Hello community,

here is the log from the commit of package libmwaw for openSUSE:Factory checked 
in at 2017-07-04 11:52:44
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/libmwaw (Old)
 and      /work/SRC/openSUSE:Factory/.libmwaw.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "libmwaw"

Tue Jul  4 11:52:44 2017 rev:20 rq:506938 version:0.3.11

Changes:
--------
--- /work/SRC/openSUSE:Factory/libmwaw/libmwaw.changes  2017-06-01 
16:28:45.472766268 +0200
+++ /work/SRC/openSUSE:Factory/.libmwaw.new/libmwaw.changes     2017-07-04 
11:52:46.424827542 +0200
@@ -1,0 +2,5 @@
+Thu Jun 29 07:43:48 UTC 2017 - [email protected]
+
+- Add patch CVE-2017-9433.patch fixing bsc#1042828 CVE-2017-9433
+
+-------------------------------------------------------------------

New:
----
  CVE-2017-9433.patch

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ libmwaw.spec ++++++
--- /var/tmp/diff_new_pack.fhP3gB/_old  2017-07-04 11:52:47.128728481 +0200
+++ /var/tmp/diff_new_pack.fhP3gB/_new  2017-07-04 11:52:47.128728481 +0200
@@ -25,6 +25,7 @@
 Group:          Productivity/Publishing/Word
 Url:            http://sourceforge.net/p/libmwaw/wiki/Home/
 Source:         http://dev-www.libreoffice.org/src/%{name}-%{version}.tar.xz
+Patch0:         CVE-2017-9433.patch
 BuildRequires:  doxygen
 BuildRequires:  fdupes
 BuildRequires:  gcc-c++
@@ -33,7 +34,6 @@
 BuildRequires:  xz
 BuildRequires:  pkgconfig(librevenge-0.0)
 BuildRequires:  pkgconfig(zlib)
-BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 %if 0%{?suse_version} > 1325
 BuildRequires:  libboost_headers-devel
 %else
@@ -76,6 +76,7 @@
 
 %prep
 %setup -q
+%patch0 -p1
 # doxygen needles rebuild
 sed -i \
        -e 's:on $datetime::g' \

++++++ CVE-2017-9433.patch ++++++
>From 68b3b74569881248bfb6cbb4266177cc253b292f Mon Sep 17 00:00:00 2001
From: David Tardon <[email protected]>
Date: Sat, 8 Apr 2017 14:03:29 +0200
Subject: [PATCH] ofz#1037 resize vector correctly

---
 src/lib/MsWrd1Parser.cxx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/lib/MsWrd1Parser.cxx b/src/lib/MsWrd1Parser.cxx
index 63547e6..3626064 100644
--- a/src/lib/MsWrd1Parser.cxx
+++ b/src/lib/MsWrd1Parser.cxx
@@ -902,7 +902,7 @@ bool MsWrd1Parser::readFootnoteCorrespondance(MWAWVec2i 
limits)
     int id = fIt++->second;
     fPos[1] = fIt==footnoteMap.end() ? m_state->m_eot : fIt->first;
     if (id >= int(m_state->m_footnotesList.size()))
-      m_state->m_footnotesList.resize(size_t(id),MWAWVec2l(0,0));
+      m_state->m_footnotesList.resize(size_t(id)+1,MWAWVec2l(0,0));
     m_state->m_footnotesList[size_t(id)]=fPos;
   }
   ascii().addDelimiter(input->tell(),'|');
-- 
2.13.0


Reply via email to