diff options
| author |   Holger Hans Peter Freyther <zecke@selfish.org> | 2010-03-08 07:24:03 +0100 |
|---|---|---|
| committer | Holger Hans Peter Freyther <zecke@selfish.org> | 2010-03-08 07:24:03 +0100 |
| commit | 4fb5a96bb21e03dc6e4ef9b8d8917536642dec11 (patch) | |
| tree | e329c2607dd38889fecb09fb9603e6dccda885f9 | |
| parent | ed68667b918805c7fbef54e9a4fe0a75bf06f22f (diff) | |
| download | openembedded-4fb5a96bb21e03dc6e4ef9b8d8917536642dec11.tar.gz | |
net-snmp-5.4.2.1: Addresses CVE-2008-6123.
See http://bugs.gentoo.org/show_bug.cgi?id=250429 for more details.
| -rw-r--r-- | recipes/net-snmp/net-snmp-5.4.2.1/CVE-2008-6123.patch | 21 | ||||
| -rw-r--r-- | recipes/net-snmp/net-snmp_5.4.2.1.bb | 3 |
2 files changed, 23 insertions, 1 deletions
diff --git a/recipes/net-snmp/net-snmp-5.4.2.1/CVE-2008-6123.patch b/recipes/net-snmp/net-snmp-5.4.2.1/CVE-2008-6123.patch new file mode 100644 index 0000000000..5d4658cf7d --- /dev/null +++ b/recipes/net-snmp/net-snmp-5.4.2.1/CVE-2008-6123.patch @@ -0,0 +1,21 @@ +http://bugs.gentoo.org/show_bug.cgi?id=250429 + +diff -Naur a/snmplib.orig/snmpUDPDomain.c b/snmplib/snmpUDPDomain.c +--- a/snmplib.orig/snmpUDPDomain.c 2007-10-11 22:46:30.000000000 +0200 ++++ b/snmplib/snmpUDPDomain.c 2009-07-10 23:41:37.000000000 +0200 +@@ -104,12 +110,12 @@ + char tmp[64]; + to = (struct sockaddr_in *) &(addr_pair->remote_addr); + if (to == NULL) { +- sprintf(tmp, "UDP: [%s]->unknown", ++ sprintf(tmp, "UDP: unknown->[%s]", + inet_ntoa(addr_pair->local_addr)); + } else { +- sprintf(tmp, "UDP: [%s]->", inet_ntoa(addr_pair->local_addr)); +- sprintf(tmp + strlen(tmp), "[%s]:%hd", ++ sprintf(tmp, "UDP: [%s]:%hu->", + inet_ntoa(to->sin_addr), ntohs(to->sin_port)); ++ sprintf(tmp + strlen(tmp), "[%s]", inet_ntoa(addr_pair->local_addr)); + } + return strdup(tmp); + } diff --git a/recipes/net-snmp/net-snmp_5.4.2.1.bb b/recipes/net-snmp/net-snmp_5.4.2.1.bb index 7e81151c6d..f22120c7dd 100644 --- a/recipes/net-snmp/net-snmp_5.4.2.1.bb +++ b/recipes/net-snmp/net-snmp_5.4.2.1.bb @@ -1,8 +1,9 @@ require net-snmp.inc -PR = "${INC_PR}.0" +PR = "${INC_PR}.1" SRC_URI = "${SOURCEFORGE_MIRROR}/net-snmp/net-snmp-${PV}.tar.gz \ file://configure-tail.patch;patch=1 \ + file://CVE-2008-6123.patch;patch=1 \ file://init \ file://snmpd.conf \ file://snmptrapd.conf" |