CVS commit: pkgsrc/www/logswan

["Frederic Cambus" <fcambus%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   fcambus
Date:           Thu Dec  2 10:39:17 UTC 2021

Modified Files:
        pkgsrc/www/logswan: Makefile distinfo

Log Message:
logswan: update to 2.1.12.

Logswan 2.1.12 (2021-12-02)

- Fix a use-after-free (read) triggered by strcmp(3) calls.

  The parse_request() function didn't zero out the parsed_request struct
  between each call. Since the parsing loop was switched to using getline(3)
  instead of a fixed size buffer to process log lines, it could reference
  already freed memory in certain cases.

  Thanks to Brian Carpenter (@geeknik) for finding and reporting the issue.


To generate a diff of this commit:
cvs rdiff -u -r1.24 -r1.25 pkgsrc/www/logswan/Makefile
cvs rdiff -u -r1.23 -r1.24 pkgsrc/www/logswan/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/logswan/Makefile
diff -u pkgsrc/www/logswan/Makefile:1.24 pkgsrc/www/logswan/Makefile:1.25
--- pkgsrc/www/logswan/Makefile:1.24    Sun Nov 21 07:18:19 2021
+++ pkgsrc/www/logswan/Makefile Thu Dec  2 10:39:17 2021
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.24 2021/11/21 07:18:19 fcambus Exp $
+# $NetBSD: Makefile,v 1.25 2021/12/02 10:39:17 fcambus Exp $
 
-DISTNAME=      logswan-2.1.11
+DISTNAME=      logswan-2.1.12
 CATEGORIES=    www
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=fcambus/}
 GITHUB_RELEASE=        ${PKGVERSION_NOREV}

Index: pkgsrc/www/logswan/distinfo
diff -u pkgsrc/www/logswan/distinfo:1.23 pkgsrc/www/logswan/distinfo:1.24
--- pkgsrc/www/logswan/distinfo:1.23    Sun Nov 21 07:18:19 2021
+++ pkgsrc/www/logswan/distinfo Thu Dec  2 10:39:17 2021
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.23 2021/11/21 07:18:19 fcambus Exp $
+$NetBSD: distinfo,v 1.24 2021/12/02 10:39:17 fcambus Exp $
 
-BLAKE2s (logswan-2.1.11.tar.gz) = fb9c1ab248f5612f255cbe93e720ce7f1d004f32289ae442e4b9cc05449c1dd7
-SHA512 (logswan-2.1.11.tar.gz) = cd93d9562b01829f0a453d05a2cea2a709f3bc50b709f02cbf60171e90a0ffa3ef3600e90270ead82a6fe6d7cdc10a6187a2f222b21c17d9a6c94c9fad842ff0
-Size (logswan-2.1.11.tar.gz) = 23620 bytes
+BLAKE2s (logswan-2.1.12.tar.gz) = fa26443e40047210577782dbd26b614b0d37745597f31097b4844c0885132b7e
+SHA512 (logswan-2.1.12.tar.gz) = 27e8feec27b5d56b426aa39142d1e42967cfffd08a61408a3a3cbd17bc95d676a19e774af4cb406a31f76eac0b7b160bb45f36b4f3c8c3537468bde85f6c9620
+Size (logswan-2.1.12.tar.gz) = 23813 bytes