openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

File project.diff of Package libcaca (Revision 0b0131dcb3f37c82866c66cb805c7b1b)

Currently displaying revision 0b0131dcb3f37c82866c66cb805c7b1b , Show latest

--- libcaca.changes.orig
+++ libcaca.changes
@@ -1,4 +1,29 @@
 -------------------------------------------------------------------
+Mon Jan 21 13:01:52 UTC 2019 - josef.moellers@suse.com
+
+- Cast intermediate results to 64 bits to prevent overflow of
+  calculations with 32-bit quentities.
+  [CVE-2018-20544, bsc#1120502,
+   Bug1120502-add_cast_to_prevent_overflow.patch]
+
+-------------------------------------------------------------------
+Mon Jan 21 12:39:30 UTC 2019 - josef.moellers@suse.com
+
+- Fix the size of width and height to be of size_t rather than
+  int in struct caca_dither. Re-using existing patch.
+  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
+   bsc#1120504, libcaca-variable-type.patch]
+
+-------------------------------------------------------------------
+Tue Jan 15 15:03:38 UTC 2019 - josef.moellers@suse.com
+
+- Fix the size of width and height to be of size_t rather than
+  unsigned int which may be too small on 64 bit architectures.
+  This fixes three CVS and associated bugs.
+  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
+   CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]
+
+-------------------------------------------------------------------
 Tue Jan 30 11:03:56 UTC 2018 - davejplater@gmail.com
 
 - Deleted _service and use spec file to download git version.
--- libcaca.spec.orig
+++ libcaca.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package libcaca
 #
-# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -35,6 +35,8 @@ Patch5:         libcaca-ruby_vendor_inst
 Patch7:         libcaca-0.99.beta16-missing-GLU.patch
 Patch9:         caca-no-build-date.patch
 Patch10:        libcaca-ncurses6.patch
+Patch11:        libcaca-variable-type.patch
+Patch12:        Bug1120502-add_cast_to_prevent_overflow.patch
 BuildRequires:  doxygen
 BuildRequires:  fdupes
 BuildRequires:  freeglut-devel
@@ -136,6 +138,8 @@ drawing, triangle filling and sprite bli
 %patch9
 %patch1
 %patch10 -p1
+%patch11 -p1
+%patch12 -p1
 RUBY="ruby-`echo %{rb_ver} | sed 's|\.[^\.]*$||'`"
 find . -type f -exec sed -i "s|ruby-1.9|$RUBY|" \{\} \;
 pushd python

Places

File project.diff of Package libcaca (Revision 0b0131dcb3f37c82866c66cb805c7b1b)

Places