Subject: CVS commit: [pkgsrc-2005Q3] pkgsrc/www/lynx
To: None <pkgsrc-changes@NetBSD.org>
From: Stoned Elipot <seb@netbsd.org>
List: pkgsrc-changes
Date: 10/20/2005 09:21:01
Module Name: pkgsrc
Committed By: seb
Date: Thu Oct 20 09:21:01 UTC 2005
Modified Files:
pkgsrc/www/lynx [pkgsrc-2005Q3]: Makefile distinfo
Log Message:
Pullup ticket 841 - requested by Frederick Bruckman
security fix for www/lynx
Revisions pulled up:
- pkgsrc/www/lynx/Makefile 1.83
- pkgsrc/www/lynx/distinfo 1.17
Module Name: pkgsrc
Committed By: fredb
Date: Tue Oct 18 15:59:20 UTC 2005
Modified Files:
pkgsrc/www/lynx: Makefile distinfo
Log Message:
Update to 2.8.5 patchlevel 3 for a security issue. From the ChangeLog:
2004-10-17 (2.8.5rel.3 fixes from 2.8.6dev.14)
* eliminate fixed-size buffers in LYExpandHostForURL() to guard against
buffer overflow resulting from too-long domain prefix/suffix data from
lynx.cfg (report by Ulf Harnhammar, CAN-2005-3120) -TD
To generate a diff of this commit:
cvs rdiff -r1.82 -r1.82.2.1 pkgsrc/www/lynx/Makefile
cvs rdiff -r1.16 -r1.16.4.1 pkgsrc/www/lynx/distinfo
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.