pool/indent
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 1105123 from home:ateixeira:branches:devel:tools

Browse Source 
- Fix memory safety issues, bsc#1214243, CVE-2023-40305:
  * fix-out-of-buffer-read-CVE-2023-40305.patch
  * fix-heap-buffer-overwrite-search_brace-CVE-2023-40305.patch

OBS-URL: https://build.opensuse.org/request/show/1105123
OBS-URL: https://build.opensuse.org/package/show/devel:tools/indent?expand=0&rev=20
This commit is contained in:
Danilo Spinella 2023-08-22 10:58:07 +00:00 committed by Git OBS Bridge
parent fdbbc62114
commit b6046b21bf
4 changed files with 8451 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4249
fix-heap-buffer-overwrite-search_brace-CVE-2023-40305.patch Normal file
View File

File diff suppressed because it is too large Load Diff

4191
fix-out-of-buffer-read-CVE-2023-40305.patch Normal file
View File

File diff suppressed because it is too large Load Diff

7
indent.changes
View File

@ -1,3 +1,10 @@
-------------------------------------------------------------------
Mon Aug 21 15:53:01 UTC 2023 - Antonio Teixeira <antonio.teixeira@suse.com>
- Fix memory safety issues, bsc#1214243, CVE-2023-40305:
* fix-out-of-buffer-read-CVE-2023-40305.patch
* fix-heap-buffer-overwrite-search_brace-CVE-2023-40305.patch
-------------------------------------------------------------------
Fri Mar 24 20:45:47 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>

5
indent.spec
View File

@ -26,6 +26,9 @@ URL: https://www.gnu.org/software/indent
Source0: ftp://ftp.gnu.org/gnu/%{name}/%{name}-%{version}.tar.xz
Source1: ftp://ftp.gnu.org/gnu/%{name}/%{name}-%{version}.tar.xz.sig
Source2: https://savannah.gnu.org/people/viewgpg.php?user_id=94096#/%{name}.keyring
# PATCH-FIX-SECURITY fix-out-of-buffer-read-CVE-2023-40305.patch fix-heap-buffer-overwrite-search_brace-CVE-2023-40305 bsc#1214243 CVE-2023-40305 antonio.teixeira@suse.com -- indent: heap-based buffer overflow in search_brace() in indent.c via a crafted file
Patch0: fix-out-of-buffer-read-CVE-2023-40305.patch
Patch1: fix-heap-buffer-overwrite-search_brace-CVE-2023-40305.patch
BuildRequires: makeinfo
BuildRequires: texi2html
@ -38,7 +41,7 @@ incomplete and malformed syntax.
%lang_package
%prep
%autosetup
%autosetup -p1
%build
%configure \