Sunday, April 01, 2018

[update] librelp

Hi,

This is an update for librelp. The important difference to the previous
release is a security fix for CVE-2018-1000140. More information:
http://www.librelp.com/2018/03/librelp-stack-buffer-overflow.html

- I tested with rsyslog on i386 and amd64
- check_sys says: "No dynamic export changes"
- header file did no change (except one comment)

I'd like to commit this to -current and 6.3-stable.

OK?

Remi

Index: Makefile
===================================================================
RCS file: /cvs/ports/sysutils/librelp/Makefile,v
retrieving revision 1.11
diff -u -p -r1.11 Makefile
--- Makefile 6 Mar 2018 21:05:25 -0000 1.11
+++ Makefile 27 Mar 2018 19:32:11 -0000
@@ -2,7 +2,7 @@

COMMENT = reliable event logging protocol library

-DISTNAME = librelp-1.2.14
+DISTNAME = librelp-1.2.15

SHARED_LIBS += relp 1.1 # 3.0

Index: distinfo
===================================================================
RCS file: /cvs/ports/sysutils/librelp/distinfo,v
retrieving revision 1.4
diff -u -p -r1.4 distinfo
--- distinfo 6 Mar 2018 21:05:25 -0000 1.4
+++ distinfo 27 Mar 2018 19:32:15 -0000
@@ -1,2 +1,2 @@
-SHA256 (librelp-1.2.14.tar.gz) = EfYkGkM2NYozv9rdQ+8pnoJY2wpSQ9DBZEmca4WuWVU=
-SIZE (librelp-1.2.14.tar.gz) = 437975
+SHA256 (librelp-1.2.15.tar.gz) = qTGDLZBWZg/u521SGVsh1OngbV7I6Wsmr0TpmFKdqZk=
+SIZE (librelp-1.2.15.tar.gz) = 440273

No comments:

Post a Comment