Hello community, here is the log from the commit of package taglib for openSUSE:Factory checked in at 2018-11-26 10:15:44 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/taglib (Old) and /work/SRC/openSUSE:Factory/.taglib.new.19453 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "taglib" Mon Nov 26 10:15:44 2018 rev:51 rq:648926 version:1.11.1 Changes: -------- --- /work/SRC/openSUSE:Factory/taglib/taglib.changes 2018-06-13 15:15:53.944323281 +0200 +++ /work/SRC/openSUSE:Factory/.taglib.new.19453/taglib.changes 2018-11-26 10:15:49.370047685 +0100 @@ -1,0 +2,6 @@ +Tue Nov 13 22:29:57 UTC 2018 - Jonas Kvinge <[email protected]> + +- Add patch to fix Ogg corruption: + * taglib-fix-ogg.patch + +------------------------------------------------------------------- New: ---- taglib-fix-ogg.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ taglib.spec ++++++ --- /var/tmp/diff_new_pack.LpJTeA/_old 2018-11-26 10:15:50.022046921 +0100 +++ /var/tmp/diff_new_pack.LpJTeA/_new 2018-11-26 10:15:50.026046917 +0100 @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # @@ -29,6 +29,7 @@ # PATCH-FIX-SECURITY taglib-CVE-2017-12678.patch bsc1052699 CVE-2017-12678 [email protected] -- Prevent denial of service. Patch0: taglib-CVE-2017-12678.patch Patch1: taglib-CVE-2018-11439.patch +Patch2: taglib-fix-ogg.patch BuildRequires: cmake >= 2.8 BuildRequires: doxygen BuildRequires: fdupes @@ -94,6 +95,7 @@ %setup -q %patch0 -p1 %patch1 -p1 +%patch2 -p1 %build %cmake \ ++++++ taglib-fix-ogg.patch ++++++ >From 9336c82da3a04552168f208cd7a5fa4646701ea4 Mon Sep 17 00:00:00 2001 From: Tsuda Kageyu <[email protected]> Date: Thu, 1 Dec 2016 11:32:01 +0900 Subject: [PATCH] Fix possible Ogg packet losses. --- taglib/ogg/oggfile.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/taglib/ogg/oggfile.cpp b/taglib/ogg/oggfile.cpp index 86b0b076..c36e4d46 100644 --- a/taglib/ogg/oggfile.cpp +++ b/taglib/ogg/oggfile.cpp @@ -253,7 +253,7 @@ void Ogg::File::writePacket(unsigned int i, const ByteVector &packet) ByteVectorList packets = firstPage->packets(); packets[i - firstPage->firstPacketIndex()] = packet; - if(firstPage != lastPage && lastPage->packetCount() > 2) { + if(firstPage != lastPage && lastPage->packetCount() > 1) { ByteVectorList lastPagePackets = lastPage->packets(); lastPagePackets.erase(lastPagePackets.begin()); packets.append(lastPagePackets); -- 2.19.1
