mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2024-12-28 05:29:48 +00:00
Code Issues Releases Activity

Update to new camediaplay version which fixes the format string

Browse Source 
vulnerability by removing the '-N' option (also fixes the buffer overflow).
Thanks for itojun for the quick turnaround.
This commit is contained in:
Kris Kennaway 2001-02-11 04:33:35 +00:00
parent 69e126f607
commit 2b25949f5b
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=38192
2 changed files with 1 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
graphics/camediaplay/Makefile
View File

@ -6,7 +6,7 @@
#
PORTNAME= camediaplay
PORTVERSION= 19991202
PORTVERSION= 20010211
CATEGORIES= graphics
MASTER_SITES= ftp://ftp.itojun.org/pub/digi-cam/C-400L/unix/ \
ftp://ftp.digipri.co.jp/pub/free-software/Olympus/C-400L/unix/
@ -19,11 +19,6 @@ MAN1= camediaplay.1
DOC= README.english README.japanese PROTOCOL
pre-fetch:
.if !defined(BATCH) && !defined(PACKAGE_BUILDING)
${SH} pkg-install
.endif
post-install:
${MKDIR} ${PREFIX}/share/doc/camediaplay
for i in ${DOC}; do \

9
graphics/camediaplay/pkg-install
View File

@ -1,9 +0,0 @@
#!/bin/sh
if [ "$2" = "POST-INSTALL" -o -n "${PACKAGE_BUILDING}" ]; then
exit 0
fi
/usr/bin/dialog --yesno "SECURITY NOTE: This port is not safe to install on multi-user systems containing untrusted users - it is vulnerable to a local buffer overflow and format string vulnerability which allow an attacker to obtain access to the uucp user. Do you wish to proceed with the installation of the software anyway?" 9 70 || /usr/bin/false