Index: head/security/p5-Crypt-OpenPGP/files/patch-CVE-2005-0366 =================================================================== --- head/security/p5-Crypt-OpenPGP/files/patch-CVE-2005-0366 (revision 479410) +++ head/security/p5-Crypt-OpenPGP/files/patch-CVE-2005-0366 (nonexistent) @@ -1,13 +0,0 @@ ---- lib/Crypt/OpenPGP/Ciphertext.pm.orig Tue Apr 10 15:51:46 2007 -+++ lib/Crypt/OpenPGP/Ciphertext.pm Tue Apr 10 15:52:03 2007 -@@ -87,8 +87,8 @@ sub decrypt { - my $padlen = $cipher->blocksize + 2; - my $pt = $enc->{prefix} = - $cipher->decrypt(substr $enc->{ciphertext}, 0, $padlen); -- return $enc->error("Bad checksum") -- unless substr($pt, -4, 2) eq substr($pt, -2, 2); -+ # return $enc->error("Bad checksum") -+ # unless substr($pt, -4, 2) eq substr($pt, -2, 2); - $cipher->sync unless $enc->{is_mdc}; - $pt = $cipher->decrypt(substr $enc->{ciphertext}, $padlen); - if ($enc->{is_mdc}) { Property changes on: head/security/p5-Crypt-OpenPGP/files/patch-CVE-2005-0366 ___________________________________________________________________ Deleted: fbsd:nokeywords ## -1 +0,0 ## -yes \ No newline at end of property Deleted: svn:eol-style ## -1 +0,0 ## -native \ No newline at end of property Deleted: svn:mime-type ## -1 +0,0 ## -text/plain \ No newline at end of property Index: head/security/p5-Crypt-OpenPGP/files/patch-lib_Crypt_OpenPGP_Ciphertext.pm =================================================================== --- head/security/p5-Crypt-OpenPGP/files/patch-lib_Crypt_OpenPGP_Ciphertext.pm (nonexistent) +++ head/security/p5-Crypt-OpenPGP/files/patch-lib_Crypt_OpenPGP_Ciphertext.pm (revision 479411) @@ -0,0 +1,17 @@ +Patch for CVE-2005-0366: plaintext recovery using checksum failure oracle. + +https://nvd.nist.gov/vuln/detail/CVE-2005-0366 + +--- lib/Crypt/OpenPGP/Ciphertext.pm.orig 2009-12-11 00:05:35 UTC ++++ lib/Crypt/OpenPGP/Ciphertext.pm +@@ -85,8 +85,8 @@ sub decrypt { + my $padlen = $cipher->blocksize + 2; + my $pt = $enc->{prefix} = + $cipher->decrypt(substr $enc->{ciphertext}, 0, $padlen); +- return $enc->error("Bad checksum") +- unless substr($pt, -4, 2) eq substr($pt, -2, 2); ++ # return $enc->error("Bad checksum") ++ # unless substr($pt, -4, 2) eq substr($pt, -2, 2); + $cipher->sync unless $enc->{is_mdc}; + $pt = $cipher->decrypt(substr $enc->{ciphertext}, $padlen); + if ($enc->{is_mdc}) { Property changes on: head/security/p5-Crypt-OpenPGP/files/patch-lib_Crypt_OpenPGP_Ciphertext.pm ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property