CVS: cvs.openbsd.org: ports

CVSROOT:	/cvs
Module name:	ports
Changes by:	brad@cvs.openbsd.org	2003/02/26 09:44:37

Modified files:
	security/libmcrypt: Tag: OPENBSD_3_2 Makefile 
Added files:
	security/libmcrypt/patches: Tag: OPENBSD_3_2 
	                            patch-lib_mcrypt_extra_c 

Log message:
limbcrypt contains a number of buffer overflow vulnerabilities that stem from imporper or lacking input validation. By passing a longer then expected input to a number of functions (multiple functions are affected) the user can successful make libmcrypt crash.

http://marc.theaimsgroup.com/?l=bugtraq&m=104162752401212&w=2 Received on Wed Feb 26 11:44:31 2003