Index: security/vuxml/vuln.xml =================================================================== --- security/vuxml/vuln.xml +++ security/vuxml/vuln.xml @@ -58,6 +58,89 @@ * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> + + bchunk -- access violation near NULL on destination operand and crash + + + bchunk + 1.2.01.2.1 + + + + +

Mitre reports:

+
+

bchunk 1.2.0 and 1.2.1 is vulnerable to an "Access violation near + NULL on destination operand" and crash when processing a malformed CUE + (.cue) file.

+
+ + + + CVE-2017-15955 + https://nvd.nist.gov/vuln/detail/CVE-2017-15955 + + + 2017-10-28 + 2018-02-10 + + + + + bchunk -- heap-based buffer overflow (with invalid free) and crash + + + bchunk + 1.2.01.2.1 + + + + +

Mitre reports:

+
+

bchunk 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer + overflow (with a resultant invalid free) and crash when processing a + malformed CUE (.cue) file.

+
+ + + + CVE-2017-15954 + https://nvd.nist.gov/vuln/detail/CVE-2017-15954 + + + 2017-10-28 + 2018-02-10 + + + + + bchunk -- heap-based buffer overflow and crash + + + bchunk + 1.2.01.2.1 + + + + +

Mitre reports:

+
+

bchunk 1.2.0 and 1.2.1 vulnerable to a heap-based buffer overflow + and crash when processing a malformed CUE (.cue) file.

+
+ + + + CVE-2017-15953 + https://nvd.nist.gov/vuln/detail/CVE-2017-15953 + + + 2017-10-28 + 2018-02-10 + + + p7zip-codec-rar -- insufficient error handling Index: sysutils/bchunk/Makefile =================================================================== --- sysutils/bchunk/Makefile +++ sysutils/bchunk/Makefile @@ -2,17 +2,20 @@ # $FreeBSD$ PORTNAME= bchunk -PORTVERSION= 1.2.0 +DISTVERSION= 1.2.2 CATEGORIES= sysutils MASTER_SITES= http://he.fi/bchunk/ -MAINTAINER= ports@FreeBSD.org +MAINTAINER= freebsd_ports@k-worx.org COMMENT= Converts .bin/.cue files to .iso/audio +LICENSE= GPLv2 +LICENSE_FILE= ${WRKSRC}/COPYING + PLIST_FILES= bin/bchunk man/man1/bchunk.1.gz do-build: - cd ${WRKSRC}; ${CC} ${CFLAGS} bchunk.c -o bchunk + @cd ${WRKSRC} && ${CC} ${CFLAGS} bchunk.c -o bchunk do-install: ${INSTALL_PROGRAM} ${WRKSRC}/bchunk ${STAGEDIR}${PREFIX}/bin Index: sysutils/bchunk/distinfo =================================================================== --- sysutils/bchunk/distinfo +++ sysutils/bchunk/distinfo @@ -1,2 +1,3 @@ -SHA256 (bchunk-1.2.0.tar.gz) = afdc9d5e38bdd16f0b8b9d9d382b0faee0b1e0494446d686a08b256446f78b5d -SIZE (bchunk-1.2.0.tar.gz) = 15078 +TIMESTAMP = 1518120975 +SHA256 (bchunk-1.2.2.tar.gz) = e7d99b5b60ff0b94c540379f6396a670210400124544fb1af985dd3551eabd89 +SIZE (bchunk-1.2.2.tar.gz) = 15359