Bug#876019: jessie-pu: package libwpd/0.10.0-2+deb8u1

[Adam D. Barratt]

Control: tags -1 + pending

On Sat, 2017-11-18 at 22:25 +0100, Rene Engelhard wrote:
> Hi,
> 
> On Sat, Nov 18, 2017 at 06:57:20PM +, Adam D. Barratt wrote:
> > On Sun, 2017-09-17 at 15:19 +0200, Rene Engelhard wrote:
> > > See http://bugs.debian.org/876001. CVE classified as no-dsa
> > > (minor
> > > issue).
> > > 
> > 
> > Please go ahead; sorry for the delay.
> 
> uploaded.
> 

Flagged for acceptance.

Regards,

Adam

Processed: Re: Bug#876019: jessie-pu: package libwpd/0.10.0-2+deb8u1

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + pending
Bug #876019 [release.debian.org] jessie-pu: package libwpd/0.10.0-2+deb8u1
Added tag(s) pending.

-- 
876019: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876019
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#876019: jessie-pu: package libwpd/0.10.0-2+deb8u1

[Rene Engelhard]

Hi,

On Sat, Nov 18, 2017 at 06:57:20PM +, Adam D. Barratt wrote:
> On Sun, 2017-09-17 at 15:19 +0200, Rene Engelhard wrote:
> > See http://bugs.debian.org/876001. CVE classified as no-dsa (minor
> > issue).
> > 
> 
> Please go ahead; sorry for the delay.

uploaded.

Regards,

Rene

Bug#876019: jessie-pu: package libwpd/0.10.0-2+deb8u1

[Adam D. Barratt]

Control: tags -1 + confirmed

On Sun, 2017-09-17 at 15:19 +0200, Rene Engelhard wrote:
> See http://bugs.debian.org/876001. CVE classified as no-dsa (minor
> issue).
> 

Please go ahead; sorry for the delay.

Regards,

Adam

Processed: Re: Bug#876019: jessie-pu: package libwpd/0.10.0-2+deb8u1

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + confirmed
Bug #876019 [release.debian.org] jessie-pu: package libwpd/0.10.0-2+deb8u1
Added tag(s) confirmed.

-- 
876019: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876019
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#876019: jessie-pu: package libwpd/0.10.0-2+deb8u1

[Rene Engelhard]

Package: release.debian.org
Severity: normal
Tags: jessie
User: release.debian@packages.debian.org
Usertags: pu

Hi,

See http://bugs.debian.org/876001. CVE classified as no-dsa (minor issue).

Salvatore writes:

"Sicne the point releases are approaching, can you shedule the fixes
since already prepared in the next point release?"

So here I am.

Debdiff attached.

Regards,

Rene
-- System Information:
Debian Release: 8.9
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: armhf (armv7l)

Kernel: Linux 3.18.0-trunk-rpi2 (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
diff -Nru libwpd-0.10.0/debian/changelog libwpd-0.10.0/debian/changelog
--- libwpd-0.10.0/debian/changelog  2014-08-08 00:36:00.0 +0200
+++ libwpd-0.10.0/debian/changelog  2017-09-17 13:20:30.0 +0200
@@ -1,3 +1,10 @@
+libwpd (0.10.0-2+deb8u1) jessie; urgency=medium
+
+  * debian/patches/libwpd-tdf112269.diff: backport patch to fix
+CVE-2017-14226 (closes: #876001)
+
+ -- Rene Engelhard   Sun, 17 Sep 2017 13:20:30 +0200
+
 libwpd (0.10.0-2) unstable; urgency=low
 
   * upload to unstable
diff -Nru libwpd-0.10.0/debian/patches/libwpd-tdf112269.diff 
libwpd-0.10.0/debian/patches/libwpd-tdf112269.diff
--- libwpd-0.10.0/debian/patches/libwpd-tdf112269.diff  1970-01-01 
01:00:00.0 +0100
+++ libwpd-0.10.0/debian/patches/libwpd-tdf112269.diff  2017-09-17 
13:20:30.0 +0200
@@ -0,0 +1,43 @@
+--- libwpd/src/lib/WP5StylesListener.cpp
 libwpd/src/lib/WP5StylesListener.cpp
+@@ -85,8 +85,9 @@
+   m_currentPage = WPXPageSpan(m_pageList.back(), 0.0, 0.0);
+   m_currentPage.setPageSpan(1);
+ 
+-  for (std::vector::const_iterator HFiter = 
(m_nextPage.getHeaderFooterList()).begin();
+-  HFiter != (m_nextPage.getHeaderFooterList()).end(); 
++HFiter)
++  std::vector headerFooterList = 
m_nextPage.getHeaderFooterList();
++  for (std::vector::const_iterator HFiter = 
headerFooterList.begin();
++  HFiter != headerFooterList.end(); ++HFiter)
+   {
+   if ((*HFiter).getOccurrence() != NEVER)
+   {
+--- libwpd/src/lib/WP42StylesListener.cpp
 libwpd/src/lib/WP42StylesListener.cpp
+@@ -84,8 +84,9 @@
+   m_currentPage = WPXPageSpan(m_pageList.back(), 0.0, 
0.0);
+   m_currentPage.setPageSpan(1);
+ 
+-  for (std::vector::const_iterator 
HFiter = (m_nextPage.getHeaderFooterList()).begin();
+-  HFiter != 
(m_nextPage.getHeaderFooterList()).end(); ++HFiter)
++  std::vector headerFooterList = 
m_nextPage.getHeaderFooterList();
++  for (std::vector::const_iterator 
HFiter = headerFooterList.begin();
++  HFiter != headerFooterList.end(); ++HFiter)
+   {
+   if ((*HFiter).getOccurrence() != NEVER)
+   {
+--- libwpd/src/lib/WP1StylesListener.cpp
 libwpd/src/lib/WP1StylesListener.cpp
+@@ -83,8 +83,9 @@
+   m_currentPage = WPXPageSpan(m_pageList.back(), 0.0, 
0.0);
+   m_currentPage.setPageSpan(1);
+ 
+-  for (std::vector::const_iterator 
HFiter = (m_nextPage.getHeaderFooterList()).begin();
+-  HFiter != 
(m_nextPage.getHeaderFooterList()).end(); ++HFiter)
++  std::vector headerFooterList = 
m_nextPage.getHeaderFooterList();
++  for (std::vector::const_iterator 
HFiter = headerFooterList.begin();
++  HFiter != headerFooterList.end(); ++HFiter)
+   {
+   if ((*HFiter).getOccurrence() != NEVER)
+   {
+
diff -Nru libwpd-0.10.0/debian/patches/series 
libwpd-0.10.0/debian/patches/series
--- libwpd-0.10.0/debian/patches/series 1970-01-01 01:00:00.0 +0100
+++ libwpd-0.10.0/debian/patches/series 2017-09-17 13:20:30.0 +0200
@@ -0,0 +1 @@
+libwpd-tdf112269.diff