diff -u gmime2.4-2.4.14/debian/changelog gmime2.4-2.4.14/debian/changelog --- gmime2.4-2.4.14/debian/changelog +++ gmime2.4-2.4.14/debian/changelog @@ -1,3 +1,10 @@ +gmime2.4 (2.4.14-1+nmu1) unstable; urgency=low + + * Non-maintainer upload. + * Fix a buffer overflow, CVE-2010-0409 (closes: #573877). + + -- Michael Gilbert Sun, 11 Apr 2010 16:36:33 -0400 + gmime2.4 (2.4.14-1) unstable; urgency=low * New upstream (bugfix) release diff -u gmime2.4-2.4.14/debian/patches/series gmime2.4-2.4.14/debian/patches/series --- gmime2.4-2.4.14/debian/patches/series +++ gmime2.4-2.4.14/debian/patches/series @@ -3,0 +4 @@ +CVE-2010-0409.patch only in patch2: unchanged: --- gmime2.4-2.4.14.orig/debian/patches/CVE-2010-0409.patch +++ gmime2.4-2.4.14/debian/patches/CVE-2010-0409.patch @@ -0,0 +1,12 @@ +diff -Nru -x '*.gmo' -x '*.mo' --speed-large-files --minimal gmime-2.4.14/gmime/gmime-encodings.h gmime-2.4.15/gmime/gmime-encodings.h +--- gmime-2.4.14/gmime/gmime-encodings.h 2009-04-24 02:04:47.000000000 +0000 ++++ gmime-2.4.15/gmime/gmime-encodings.h 2010-02-01 13:32:53.000000000 +0000 +@@ -91,7 +91,7 @@ + * Returns: the number of output bytes needed to uuencode an input + * buffer of size @x. + **/ +-#define GMIME_UUENCODE_LEN(x) ((size_t) (((((x) + 2) / 45) * 62) + 62)) ++#define GMIME_UUENCODE_LEN(x) ((size_t) (((((x) + 2) / 45) * 62) + 64)) + + + /**