diff options
| author |   Fabian Groffen <grobian@gentoo.org> | 2017-11-15 16:31:41 +0100 |
|---|---|---|
| committer | Fabian Groffen <grobian@gentoo.org> | 2017-11-15 16:31:41 +0100 |
| commit | ab12f95ca1503bbcf12964e3d4d5673993f422a1 (patch) | |
| tree | 51397b3ec19ead701df8939567407efa876f3f96 /app-arch/bzip2/files | |
| parent | dev-libs/glib: sync (diff) | |
| download | prefix-ab12f95ca1503bbcf12964e3d4d5673993f422a1.tar.gz prefix-ab12f95ca1503bbcf12964e3d4d5673993f422a1.tar.bz2 prefix-ab12f95ca1503bbcf12964e3d4d5673993f422a1.zip | |
app-arch/bzip2: sync for CVE, bug #637572
Bug: https://bugs.gentoo.org/637572
Package-Manager: Portage-2.3.13-prefix, Repoman-2.3.4
Diffstat (limited to 'app-arch/bzip2/files')
| -rw-r--r-- | app-arch/bzip2/files/bzip2-1.0.6-CVE-2016-3189.patch | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/app-arch/bzip2/files/bzip2-1.0.6-CVE-2016-3189.patch b/app-arch/bzip2/files/bzip2-1.0.6-CVE-2016-3189.patch new file mode 100644 index 0000000000..1d0c3a6dd3 --- /dev/null +++ b/app-arch/bzip2/files/bzip2-1.0.6-CVE-2016-3189.patch @@ -0,0 +1,18 @@ +Upstream-Status: Backport +https://bugzilla.suse.com/attachment.cgi?id=681334 + +CVE: CVE-2016-3189 +Signed-off-by: Armin Kuster <akuster@mvista.com> + +Index: bzip2-1.0.6/bzip2recover.c +=================================================================== +--- bzip2-1.0.6.orig/bzip2recover.c ++++ bzip2-1.0.6/bzip2recover.c +@@ -457,6 +457,7 @@ Int32 main ( Int32 argc, Char** argv ) + bsPutUChar ( bsWr, 0x50 ); bsPutUChar ( bsWr, 0x90 ); + bsPutUInt32 ( bsWr, blockCRC ); + bsClose ( bsWr ); ++ outFile = NULL; + } + if (wrBlock >= rbCtr) break; + wrBlock++; |