/textproc/libxml2/patches/patch-CVE-2012-0841-ab \
    pkgsrc/textproc/libxml2/patches/patch-CVE-2012-0841-ac

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.