Subject: buster-pu: package lwip/2.0.3-3 Package: release.debian.org User: release.debian....@packages.debian.org Usertags: pu Tags: buster Severity: normal
Hi, I fixed the CVE-2020-8597 in unstable and testing, and would like to upload the fix to buster. Attached is the debdiff. [1] https://security-tracker.debian.org/tracker/CVE-2020-8597 -- System Information: Debian Release: 10.3 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 5.2.0-0.bpo.3-amd64 (SMP w/8 CPU cores) Locale: LANG=ca_ES.UTF-8, LC_CTYPE=ca_ES.UTF-8 (charmap=UTF-8), LANGUAGE=ca_ES.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /usr/bin/dash *** /home/jlledom/debdiff.diff diff -Nru lwip-2.0.3/debian/changelog lwip-2.0.3/debian/changelog --- lwip-2.0.3/debian/changelog 2018-11-04 00:25:58.000000000 +0100 +++ lwip-2.0.3/debian/changelog 2020-03-21 09:02:20.000000000 +0100 @@ -1,3 +1,9 @@ +lwip (2.0.3-3+deb10u1) buster; urgency=high + + * Fix CVE-2020-8597 + + -- Joan Lledó <jlle...@member.fsf.org> Sat, 21 Mar 2020 09:02:20 +0100 + lwip (2.0.3-3) unstable; urgency=medium [ Samuel Thibault ] diff -Nru lwip-2.0.3/debian/patches/CVE-2020-8597 lwip-2.0.3/debian/patches/CVE-2020-8597 --- lwip-2.0.3/debian/patches/CVE-2020-8597 1970-01-01 01:00:00.000000000 +0100 +++ lwip-2.0.3/debian/patches/CVE-2020-8597 2020-03-14 10:00:49.000000000 +0100 @@ -0,0 +1,20 @@ +--- a/src/netif/ppp/eap.c ++++ b/src/netif/ppp/eap.c +@@ -1417,7 +1417,7 @@ + } + + /* Not so likely to happen. */ +- if (vallen >= len + sizeof (rhostname)) { ++ if (len - vallen >= (int)sizeof (rhostname)) { + ppp_dbglog("EAP: trimming really long peer name down"); + MEMCPY(rhostname, inp + vallen, sizeof (rhostname) - 1); + rhostname[sizeof (rhostname) - 1] = '\0'; +@@ -1845,7 +1845,7 @@ + } + + /* Not so likely to happen. */ +- if (vallen >= len + sizeof (rhostname)) { ++ if (len - vallen >= (int)sizeof (rhostname)) { + ppp_dbglog("EAP: trimming really long peer name down"); + MEMCPY(rhostname, inp + vallen, sizeof (rhostname) - 1); + rhostname[sizeof (rhostname) - 1] = '\0'; diff -Nru lwip-2.0.3/debian/patches/series lwip-2.0.3/debian/patches/series --- lwip-2.0.3/debian/patches/series 2018-08-30 10:47:30.000000000 +0200 +++ lwip-2.0.3/debian/patches/series 2020-03-14 10:02:04.000000000 +0100 @@ -1,3 +1,4 @@ +CVE-2020-8597 port posix errno
