Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-1.9.git;a=commitdiff;h=156871d2bfd8341136d7c25dd71bdd830f90de34
commit 156871d2bfd8341136d7c25dd71bdd830f90de34 Author: kikadf <[email protected]> Date: Sat Jul 19 09:09:44 2014 +0200 miniupnpc-1.7-2arcturus1-x86_64 * Fix CVE-2014-3985 diff --git a/source/network-extra/miniupnpc/CVE-2014-3985.patch b/source/network-extra/miniupnpc/CVE-2014-3985.patch new file mode 100644 index 0000000..e8a93d2 --- /dev/null +++ b/source/network-extra/miniupnpc/CVE-2014-3985.patch @@ -0,0 +1,12 @@ +diff -Naur miniupnpc-1.7/miniwget.c miniupnpc-1.7.new/miniwget.c +--- miniupnpc-1.7/miniwget.c 2012-05-01 22:11:49.000000000 +0200 ++++ miniupnpc-1.7.new/miniwget.c 2014-07-18 11:08:22.462418000 +0200 +@@ -157,7 +157,7 @@ + chunked = 1; + } + } +- while(header_buf[i]=='\r' || header_buf[i] == '\n') ++ while((i < (int)header_buf_used) && (header_buf[i]=='\r' || header_buf[i] == '\n')) + i++; + linestart = i; + colon = linestart; diff --git a/source/network-extra/miniupnpc/FrugalBuild b/source/network-extra/miniupnpc/FrugalBuild index c0c8f4d..139bdea 100644 --- a/source/network-extra/miniupnpc/FrugalBuild +++ b/source/network-extra/miniupnpc/FrugalBuild @@ -3,7 +3,7 @@ pkgname=miniupnpc pkgver=1.7 -pkgrel=1 +pkgrel=2arcturus1 pkgdesc="A small UPnP client library/tool to access Internet Gateway Devices" url="http://miniupnp.free.fr"; depends=('glibc') @@ -13,7 +13,14 @@ up2date="lynx -dump http://miniupnp.free.fr/files/ | grep -B 1 'client release s source=($url/files/$pkgname-$pkgver.tar.gz) sha1sums=('f3277c6bea0115308c47ce9a2fec7deb3b3debe1') +# FSA fix *** +source=(${source[@]} CVE-2014-3985.patch) +sha1sums=(${sha1sums[@]} 'fe07ace2493cdeb7b3189748b250b8253fb4937f') +# *********** + + build() { + Fpatchall Fcd make PREFIX="$Fdestdir/" install || Fdie Fmanrel man3/miniupnpc.3 _______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
