Subject: CVS commit: pkgsrc/graphics/xli
To: None <pkgsrc-changes@NetBSD.org>
From: Lubomir Sedlacik <salo@netbsd.org>
List: pkgsrc-changes
Date: 10/30/2005 17:58:58
Module Name:	pkgsrc
Committed By:	salo
Date:		Sun Oct 30 17:58:58 UTC 2005

Modified Files:
	pkgsrc/graphics/xli: Makefile distinfo
Added Files:
	pkgsrc/graphics/xli/patches: patch-ae patch-af

Log Message:
Security fix for CVE-2005-3178:

"Buffer overflow in xli might allow user-complicit attackers to execute
arbitrary code via a long title name in a NIFF file, which triggers the
overflow during zoom, reduce, or rotate operations."

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-3178

Patch from Debian.


To generate a diff of this commit:
cvs rdiff -r1.30 -r1.31 pkgsrc/graphics/xli/Makefile
cvs rdiff -r1.17 -r1.18 pkgsrc/graphics/xli/distinfo
cvs rdiff -r0 -r1.1 pkgsrc/graphics/xli/patches/patch-ae \
    pkgsrc/graphics/xli/patches/patch-af

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.