From 3ea28fa262d6221958089636813802290f7f9c4c Mon Sep 17 00:00:00 2001 From: Christian Neukirchen Date: Mon, 5 Oct 2015 22:28:45 +0200 Subject: [PATCH] opensmtpd: security update to 5.7.2p1_4. Patch from Gentoo, see http://seclists.org/oss-sec/2015/q4/27. --- .../opensmtpd-5.7.2-remote-header-crash.patch | 24 +++++++++++++++++++ srcpkgs/opensmtpd/template | 2 +- 2 files changed, 25 insertions(+), 1 deletion(-) create mode 100644 srcpkgs/opensmtpd/patches/opensmtpd-5.7.2-remote-header-crash.patch diff --git a/srcpkgs/opensmtpd/patches/opensmtpd-5.7.2-remote-header-crash.patch b/srcpkgs/opensmtpd/patches/opensmtpd-5.7.2-remote-header-crash.patch new file mode 100644 index 0000000000..16774dc35a --- /dev/null +++ b/srcpkgs/opensmtpd/patches/opensmtpd-5.7.2-remote-header-crash.patch @@ -0,0 +1,24 @@ +--- smtpd/filter.c ++++ smtpd/filter.c +@@ -726,7 +726,6 @@ filter_tx_io(struct io *io, int evt) + struct filter_session *s = io->arg; + size_t len, n; + char *data; +- char buf[65535]; + + log_trace(TRACE_FILTERS, "filter: filter_tx_io(%p, %s)", s, io_strevent(evt)); + +@@ -734,10 +733,9 @@ filter_tx_io(struct io *io, int evt) + case IO_DATAIN: + data = iobuf_data(&s->ibuf); + len = iobuf_len(&s->ibuf); +- memmove(buf, data, len); +- buf[len] = 0; +- log_trace(TRACE_FILTERS, "filter: filter_tx_io: datain (%zu) for req %016"PRIx64": %s", +- len, s->id, buf); ++ ++ log_trace(TRACE_FILTERS, "filter: filter_tx_io: datain (%zu) for req %016"PRIx64"", ++ len, s->id); + + n = fwrite(data, 1, len, s->ofile); + if (n != len) { diff --git a/srcpkgs/opensmtpd/template b/srcpkgs/opensmtpd/template index 9bb8dce6de..16c859db56 100644 --- a/srcpkgs/opensmtpd/template +++ b/srcpkgs/opensmtpd/template @@ -1,7 +1,7 @@ # Template file for 'opensmtpd' pkgname=opensmtpd version=5.7.2p1 -revision=3 +revision=4 build_style=gnu-configure configure_args="--sysconfdir=/etc/smtpd --sbindir=/usr/bin --with-maildir=/var/spool/mail --with-privsep-path=/var/empty