Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-current.git;a=commitdiff;h=ebfb9451deadac756b646ec44a328e767808c626
commit ebfb9451deadac756b646ec44a328e767808c626 Author: kikadf <[email protected]> Date: Fri Dec 12 09:52:24 2014 +0100 graphviz-2.38.0-4-x86_64 * Fix CVE-2014-9157 diff --git a/source/xapps-extra/graphviz/CVE-2014-9157.patch b/source/xapps-extra/graphviz/CVE-2014-9157.patch new file mode 100644 index 0000000..4a3feeb --- /dev/null +++ b/source/xapps-extra/graphviz/CVE-2014-9157.patch @@ -0,0 +1,21 @@ +Subject: Fix format string vulnerability (CVE-2014-9157) in yyerror() routine +Origin: https://github.com/ellson/graphviz/commit/99eda421f7ddc27b14e4ac1d2126e5fe41719081 +Author: Emden R. Gansner + +--- + lib/cgraph/scan.l | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +Index: b/lib/cgraph/scan.l +=================================================================== +--- a/lib/cgraph/scan.l ++++ b/lib/cgraph/scan.l +@@ -225,7 +225,7 @@ + agxbput (&xb, buf); + agxbput (&xb, yytext); + agxbput (&xb,"'\n"); +- agerr(AGERR,agxbuse(&xb)); ++ agerr(AGERR, "%s", agxbuse(&xb)); + agxbfree(&xb); + } + /* must be here to see flex's macro defns */ diff --git a/source/xapps-extra/graphviz/FrugalBuild b/source/xapps-extra/graphviz/FrugalBuild index a272756..e0e563c 100644 --- a/source/xapps-extra/graphviz/FrugalBuild +++ b/source/xapps-extra/graphviz/FrugalBuild @@ -6,7 +6,7 @@ options+=('asneeded') pkgname=graphviz pkgver=2.38.0 -pkgrel=3 +pkgrel=4 pkgdesc="Open Source Graph Visualization Software" url="http://www.graphviz.org/"; depends=('libxml2>=2.7.8' 'fontconfig' 'python>=2.7' 'libjpeg>=8a' 'libpng>=1.4.1' 'ruby>=2.1.2' 'libtool' 'tk>=8.6' \ @@ -19,6 +19,12 @@ up2date="lynx -dump http://www.graphviz.org/pub/graphviz/ARCHIVE/|grep 'graphviz source=(http://www.graphviz.org/pub/graphviz/ARCHIVE/$pkgname-$pkgver.tar.gz) sha1sums=('053c771278909160916ca5464a0a98ebf034c6ef') +# FSA fix *** +source=(${source[@]} CVE-2014-9157.patch) +sha1sums=(${sha1sums[@]} 'cad7a74b346df9f5900edbf9c0485f7899188641') +# *********** + + build() { Fbuild --enable-static \ --with-x \ _______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
