Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-current.git;a=commitdiff;h=f08d3b5e8c7fc6d2849e243a6ddc3064979619d9
commit f08d3b5e8c7fc6d2849e243a6ddc3064979619d9 Author: kikadf <[email protected]> Date: Wed Dec 10 10:52:09 2014 +0100 jasper-1.900.1-6-x86_64 * Fix CVE-2011-4516, CVE-2011-4517, CVE-2014-9029 diff --git a/source/xlib/jasper/CVE-2011-4516-4517.patch b/source/xlib/jasper/CVE-2011-4516-4517.patch new file mode 100644 index 0000000..774a062 --- /dev/null +++ b/source/xlib/jasper/CVE-2011-4516-4517.patch @@ -0,0 +1,31 @@ +Description: Fix for CVE-2011-4516 and CVE-2011-4517 + This patch fixes a possible denial of service and code execution via + heap-based buffer overflows. +Author: Michael Gilbert <[email protected]> +Origin: Patch thanks to Red Hat +Bug-Debian: http://bugs.debian.org/652649 + +Index: jasper-1.900.1/src/libjasper/jpc/jpc_cs.c +=================================================================== +--- jasper-1.900.1.orig/src/libjasper/jpc/jpc_cs.c 2011-12-19 09:35:34.186909298 -0500 ++++ jasper-1.900.1/src/libjasper/jpc/jpc_cs.c 2011-12-19 09:35:51.198909832 -0500 +@@ -744,6 +744,10 @@ + return -1; + } + compparms->numrlvls = compparms->numdlvls + 1; ++ if (compparms->numrlvls > JPC_MAXRLVLS) { ++ jpc_cox_destroycompparms(compparms); ++ return -1; ++ } + if (prtflag) { + for (i = 0; i < compparms->numrlvls; ++i) { + if (jpc_getuint8(in, &tmp)) { +@@ -1331,7 +1335,7 @@ + jpc_crgcomp_t *comp; + uint_fast16_t compno; + crg->numcomps = cstate->numcomps; +- if (!(crg->comps = jas_alloc2(cstate->numcomps, sizeof(uint_fast16_t)))) { ++ if (!(crg->comps = jas_alloc2(cstate->numcomps, sizeof(jpc_crgcomp_t)))) { + return -1; + } + for (compno = 0, comp = crg->comps; compno < cstate->numcomps; diff --git a/source/xlib/jasper/CVE-2014-9029.patch b/source/xlib/jasper/CVE-2014-9029.patch new file mode 100644 index 0000000..80adb0d --- /dev/null +++ b/source/xlib/jasper/CVE-2014-9029.patch @@ -0,0 +1,36 @@ +Description: CVE-2014-9029: Heap overflows in libjasper +Origin: vendor +Forwarded: no +Author: Tomas Hoger <[email protected]> +Reviewed-by: Salvatore Bonaccorso <[email protected]> +Last-Update: 2014-11-28 + +--- a/src/libjasper/jpc/jpc_dec.c ++++ b/src/libjasper/jpc/jpc_dec.c +@@ -1280,7 +1280,7 @@ static int jpc_dec_process_coc(jpc_dec_t + jpc_coc_t *coc = &ms->parms.coc; + jpc_dec_tile_t *tile; + +- if (JAS_CAST(int, coc->compno) > dec->numcomps) { ++ if (JAS_CAST(int, coc->compno) >= dec->numcomps) { + jas_eprintf("invalid component number in COC marker segment\n"); + return -1; + } +@@ -1306,7 +1306,7 @@ static int jpc_dec_process_rgn(jpc_dec_t + jpc_rgn_t *rgn = &ms->parms.rgn; + jpc_dec_tile_t *tile; + +- if (JAS_CAST(int, rgn->compno) > dec->numcomps) { ++ if (JAS_CAST(int, rgn->compno) >= dec->numcomps) { + jas_eprintf("invalid component number in RGN marker segment\n"); + return -1; + } +@@ -1355,7 +1355,7 @@ static int jpc_dec_process_qcc(jpc_dec_t + jpc_qcc_t *qcc = &ms->parms.qcc; + jpc_dec_tile_t *tile; + +- if (JAS_CAST(int, qcc->compno) > dec->numcomps) { ++ if (JAS_CAST(int, qcc->compno) >= dec->numcomps) { + jas_eprintf("invalid component number in QCC marker segment\n"); + return -1; + } diff --git a/source/xlib/jasper/FrugalBuild b/source/xlib/jasper/FrugalBuild index 1c8b13c..f2307a7 100644 --- a/source/xlib/jasper/FrugalBuild +++ b/source/xlib/jasper/FrugalBuild @@ -3,7 +3,7 @@ pkgname=jasper pkgver=1.900.1 -pkgrel=5 +pkgrel=6 pkgdesc="Jasper is a implementation of the codec specified in the JPEG-2000 Part-1 standard." url="http://www.ece.uvic.ca/~mdadams/jasper/"; up2date="lynx -dump http://www.ece.uvic.ca/~mdadams/jasper/|grep -m1 'jasper-\(.*\).zip'|sed 's/.*-\(.*\).z.*/\1/'" @@ -18,4 +18,10 @@ sha1sums=('9c5735f773922e580bf98c7c7dfda9bbed4c5191' \ 'f298566fef08c8a589d072582112cd51c72c3983' \ '1cbe124abc3c0dff101362f634c175e6a63892e7') +# FSA fix *** +source=(${source[@]} CVE-2011-4516-4517.patch CVE-2014-9029.patch) +sha1sums=(${sha1sums[@]} '120ae721defcc4f2e713296e3d5c37d6a733d63f' \ + '099d96e2d5e1a23496af58b6c7968b28f1ff469b') +# *********** + # optimization OK _______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
