[Pkg-utopia-commits] r3010 - in /packages/unstable/avahi/debian: changelog patches/03-avahi-daemon-reflector-packet-storm.patch patches/series

[biebl at users.alioth.debian.org]

Author: biebl
Date: Sun Mar 29 20:18:41 2009
New Revision: 3010

URL: http://svn.debian.org/wsvn/pkg-utopia/?sc=1&rev=3010
Log:
* debian/patches/03-avahi-daemon-reflector-packet-storm.patch
  - Fix a bug in avahi-daemon that could cause packet storms when reflecting
    legacy unicast mDNS traffic. (Closes: #517683)
    SECURITY: CVE-2009-0758
    Thanks to Rob Leslie for the patch.

Added:
    packages/unstable/avahi/debian/patches/03-avahi-daemon-reflector-packet-storm.patch
Modified:
    packages/unstable/avahi/debian/changelog
    packages/unstable/avahi/debian/patches/series

Modified: packages/unstable/avahi/debian/changelog
URL: http://svn.debian.org/wsvn/pkg-utopia/packages/unstable/avahi/debian/changelog?rev=3010&op=diff
==============================================================================
--- packages/unstable/avahi/debian/changelog (original)
+++ packages/unstable/avahi/debian/changelog Sun Mar 29 20:18:41 2009
@@ -4,6 +4,11 @@
   * debian/control
     - Change Section of avahi-dbg to debug.
     - Bump Standards-Version to 3.8.1. No further changes.
+  * debian/patches/03-avahi-daemon-reflector-packet-storm.patch
+    - Fix a bug in avahi-daemon that could cause packet storms when reflecting
+      legacy unicast mDNS traffic. (Closes: #517683)
+      SECURITY: CVE-2009-0758
+      Thanks to Rob Leslie for the patch.
 
  -- Michael Biebl <biebl at debian.org>  Sun, 29 Mar 2009 21:52:23 +0200
 

Added: packages/unstable/avahi/debian/patches/03-avahi-daemon-reflector-packet-storm.patch
URL: http://svn.debian.org/wsvn/pkg-utopia/packages/unstable/avahi/debian/patches/03-avahi-daemon-reflector-packet-storm.patch?rev=3010&op=file
==============================================================================
--- packages/unstable/avahi/debian/patches/03-avahi-daemon-reflector-packet-storm.patch (added)
+++ packages/unstable/avahi/debian/patches/03-avahi-daemon-reflector-packet-storm.patch Sun Mar 29 20:18:41 2009
@@ -1,0 +1,22 @@
+diff --git a/avahi-core/server.c b/avahi-core/server.c
+index 453db09..8187690 100644
+--- a/avahi-core/server.c
++++ b/avahi-core/server.c
+@@ -844,7 +844,7 @@ static int originates_from_local_legacy_unicast_socket(AvahiServer *s, const Ava
+         if (getsockname(s->fd_legacy_unicast_ipv4, (struct sockaddr*) &lsa, &l) != 0)
+             avahi_log_warn("getsockname(): %s", strerror(errno));
+         else
+-            return lsa.sin_port == port;
++            return avahi_port_from_sockaddr((struct sockaddr*) &lsa) == port;
+ 
+     }
+ 
+@@ -855,7 +855,7 @@ static int originates_from_local_legacy_unicast_socket(AvahiServer *s, const Ava
+         if (getsockname(s->fd_legacy_unicast_ipv6, (struct sockaddr*) &lsa, &l) != 0)
+             avahi_log_warn("getsockname(): %s", strerror(errno));
+         else
+-            return lsa.sin6_port == port;
++            return avahi_port_from_sockaddr((struct sockaddr*) &lsa) == port;
+     }
+ 
+     return 0;

Modified: packages/unstable/avahi/debian/patches/series
URL: http://svn.debian.org/wsvn/pkg-utopia/packages/unstable/avahi/debian/patches/series?rev=3010&op=diff
==============================================================================
--- packages/unstable/avahi/debian/patches/series (original)
+++ packages/unstable/avahi/debian/patches/series Sun Mar 29 20:18:41 2009
@@ -1,3 +1,4 @@
 01_avahi-daemon.conf.patch
 02-avahi-daemon-dbus-policy.patch
+03-avahi-daemon-reflector-packet-storm.patch
 11_avahi-autoipd.action-add-routes.patch