SECURITY update to cyrus-imapd-2.5.7.

CVE-2015-8077, CVE-2015-8078: protect against integer overflow in urlfetch
range checks
This commit is contained in:
ajacoutot 2015-12-02 09:44:25 +00:00
parent 586ea0925f
commit d95f85bf78
4 changed files with 19 additions and 19 deletions

View File

@ -1,4 +1,4 @@
# $OpenBSD: Makefile,v 1.94 2015/09/11 07:26:07 ajacoutot Exp $
# $OpenBSD: Makefile,v 1.95 2015/12/02 09:44:25 ajacoutot Exp $
# WARNING: mmap(2) is not fully POSIX on OpenBSD so cyrus needs to
# map_refresh on every lock which will incure a performance penalty
@ -9,7 +9,7 @@ SHARED_ONLY= Yes
COMMENT= Cyrus IMAP server
V= 2.5.6
V= 2.5.7
DISTNAME= cyrus-imapd-${V}
SHARED_LIBS += cyrus 0.0 # 0.0
@ -70,17 +70,17 @@ SIEVEREF= lib/imapoptions man/imapd.conf.5 \
pre-configure:
.for i in lib/imapoptions man/imapd.conf.5
perl -pi -e "s,/usr/cyrus,${PREFIX}/cyrus,g;" \
sed -i -e "s,/usr/cyrus,${PREFIX}/cyrus,g;" \
-e "s,/usr/local/bin/gdb,/usr/bin/gdb,g" \
${WRKSRC}/${i}
.endfor
.for i in ${SENDMAILREF}
perl -pi -e "s,/usr/lib/sendmail,/usr/sbin/sendmail,g" ${WRKSRC}/${i}
sed -i "s,/usr/lib/sendmail,/usr/sbin/sendmail,g" ${WRKSRC}/${i}
.endfor
.for i in ${SIEVEREF}
perl -pi -e "s,/usr/sieve,/var/sieve,g" ${WRKSRC}/${i}
sed -i "s,/usr/sieve,/var/sieve,g" ${WRKSRC}/${i}
.endfor
post-install:

View File

@ -1,2 +1,2 @@
SHA256 (cyrus-imapd-2.5.6.tar.gz) = YPm+cXwXSX59afRoqNo9r5JsSe3qyVi8dptFR/EBA98=
SIZE (cyrus-imapd-2.5.6.tar.gz) = 2938962
SHA256 (cyrus-imapd-2.5.7.tar.gz) = 8GwsAwsWtwFF/s337aoPLva/aQsNj9bixi2VrzA9aNo=
SIZE (cyrus-imapd-2.5.7.tar.gz) = 2928358

View File

@ -1,9 +1,9 @@
$OpenBSD: patch-Makefile_in,v 1.2 2015/04/24 14:51:26 ajacoutot Exp $
--- Makefile.in.orig Fri Apr 24 04:11:16 2015
+++ Makefile.in Fri Apr 24 15:47:27 2015
@@ -528,7 +528,7 @@ imap_libcyrus_imap_la_OBJECTS = $(am_imap_libcyrus_ima
imap_libcyrus_imap_la_LINK = $(LIBTOOL) --tag=CC $(AM_LIBTOOLFLAGS) \
$(LIBTOOLFLAGS) --mode=link $(CCLD) \
$OpenBSD: patch-Makefile_in,v 1.3 2015/12/02 09:44:25 ajacoutot Exp $
--- Makefile.in.orig Tue Dec 1 00:59:49 2015
+++ Makefile.in Wed Dec 2 10:36:03 2015
@@ -561,7 +561,7 @@ imap_libcyrus_imap_la_OBJECTS = $(am_imap_libcyrus_ima
imap_libcyrus_imap_la_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \
$(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \
$(imap_libcyrus_imap_la_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) \
- $(LDFLAGS) -o $@
+ $(LDFLAGS) -lpthread -o $@

View File

@ -1,7 +1,7 @@
$OpenBSD: patch-configure,v 1.25 2015/04/24 14:51:26 ajacoutot Exp $
--- configure.orig Fri Apr 24 04:11:15 2015
+++ configure Fri Apr 24 15:47:27 2015
@@ -13157,9 +13157,7 @@ CFLAGS=$save_CFLAGS
$OpenBSD: patch-configure,v 1.26 2015/12/02 09:44:25 ajacoutot Exp $
--- configure.orig Tue Dec 1 00:59:48 2015
+++ configure Wed Dec 2 10:36:03 2015
@@ -13228,9 +13228,7 @@ CFLAGS=$save_CFLAGS
fi
if test "$ac_cv_fpic" = "yes"; then
@ -12,7 +12,7 @@ $OpenBSD: patch-configure,v 1.25 2015/04/24 14:51:26 ajacoutot Exp $
fi
{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_fpic" >&5
$as_echo "$ac_cv_fpic" >&6; }
@@ -14604,7 +14602,7 @@ fi
@@ -14675,7 +14673,7 @@ fi
@ -21,7 +21,7 @@ $OpenBSD: patch-configure,v 1.25 2015/04/24 14:51:26 ajacoutot Exp $
CPPFLAGS="${BDB_INCADD} ${CPPFLAGS}"
$as_echo "#define HAVE_BDB /**/" >>confdefs.h
@@ -19918,7 +19916,7 @@ $as_echo "$as_me: WARNING: Perl not found: Administrat
@@ -19988,7 +19986,7 @@ $as_echo "$as_me: WARNING: Perl not found: Administrat
elif test "${with_perl}" != "no"; then
PERL="${with_perl}"
case "${target_os}" in