Author: saispo
Date: Wed Feb  7 10:56:55 2007
New Revision: 117005

Added:
   packages/cooker/libwmf/current/SOURCES/libwmf-0.2.8.4-CVE-2007-0455.patch
Removed:
   packages/cooker/libwmf/current/SOURCES/libwmf-0.2.7-libwmf-config.patch.bz2
   packages/cooker/libwmf/current/SOURCES/libwmf-0.2.8.3-CAN-2004-0941.patch.bz2
   packages/cooker/libwmf/current/SOURCES/libwmf-0.2.8.3-CAN-2004-0990.patch.bz2
   packages/cooker/libwmf/current/SOURCES/libwmf-0.2.8.4-intoverflow.patch.bz2
Modified:
   packages/cooker/libwmf/current/SPECS/libwmf.spec

Log:
MDKSA-2007:036

Added: packages/cooker/libwmf/current/SOURCES/libwmf-0.2.8.4-CVE-2007-0455.patch
==============================================================================
--- (empty file)
+++ packages/cooker/libwmf/current/SOURCES/libwmf-0.2.8.4-CVE-2007-0455.patch   
Wed Feb  7 10:56:55 2007
@@ -0,0 +1,11 @@
+--- libwmf-0.2.8.4/src/extra/gd/gdft.c.cve-2007-0455   2007-02-05 
07:56:48.000000000 -0700
++++ libwmf-0.2.8.4/src/extra/gd/gdft.c 2007-02-05 07:56:59.000000000 -0700
+@@ -809,7 +809,7 @@ gdImageStringFT (gdImage * im, int *brec
+           {
+             ch = c & 0xFF;    /* don't extend sign */
+           }
+-        next++;
++        if (*next) next++;
+       }
+       else
+       {

Modified: packages/cooker/libwmf/current/SPECS/libwmf.spec
==============================================================================
--- packages/cooker/libwmf/current/SPECS/libwmf.spec    (original)
+++ packages/cooker/libwmf/current/SPECS/libwmf.spec    Wed Feb  7 10:56:55 2007
@@ -25,6 +25,7 @@
 Patch1:                libwmf-0.2.8.3-CAN-2004-0941.patch
 Patch2:                libwmf-0.2.8.3-CAN-2004-0990.patch
 Patch3:                libwmf-0.2.8.4-intoverflow.patch
+Patch4:                libwmf-0.2.8.4-CVE-2007-0455.patch
 BuildRoot:     %{_tmppath}/%{name}-buildroot
 
 %description
@@ -67,6 +68,8 @@
 %patch1 -p1 -b .can-2004-0941
 %patch2 -p1 -b .can-2004-0990
 %patch3 -p1 -b .cve-2006-3376
+%patch4 -p1 -b .cve-2007-0455
+
 # libtoolize on un-common architectures
 aclocal-1.9
 libtoolize --copy --force

Reply via email to