Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-1.9.git;a=commitdiff;h=392a9fe4fed5ef2a33cf6fc6a7cf6c44221556f6
commit 392a9fe4fed5ef2a33cf6fc6a7cf6c44221556f6 Author: kikadf <[email protected]> Date: Fri Dec 12 10:25:29 2014 +0100 links-2.7-2arcturus1-x86_64 * Fix CVE-2013-6050 diff --git a/source/network-extra/links/CVE-2013-6050.diff b/source/network-extra/links/CVE-2013-6050.diff new file mode 100644 index 0000000..d85c250 --- /dev/null +++ b/source/network-extra/links/CVE-2013-6050.diff @@ -0,0 +1,17 @@ +Description: Fix integer overflow in graphics mode (CVE-2013-6050) +Author: Mikulas Patocka <[email protected]> +Bug-CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6050 + +Index: links-2.7/html_tbl.c +=================================================================== +--- links-2.7.orig/html_tbl.c 2013-11-22 01:57:29.000000000 +0100 ++++ links-2.7/html_tbl.c 2013-11-22 01:58:30.000000000 +0100 +@@ -1550,6 +1550,8 @@ static void add_to_rect_sets(struct rect + static void add_to_cell_sets(struct table_cell ****s, int **nn, int *n, struct rect *r, struct table_cell *c) + { + int i, j; ++ if (r->y1 < 0 || r->y2 < 0) ++ fatal_exit("add_to_cell_sets: integer overflow: %d, %d", r->y1, r->y2); + for (i = r->y1 >> RECT_BOUND_BITS; i <= (r->y2 - 1) >> RECT_BOUND_BITS; i++) { + if (i >= *n) { + struct table_cell ***ns; diff --git a/source/network-extra/links/FrugalBuild b/source/network-extra/links/FrugalBuild index 75030d7..9ee3c75 100644 --- a/source/network-extra/links/FrugalBuild +++ b/source/network-extra/links/FrugalBuild @@ -3,7 +3,7 @@ pkgname=links pkgver=2.7 -pkgrel=1 +pkgrel=2arcturus1 pkgdesc="A web browser running in both graphics and text mode." url="http://links.twibright.com/"; depends=('libpng>=1.4.2' 'libjpeg>=8b' 'libtiff' 'openssl>=1.0.0' 'gpm>=1.20.5-2' 'ncurses') @@ -13,7 +13,13 @@ _F_archive_grepv="pre" up2date="Flasttar $url/download/" source=($url/download/$pkgname-$pkgver.tar.bz2) Fconfopts+=" --enable-javascript --enable-graphics --without-x" - sha1sums=('1e362a7e27078d630edf5868145a46247cda8cc3') + +# FSA fix *** +source=(${source[@]} CVE-2013-6050.diff) +sha1sums=(${sha1sums[@]} '40f07d188d5e7f8f9bfbadaa8bcc081eb6ce03ed') +# *********** + + # optimization OK _______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
