Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package evolution-ews for openSUSE:Factory checked in at 2021-03-24 16:09:38 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/evolution-ews (Old) and /work/SRC/openSUSE:Factory/.evolution-ews.new.2401 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "evolution-ews" Wed Mar 24 16:09:38 2021 rev:110 rq:879957 version:3.38.4 Changes: -------- --- /work/SRC/openSUSE:Factory/evolution-ews/evolution-ews.changes 2021-02-18 20:49:50.463293496 +0100 +++ /work/SRC/openSUSE:Factory/.evolution-ews.new.2401/evolution-ews.changes 2021-03-24 16:09:42.179734416 +0100 @@ -1,0 +2,6 @@ +Wed Mar 3 19:46:04 UTC 2021 - Michael Gorse <mgo...@suse.com> + +- Add evolution-ews-boo1182882.patch: fix buffer overrun when + parsing base64 data (boo#1182882). + +------------------------------------------------------------------- New: ---- evolution-ews-boo1182882.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ evolution-ews.spec ++++++ --- /var/tmp/diff_new_pack.eoPACL/_old 2021-03-24 16:09:42.691734954 +0100 +++ /var/tmp/diff_new_pack.eoPACL/_new 2021-03-24 16:09:42.691734954 +0100 @@ -27,6 +27,8 @@ Group: Productivity/Networking/Email/Clients URL: https://wiki.gnome.org/Apps/Evolution Source0: https://download.gnome.org/sources/evolution-ews/3.38/%{name}-%{version}.tar.xz +# PATCH-FIX-UPSTREAM evolution-ews-boo1182882.patch boo#1182882 mgo...@suse.com -- fix buffer overrun when decoding base64 data. +Patch0: evolution-ews-boo1182882.patch BuildRequires: c++_compiler BuildRequires: cmake ++++++ evolution-ews-boo1182882.patch ++++++ >From 5eba0627725352ef9978d9c0a91e5d0bd13a3789 Mon Sep 17 00:00:00 2001 From: Milan Crha <mc...@redhat.com> Date: Tue, 2 Mar 2021 12:28:09 +0100 Subject: [PATCH] Allocate large-enough buffer for g_base64_decode_step() --- src/EWS/common/e-soap-message.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/EWS/common/e-soap-message.c b/src/EWS/common/e-soap-message.c index e559f851..434c19af 100644 --- a/src/EWS/common/e-soap-message.c +++ b/src/EWS/common/e-soap-message.c @@ -248,7 +248,7 @@ soap_sax_characters (gpointer _ctxt, g_warning ("Failed to write streaming data to file"); } } else { - guchar *bdata = g_malloc (len); + guchar *bdata = g_malloc ((len * 3 / 4) + 3); gsize blen; blen = g_base64_decode_step ( -- 2.30.1
