File tcpdump-CVE-2018-10103.patch of Package tcpdump.17077
Index: tcpdump-4.9.2/configure
===================================================================
--- tcpdump-4.9.2.orig/configure
+++ tcpdump-4.9.2/configure
@@ -1329,7 +1329,7 @@ Optional Features:
--disable-FEATURE do not include FEATURE (same as --enable-FEATURE=no)
--enable-FEATURE[=ARG] include FEATURE [ARG=yes]
--disable-universal don't build universal on OS X
- --enable-smb enable possibly-buggy SMB printer default=yes
+ --enable-smb enable possibly-buggy SMB printer default=no
--disable-smb disable possibly-buggy SMB printer
Optional Packages:
@@ -4492,14 +4492,12 @@ $as_echo_n "checking whether to enable t
if test "${enable_smb+set}" = set; then :
enableval=$enable_smb;
else
- enableval=yes
+ enableval=no
fi
case "$enableval" in
yes) { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
$as_echo "yes" >&6; }
- { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: The SMB printer may have exploitable buffer overflows!!!" >&5
-$as_echo "$as_me: WARNING: The SMB printer may have exploitable buffer overflows!!!" >&2;}
$as_echo "#define ENABLE_SMB 1" >>confdefs.h
Index: tcpdump-4.9.2/configure.in
===================================================================
--- tcpdump-4.9.2.orig/configure.in
+++ tcpdump-4.9.2/configure.in
@@ -171,10 +171,9 @@ AC_MSG_CHECKING([whether to enable the p
AC_ARG_ENABLE(smb,
[ --enable-smb enable possibly-buggy SMB printer [default=yes]
--disable-smb disable possibly-buggy SMB printer],,
- enableval=yes)
+ enableval=no)
case "$enableval" in
yes) AC_MSG_RESULT(yes)
- AC_WARN([The SMB printer may have exploitable buffer overflows!!!])
AC_DEFINE(ENABLE_SMB, 1,
[define if you want to build the possibly-buggy SMB printer])
LOCALSRC="print-smb.c smbutil.c $LOCALSRC"