Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-current.git;a=commitdiff;h=e03980565c2902789e890535fabab01fcfe34b00
commit e03980565c2902789e890535fabab01fcfe34b00 Author: Miklos Vajna <[email protected]> Date: Tue Dec 29 20:34:30 2015 +0100 libid3tag-0.15.1b-5-x86_64 - fix for CVE-2008-2109 - better later, then never, right? ;) diff --git a/source/multimedia/libid3tag/FrugalBuild b/source/multimedia/libid3tag/FrugalBuild index 8b10ae0..ca7ac79 100644 --- a/source/multimedia/libid3tag/FrugalBuild +++ b/source/multimedia/libid3tag/FrugalBuild @@ -3,7 +3,7 @@ pkgname=libid3tag pkgver=0.15.1b -pkgrel=4 +pkgrel=5 pkgdesc="ID3 tag manipulation library" _F_sourceforge_dirname="mad" Finclude sourceforge @@ -11,11 +11,14 @@ url="http://www.underbit.com/products/mad/"; depends=('zlib') groups=('multimedia') archs=('i686' 'x86_64' 'arm') -source=($source id3tag.pc) +source=($source id3tag.pc libid3tag-0.15.1b-fix_overflow.patch) sha1sums=('4d867e8a8436e73cd7762fe0e85958e35f1e4306' \ - '594921af7295980d5e96b819bb9acefab0928b4c') + '594921af7295980d5e96b819bb9acefab0928b4c' \ + 'ed80bc74bd81caa225952f72a1a28d54300e43e3') build() { Fbuild Fexe /usr/lib/pkgconfig/id3tag.pc } + +# optimization OK diff --git a/source/multimedia/libid3tag/libid3tag-0.15.1b-fix_overflow.patch b/source/multimedia/libid3tag/libid3tag-0.15.1b-fix_overflow.patch new file mode 100644 index 0000000..26c54c5 --- /dev/null +++ b/source/multimedia/libid3tag/libid3tag-0.15.1b-fix_overflow.patch @@ -0,0 +1,11 @@ +--- field.c.orig 2008-05-05 09:49:15.000000000 -0400 ++++ field.c 2008-05-05 09:49:25.000000000 -0400 +@@ -291,7 +291,7 @@ + + end = *ptr + length; + +- while (end - *ptr > 0) { ++ while (end - *ptr > 0 && **ptr != '\0') { + ucs4 = id3_parse_string(ptr, end - *ptr, *encoding, 0); + if (ucs4 == 0) + goto fail; _______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
