Skip to Content.
Sympa Menu

sm-commit - [SM-Commit] GIT changes to master grimoire by Treeve Jelbert (5bb8d0bf6322682eee87f2354230b8df9bdac1ee)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

[SM-Commit] GIT changes to master grimoire by Treeve Jelbert (5bb8d0bf6322682eee87f2354230b8df9bdac1ee)

Chronological Thread  
    < Chronological >       < Thread >
  • From: Treeve Jelbert <scm AT sourcemage.org>
  • To: sm-commit AT lists.ibiblio.org
  • Subject: [SM-Commit] GIT changes to master grimoire by Treeve Jelbert (5bb8d0bf6322682eee87f2354230b8df9bdac1ee)
  • Date: Wed, 1 Aug 2007 11:08:10 -0500
GIT changes to master grimoire by Treeve Jelbert <treeve AT sourcemage.org>:

kde-apps/koffice/DETAILS | 2 -
kde-apps/koffice/HISTORY | 5 ++
kde-apps/koffice/PRE_BUILD | 3 +
kde-apps/koffice/koffice-xpdf-CVE-2007-3387.diff | 20
++++++++++
kde-core/kdegraphics/DETAILS | 2 -
kde-core/kdegraphics/HISTORY | 7 +++
kde-core/kdegraphics/PRE_BUILD | 3 +
kde-core/kdegraphics/post-3.5.7-kdegraphics-CVE-2007-3387.diff | 17
++++++++
libs/libevent/DETAILS | 2 -
libs/libevent/HISTORY | 3 +
mail/mpop/DETAILS | 4 +-
mail/mpop/HISTORY | 3 +
x11-toolkits/sptk/DETAILS | 4 +-
x11-toolkits/sptk/HISTORY | 3 +
14 files changed, 71 insertions(+), 7 deletions(-)

New commits:
commit 5bb8d0bf6322682eee87f2354230b8df9bdac1ee
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Treeve Jelbert <treeve AT sourcemage.org>

koffice - fix CVE-2007-3387

commit a9a185d01a2c6958f97be4c8cf0f85f2600dac7d
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Treeve Jelbert <treeve AT sourcemage.org>

kdegraphics - fix CVE-2007-3387

commit febb09c25110a5170d6c4cb5ea191d98bbaa336b
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Treeve Jelbert <treeve AT sourcemage.org>

sptk-3.5.4

commit 2595c9d4356b5f469e1ef7b1c12a14d7b350be6c
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Treeve Jelbert <treeve AT sourcemage.org>

libevent-1.3c

commit 2326aa6c0340e56130f9a883bda119acf7ebc806
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Treeve Jelbert <treeve AT sourcemage.org>

mpop-1.0.11

diff --git a/kde-apps/koffice/DETAILS b/kde-apps/koffice/DETAILS
index 5346f59..4aca197 100755
--- a/kde-apps/koffice/DETAILS
+++ b/kde-apps/koffice/DETAILS
@@ -7,7 +7,7 @@ SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
SOURCE_URL[0]=$KDE_URL/stable/$SPELL-$VERSION/src/$SOURCE
WEB_SITE=http://www.koffice.org
ENTERED=20020405
- SECURITY_PATCH=1
+ SECURITY_PATCH=2
LICENSE[0]=GPL
KEYWORDS="kde office"
SHORT="Full office suite"
diff --git a/kde-apps/koffice/HISTORY b/kde-apps/koffice/HISTORY
index f476040..d9537aa 100644
--- a/kde-apps/koffice/HISTORY
+++ b/kde-apps/koffice/HISTORY
@@ -1,3 +1,8 @@
+2007-08-01 Treeve Jelbert <treeve AT sourcemage.org>
+ * DETAILS: SECURITY_PATCH++
+ * PRE_BUILD, koffice-xpdf-CVE-2007-3387.diff: added
+ fix bug #13916
+
2007-06-07 George Sherwood <george AT beernabeer.com>
* DETAILS: updated spell to 1.6.3

diff --git a/kde-apps/koffice/PRE_BUILD b/kde-apps/koffice/PRE_BUILD
new file mode 100755
index 0000000..4faa2a0
--- /dev/null
+++ b/kde-apps/koffice/PRE_BUILD
@@ -0,0 +1,3 @@
+default_pre_build &&
+cd $SOURCE_DIRECTORY &&
+patch -p0 < $SPELL_DIRECTORY/koffice-xpdf-CVE-2007-3387.diff
diff --git a/kde-apps/koffice/koffice-xpdf-CVE-2007-3387.diff
b/kde-apps/koffice/koffice-xpdf-CVE-2007-3387.diff
new file mode 100644
index 0000000..ded0e07
--- /dev/null
+++ b/kde-apps/koffice/koffice-xpdf-CVE-2007-3387.diff
@@ -0,0 +1,20 @@
+--- filters/kword/pdf/xpdf/xpdf/Stream.cc
++++ filters/kword/pdf/xpdf/xpdf/Stream.cc
+@@ -413,13 +413,11 @@ StreamPredictor::StreamPredictor(Stream
+ predLine = NULL;
+ ok = gFalse;
+
+- if (width <= 0 || nComps <= 0 || nBits <= 0 ||
+- nComps >= INT_MAX / nBits ||
+- width >= INT_MAX / nComps / nBits)
+- return;
+-
+ nVals = width * nComps;
+- if (nVals * nBits + 7 <= 0)
++ if (width <= 0 || nComps <= 0 || nBits <= 0 ||
++ nComps >= 4 || nBits > 16 ||
++ width >= INT_MAX / nComps ||
++ nVals >= (INT_MAX - 7) / nBits)
+ return;
+
+ pixBytes = (nComps * nBits + 7) >> 3;
diff --git a/kde-core/kdegraphics/DETAILS b/kde-core/kdegraphics/DETAILS
index 585d720..a558d2f 100755
--- a/kde-core/kdegraphics/DETAILS
+++ b/kde-core/kdegraphics/DETAILS
@@ -8,7 +8,7 @@ SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
SOURCE_URL[0]=$KDE_URL/stable/${VERSION//.0/}/src/$SOURCE
WEB_SITE=http://www.kde.org
ENTERED=20010922
- SECURITY_PATCH=2
+ SECURITY_PATCH=3
LICENSE[0]=GPL
KEYWORDS="kde"
SHORT="Graphics related programs for KDE."
diff --git a/kde-core/kdegraphics/HISTORY b/kde-core/kdegraphics/HISTORY
index 2236432..c8971d1 100644
--- a/kde-core/kdegraphics/HISTORY
+++ b/kde-core/kdegraphics/HISTORY
@@ -1,3 +1,10 @@
+2007-08-01 Treeve Jelbert <treeve AT sourcemage.org>
+ * DETAILS: SECURITY_PATCH++
+ * PRE_BUILD, post-3.5.7-kdegraphics-CVE-2007-3387.diff
+ see
+ http://www.kde.org/info/security/advisory-20070730-1.txt
+ fixes bug #13916
+
2007-05-23 Jaka Kranjc <lynxlynxlynx AT sourcemage.org>
* DETAILS: updated spell to 3.5.7

diff --git a/kde-core/kdegraphics/PRE_BUILD b/kde-core/kdegraphics/PRE_BUILD
new file mode 100755
index 0000000..336c5ff
--- /dev/null
+++ b/kde-core/kdegraphics/PRE_BUILD
@@ -0,0 +1,3 @@
+default_pre_build &&
+cd $SOURCE_DIRECTORY &&
+patch -p0 < $SPELL_DIRECTORY/post-3.5.7-kdegraphics-CVE-2007-3387.diff
diff --git a/kde-core/kdegraphics/post-3.5.7-kdegraphics-CVE-2007-3387.diff
b/kde-core/kdegraphics/post-3.5.7-kdegraphics-CVE-2007-3387.diff
new file mode 100644
index 0000000..e28add8
--- /dev/null
+++ b/kde-core/kdegraphics/post-3.5.7-kdegraphics-CVE-2007-3387.diff
@@ -0,0 +1,17 @@
+Index: kpdf/xpdf/xpdf/Stream.cc
+===================================================================
+--- kpdf/xpdf/xpdf/Stream.cc (revision 689574)
++++ kpdf/xpdf/xpdf/Stream.cc (working copy)
+@@ -411,9 +411,9 @@ StreamPredictor::StreamPredictor(Stream
+
+ nVals = width * nComps;
+ if (width <= 0 || nComps <= 0 || nBits <= 0 ||
+- nComps >= INT_MAX / nBits ||
+- width >= INT_MAX / nComps / nBits ||
+- nVals * nBits + 7 < 0) {
++ nComps > gfxColorMaxComps || nBits > 16 ||
++ width >= INT_MAX / nComps ||
++ nVals >= (INT_MAX - 7) / nBits) {
+ return;
+ }
+ pixBytes = (nComps * nBits + 7) >> 3;
diff --git a/libs/libevent/DETAILS b/libs/libevent/DETAILS
index 3e7415a..30fc6a4 100755
--- a/libs/libevent/DETAILS
+++ b/libs/libevent/DETAILS
@@ -1,5 +1,5 @@
SPELL=libevent
- VERSION=1.3b
+ VERSION=1.3c
SOURCE=$SPELL-$VERSION.tar.gz
SOURCE2=$SOURCE.sig
SOURCE2_IGNORE=signature
diff --git a/libs/libevent/HISTORY b/libs/libevent/HISTORY
index 74c4ee5..3264877 100644
--- a/libs/libevent/HISTORY
+++ b/libs/libevent/HISTORY
@@ -1,3 +1,6 @@
+2007-08-01 Treeve Jelbert <treeve AT sourcemage.org>
+ * DETAILS: version 1.3c
+
2007-05-06 Jaka Kranjc <lynxlynxlynx AT sourcemage.org>
* DETAILS: converted to upstream signature checking

diff --git a/mail/mpop/DETAILS b/mail/mpop/DETAILS
index afb9346..d733df9 100755
--- a/mail/mpop/DETAILS
+++ b/mail/mpop/DETAILS
@@ -1,8 +1,8 @@
SPELL=mpop
- VERSION=1.0.9
+ VERSION=1.0.11
+
SOURCE_HASH=sha512:1c43056f7abd8d113b148c17dbe3a0d659ae9a9226308addca96a67d649a0643aaa15640c863c849d158da1b66abfcb0fda465fa68f91f8efba6aa95eac5f261
SOURCE=$SPELL-$VERSION.tar.bz2
SOURCE_URL[0]=${SOURCEFORGE_URL}/$SPELL/$SOURCE
-
SOURCE_HASH=sha512:5b97d994988bc3cb41edb00db3f1b9811ee4bae89a846d0d88f9366bed5354d151dd1f0f5961ae9a0579da9736526223521a2cc900350a3b3a7d703dddf39f52
SOURCE_DIRECTORY=${BUILD_DIRECTORY}/${SPELL}-${VERSION}
WEB_SITE=http://mpop.sourceforge.net/
ENTERED=20060526
diff --git a/mail/mpop/HISTORY b/mail/mpop/HISTORY
index 1feadfd..ed12226 100644
--- a/mail/mpop/HISTORY
+++ b/mail/mpop/HISTORY
@@ -1,3 +1,6 @@
+2007-08-01 Treeve Jelbert <treeve AT sourcemage.be
+ * DETAILS: version 1.0.11
+
2007-04-09 Treeve Jelbert <treeve AT sourcemage.be
* DETAILS: version 1.0.9
>
diff --git a/x11-toolkits/sptk/DETAILS b/x11-toolkits/sptk/DETAILS
index 04e5f3d..05ad9b5 100755
--- a/x11-toolkits/sptk/DETAILS
+++ b/x11-toolkits/sptk/DETAILS
@@ -1,6 +1,6 @@
SPELL=sptk
- VERSION=3.5.3
-
SOURCE_HASH=sha512:33e90b0b6471cb2bafa1f2a87edfe477bc1b2c98fa677e9dcc7317a8bc5488ee366f85a438d864eed67326bff7bde472ed83a685c8af6e183299bfafb1cde416
+ VERSION=3.5.4
+
SOURCE_HASH=sha512:2f07ee7538d2dbce56e0a64a2c0dbf1af5164fd0e746b7828e773fa1be9bf77710a6ff3f6030a1a0521c2d26809e924a039dd57ff9630aec3a8ffd557546eb1c
SOURCE=$SPELL-$VERSION.tbz2
SOURCE_DIRECTORY=$BUILD_DIRECTORY/${SPELL}-${VERSION}
WEB_SITE=http://www.sptk.net
diff --git a/x11-toolkits/sptk/HISTORY b/x11-toolkits/sptk/HISTORY
index db8746a..1c930c2 100644
--- a/x11-toolkits/sptk/HISTORY
+++ b/x11-toolkits/sptk/HISTORY
@@ -1,3 +1,6 @@
+2007-08-01 Treeve Jelbert <treeve AT sourcemage.org>
+ * DETAILS: version 3.5.4
+
2007-06-26 Treeve Jelbert <treeve AT sourcemage.org>
* DETAILS: version 3.5.3



  • [SM-Commit] GIT changes to master grimoire by Treeve Jelbert (5bb8d0bf6322682eee87f2354230b8df9bdac1ee), Treeve Jelbert, 08/01/2007

Archive powered by MHonArc 2.6.24.

Top of Page