aboutsummaryrefslogtreecommitdiffstats
path: root/security
diff options
context:
space:
mode:
authordes <des@FreeBSD.org>2018-09-10 21:19:46 +0800
committerdes <des@FreeBSD.org>2018-09-10 21:19:46 +0800
commitd832a0f7c72fed2d86631779e0e765258c273a60 (patch)
tree4dfdb0f21d71da58c39db8c61ccd21bbffa54b0d /security
parent7261939ea3173efd9b60df37181a37338ce1de2d (diff)
downloadfreebsd-ports-gnome-d832a0f7c72fed2d86631779e0e765258c273a60.tar.gz
freebsd-ports-gnome-d832a0f7c72fed2d86631779e0e765258c273a60.tar.zst
freebsd-ports-gnome-d832a0f7c72fed2d86631779e0e765258c273a60.zip
Regenerate with 'make makepatch' and add a comment. Note that I am
unsure if the patch is still required, or even if it is correct.
Diffstat (limited to 'security')
-rw-r--r--security/p5-Crypt-OpenPGP/files/patch-lib_Crypt_OpenPGP_Ciphertext.pm (renamed from security/p5-Crypt-OpenPGP/files/patch-CVE-2005-0366)10
1 files changed, 7 insertions, 3 deletions
diff --git a/security/p5-Crypt-OpenPGP/files/patch-CVE-2005-0366 b/security/p5-Crypt-OpenPGP/files/patch-lib_Crypt_OpenPGP_Ciphertext.pm
index b7932d70d4ae..6a9f0bb7b6d0 100644
--- a/security/p5-Crypt-OpenPGP/files/patch-CVE-2005-0366
+++ b/security/p5-Crypt-OpenPGP/files/patch-lib_Crypt_OpenPGP_Ciphertext.pm
@@ -1,6 +1,10 @@
---- lib/Crypt/OpenPGP/Ciphertext.pm.orig Tue Apr 10 15:51:46 2007
-+++ lib/Crypt/OpenPGP/Ciphertext.pm Tue Apr 10 15:52:03 2007
-@@ -87,8 +87,8 @@ sub decrypt {
+Patch for CVE-2005-0366: plaintext recovery using checksum failure oracle.
+
+https://nvd.nist.gov/vuln/detail/CVE-2005-0366
+
+--- lib/Crypt/OpenPGP/Ciphertext.pm.orig 2009-12-11 00:05:35 UTC
++++ lib/Crypt/OpenPGP/Ciphertext.pm
+@@ -85,8 +85,8 @@ sub decrypt {
my $padlen = $cipher->blocksize + 2;
my $pt = $enc->{prefix} =
$cipher->decrypt(substr $enc->{ciphertext}, 0, $padlen);