summaryrefslogtreecommitdiffstats
path: root/mail/exim
diff options
context:
space:
mode:
authorsheldonh <sheldonh@FreeBSD.org>2001-06-11 15:07:51 +0000
committersheldonh <sheldonh@FreeBSD.org>2001-06-11 15:07:51 +0000
commit24765b43d28e9907ac459292027091d83b623fb8 (patch)
tree0148c739716f3f3e7e74beb08469ffd823c74f77 /mail/exim
parent922fca9c36b1a9aa5059865b46511743e292cfe5 (diff)
downloadFreeBSD-ports-24765b43d28e9907ac459292027091d83b623fb8.zip
FreeBSD-ports-24765b43d28e9907ac459292027091d83b623fb8.tar.gz
Apply officially sanctioned patch to close a format string vulnerability
in exim batch SMTP mode. The vulnerability is _not_ exploitable by external SMTP callers.
Diffstat (limited to 'mail/exim')
-rw-r--r--mail/exim/Makefile2
-rw-r--r--mail/exim/files/patch-src::accept.c11
2 files changed, 12 insertions, 1 deletions
diff --git a/mail/exim/Makefile b/mail/exim/Makefile
index 935b05f..6b9b62e 100644
--- a/mail/exim/Makefile
+++ b/mail/exim/Makefile
@@ -7,7 +7,7 @@
PORTNAME= exim
PORTVERSION= 3.22
-PORTREVISION= 5
+PORTREVISION= 6
CATEGORIES= mail
MASTER_SITES= ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/ \
http://www.exim.org/ftp/ \
diff --git a/mail/exim/files/patch-src::accept.c b/mail/exim/files/patch-src::accept.c
new file mode 100644
index 0000000..c74c917
--- /dev/null
+++ b/mail/exim/files/patch-src::accept.c
@@ -0,0 +1,11 @@
+--- src/accept.c.orig Mon Jun 11 17:00:24 2001
++++ src/accept.c Mon Jun 11 17:01:30 2001
+@@ -2503,7 +2503,7 @@
+ nothing on success. The function moan_smtp_batch() does not return -
+ it exits from the program with a non-zero return code. */
+
+- else if (smtp_reply != NULL) moan_smtp_batch(NULL, smtp_reply);
++ else if (smtp_reply != NULL) moan_smtp_batch(NULL, "%s", smtp_reply);
+ }
+
+ /* Reset headers so that logging of rejects for a subsequent message doesn't
OpenPOWER on IntegriCloud