From 9ae545fad8685e2da94fa2535237aeadcdd851054d781705416a91c1a4cad5a6 Mon Sep 17 00:00:00 2001 From: Bernhard Voelker Date: Sat, 26 Jan 2013 19:35:28 +0000 Subject: [PATCH] - Add CVE numbers to changelog: CVE-2013-0221, CVE-2013-0222, CVE-2013-0223 OBS-URL: https://build.opensuse.org/package/show/Base:System/coreutils?expand=0&rev=176 --- coreutils-testsuite.changes | 8 +++++--- coreutils.changes | 8 +++++--- 2 files changed, 10 insertions(+), 6 deletions(-) diff --git a/coreutils-testsuite.changes b/coreutils-testsuite.changes index 189eb4c..699810a 100644 --- a/coreutils-testsuite.changes +++ b/coreutils-testsuite.changes @@ -1,20 +1,22 @@ ------------------------------------------------------------------- Sun Jan 20 13:18:28 UTC 2013 - mail@bernhard-voelker.de -- Avoid segmentation fault in "join -i" with long line input (bnc#798541, VUL-1) +- Avoid segmentation fault in "join -i" with long line input + (bnc#798541, VUL-1, CVE-2013-0223) * src/join.c: Instead of usig unreliable alloca() stack allocation, use heap allocation via xmalloc()+free(). (coreutils-i18n.patch, from Philipp Thomas ) - Avoid segmentation fault in "sort -d" and "sort -M" with long line input - (bnc#798538, VUL-1) + (bnc#798538, VUL-1, CVE-2013-0221) * src/sort.c: Instead of usig unreliable alloca() stack allocation, use heap allocation via xmalloc()+free(). (coreutils-i18n.patch, from Philipp Thomas ) -- Avoid segmentation fault in "uniq" with long line input (bnc#796243, VUL-1) +- Avoid segmentation fault in "uniq" with long line input + (bnc#796243, VUL-1, CVE-2013-0222) * src/cut.c: Instead of usig unreliable alloca() stack allocation, use heap allocation via xmalloc()+free(). diff --git a/coreutils.changes b/coreutils.changes index 189eb4c..699810a 100644 --- a/coreutils.changes +++ b/coreutils.changes @@ -1,20 +1,22 @@ ------------------------------------------------------------------- Sun Jan 20 13:18:28 UTC 2013 - mail@bernhard-voelker.de -- Avoid segmentation fault in "join -i" with long line input (bnc#798541, VUL-1) +- Avoid segmentation fault in "join -i" with long line input + (bnc#798541, VUL-1, CVE-2013-0223) * src/join.c: Instead of usig unreliable alloca() stack allocation, use heap allocation via xmalloc()+free(). (coreutils-i18n.patch, from Philipp Thomas ) - Avoid segmentation fault in "sort -d" and "sort -M" with long line input - (bnc#798538, VUL-1) + (bnc#798538, VUL-1, CVE-2013-0221) * src/sort.c: Instead of usig unreliable alloca() stack allocation, use heap allocation via xmalloc()+free(). (coreutils-i18n.patch, from Philipp Thomas ) -- Avoid segmentation fault in "uniq" with long line input (bnc#796243, VUL-1) +- Avoid segmentation fault in "uniq" with long line input + (bnc#796243, VUL-1, CVE-2013-0222) * src/cut.c: Instead of usig unreliable alloca() stack allocation, use heap allocation via xmalloc()+free().