packages: exim/exim-CVE-2011-1764.patch (NEW) - patch resolving CVE-2011-17...

[marti]

Author: marti                        Date: Fri May  6 12:17:15 2011 GMT
Module: packages                      Tag: HEAD
---- Log message:
- patch resolving CVE-2011-1764 (remote vulnerability in DKIM)

---- Files affected:
packages/exim:
   exim-CVE-2011-1764.patch (NONE -> 1.1)  (NEW)

---- Diffs:

================================================================
Index: packages/exim/exim-CVE-2011-1764.patch
diff -u /dev/null packages/exim/exim-CVE-2011-1764.patch:1.1
--- /dev/null	Fri May  6 14:17:16 2011
+++ packages/exim/exim-CVE-2011-1764.patch	Fri May  6 14:17:10 2011
@@ -0,0 +1,22 @@
+diff -ur exim-4.75-orig/src/dkim.c exim-4.75/src/dkim.c
+--- exim-4.75-orig/src/dkim.c	2011-03-22 09:00:51.000000000 +0100
++++ exim-4.75/src/dkim.c	2011-05-06 14:09:06.715883520 +0200
+@@ -108,7 +108,7 @@
+     /* Log a line for each signature */
+     uschar *logmsg = string_append(NULL, &size, &ptr, 5,
+ 
+-      string_sprintf( "DKIM: d=%s s=%s c=%s/%s a=%s ",
++      string_sprintf( "d=%s s=%s c=%s/%s a=%s ",
+                       sig->domain,
+                       sig->selector,
+                       (sig->canon_headers == PDKIM_CANON_SIMPLE)?"simple":"relaxed",
+@@ -176,7 +176,7 @@
+     }
+ 
+     logmsg[ptr] = '\0';
+-    log_write(0, LOG_MAIN, (char *)logmsg);
++	log_write(0, LOG_MAIN, "DKIM: %s", logmsg);
+ 
+     /* Build a colon-separated list of signing domains (and identities, if present) in dkim_signers */
+     dkim_signers = string_append(dkim_signers,
+Tylko w exim-4.75/src: dkim.c~
================================================================