- Add patch 0004-overflow-processing-long-words.patch to fix a new buffer overflow identified together with bsc#992966. - Relabel patches: cracklib-magic.diff -> 0001-cracklib-magic.diff cracklib-2.9.2-visibility.patch -> 0002-cracklib-2.9.2-visibility.patch - Add patch 0003-overflow-processing-gecos.patch to fix a buffer overflow in GECOS parser (bsc#992966 CVE-2016-6318) OBS-URL: https://build.opensuse.org/request/show/419768 OBS-URL: https://build.opensuse.org/package/show/Base:System/cracklib?expand=0&rev=44
18 lines
584 B
Diff
18 lines
584 B
Diff
Index: doc/cracklib.magic
|
|
===================================================================
|
|
--- doc/cracklib.magic.orig
|
|
+++ doc/cracklib.magic
|
|
@@ -1,10 +1,5 @@
|
|
# cracklib: file (1) magic for cracklib v2.7
|
|
0 lelong 0x70775631 Cracklib password index, little endian
|
|
->4 long >0 (%i words)
|
|
->4 long 0 ("64-bit")
|
|
->>8 long >-1 (%i words)
|
|
+>4 lelong >0 (%i words)
|
|
0 belong 0x70775631 Cracklib password index, big endian
|
|
->4 belong >-1 (%i words)
|
|
-0 long 0
|
|
->4 belong 0x70775631 Cracklib password index, big endian ("64-bit")
|
|
->12 belong >0 (%i words)
|
|
+>4 belong >0 (%i words)
|