OBS User unknown 2007-08-09 16:27:19 +00:00 committed by Git OBS Bridge
parent faeeb2e5c8
commit d8f3723224
3 changed files with 25 additions and 1 deletions

View File

@ -0,0 +1,15 @@
--- cups-1.2.7/pdftops/Stream.cxx.orig 2006-02-13 04:08:11.000000000 +0100
+++ cups-1.2.7/pdftops/Stream.cxx 2007-08-06 16:45:54.000000000 +0200
@@ -412,9 +412,9 @@
nVals = width * nComps;
if (width <= 0 || nComps <= 0 || nBits <= 0 ||
- nComps >= INT_MAX / nBits ||
- width >= INT_MAX / nComps / nBits ||
- nVals * nBits + 7 < 0) {
+ nComps >= 4 || nBits > 16 ||
+ width >= INT_MAX / nComps ||
+ nVals >= (INT_MAX - 7) / nBits) {
return;
}
pixBytes = (nComps * nBits + 7) >> 3;

View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Mon Aug 6 17:46:56 CEST 2007 - kssingvo@suse.de
- fix for xpdf bugzilla#291690, CVE-2007-3387, swamp-11865
-------------------------------------------------------------------
Mon Jul 30 15:41:27 CEST 2007 - kssingvo@suse.de

View File

@ -17,7 +17,7 @@ License: GPL v2 or later, individual distribution permission.
Group: Hardware/Printing
Summary: The Common UNIX Printing System
Version: 1.2.12
Release: 3
Release: 6
Requires: cups-libs = %{version}, cups-client = %{version}
Requires: ghostscript_any, ghostscript-fonts-std, foomatic-filters
Requires: util-linux
@ -52,6 +52,7 @@ Patch14: cups-1.1.21-testppd_duplex.patch
Patch15: cups-1.2.11-testppd_filename.patch
Patch16: cups-1.2.5-desktop_file.patch
Patch17: cups-1.2.6-lppasswd_permission.patch
Patch18: cups-1.2.7-xpdf_CVE_2007_3387.patch
Patch100: cups-1.1.23-testpage.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
%if %suse_version >= 801
@ -144,6 +145,7 @@ Authors:
%patch15 -p1
%patch16 -p1
%patch17 -p1
%patch18 -p1
if [ -f /.buildenv ]; then
. /.buildenv
else
@ -381,6 +383,8 @@ install -m 644 %{SOURCE17} $RPM_BUILD_ROOT/etc/sysconfig/SuSEfirewall2.d/service
%{_datadir}/locale/*/cups_*
%changelog
* Mon Aug 06 2007 - kssingvo@suse.de
- fix for xpdf bugzilla#291690, CVE-2007-3387, swamp-11865
* Mon Jul 30 2007 - kssingvo@suse.de
- upgrade to cups-1.2.12:
* The PHP cups_print_file() function crashed if the options array