Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=mcirstabumps.git;a=commitdiff;h=cb6f5b63f9d853c4f1c2a2ec42ce54ebc09a519f
commit cb6f5b63f9d853c4f1c2a2ec42ce54ebc09a519f Author: Marius Cirsta <[email protected]> Date: Tue Jan 28 22:12:40 2014 +0200 libxfont-1.4.7-1-x86_64 * version bump diff --git a/source/x11/libxfont/CVE-2013-XXXX-unlimited-sscanf-can-overflow-stack-bu.patch b/source/x11/libxfont/CVE-2013-XXXX-unlimited-sscanf-can-overflow-stack-bu.patch deleted file mode 100644 index 96d2083..0000000 --- a/source/x11/libxfont/CVE-2013-XXXX-unlimited-sscanf-can-overflow-stack-bu.patch +++ /dev/null @@ -1,31 +0,0 @@ -From b07483b605e77ea475b97d5dc829a7d5eb10a5d6 Mon Sep 17 00:00:00 2001 -From: Alan Coopersmith <[email protected]> -Date: Mon, 23 Dec 2013 18:34:02 -0800 -Subject: [PATCH:libXfont 1/2] CVE-2013-XXXX: unlimited sscanf can overflow - stack buffer in bdfReadCharacters() - -Fixes cppcheck warning: - [lib/libXfont/src/bitmap/bdfread.c:341]: (warning) - scanf without field width limits can crash with huge input data. - -Signed-off-by: Alan Coopersmith <[email protected]> ---- - src/bitmap/bdfread.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/src/bitmap/bdfread.c b/src/bitmap/bdfread.c -index e2770dc..e11c5d2 100644 ---- a/src/bitmap/bdfread.c -+++ b/src/bitmap/bdfread.c -@@ -338,7 +338,7 @@ bdfReadCharacters(FontFilePtr file, FontPtr pFont, bdfFileState *pState, - char charName[100]; - int ignore; - -- if (sscanf((char *) line, "STARTCHAR %s", charName) != 1) { -+ if (sscanf((char *) line, "STARTCHAR %99s", charName) != 1) { - bdfError("bad character name in BDF file\n"); - goto BAILOUT; /* bottom of function, free and return error */ - } --- -1.7.9.2 - diff --git a/source/x11/libxfont/FrugalBuild b/source/x11/libxfont/FrugalBuild index 634dc55..34edd91 100644 --- a/source/x11/libxfont/FrugalBuild +++ b/source/x11/libxfont/FrugalBuild @@ -1,10 +1,12 @@ # Compiling Time: 0.44 SBU # Maintainer: bouleetbil <[email protected]> +options+=('asneeded') + pkgname=libxfont _F_xorg_name=libXfont -pkgver=1.4.5 -pkgrel=2 +pkgver=1.4.7 +pkgrel=1 pkgdesc="X font Library" url="http://xorg.freedesktop.org"; groups=('x11' 'xorg-core' 'xorg-libs') @@ -12,14 +14,9 @@ archs=('i686' 'x86_64' 'arm') depends=('xtrans>=1.2.3' 'libfontenc>=1.0.4-4' 'xproto>=7.0.15' 'fontsproto' 'freetype2') makedepends=('pkgconfig' 'fontcacheproto') Finclude xorg +sha1sums=('77f60d0a2190cb36c07c2217693f46d5e8942ca2') Fconfopts+=" --enable-fc \ --enable-freetype --enable-pcfformat --enable-bdfformat --enable-snfformat" -sha1sums=('0bf3cb8aa192ab96bbaf384d1a4a00d15a40171e') - -# *** FSA fix *** -source=(${source[@]} CVE-2013-XXXX-unlimited-sscanf-can-overflow-stack-bu.patch) -sha1sums=(${sha1sums[@]} "222b3f598e5409209f72521896f36c8333c82a9e") -# *************** - # optimization OK + _______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
