Bug#992437: libgetdata8: Patch for CVE-2021-20204 breaks many regression tests

2021-11-15 Thread D. V. Wiebe
A new version of GetData (0.11.0) has been released to address
CVE-2021-20204:

https://github.com/ketiltrout/getdata/releases/tag/v0.11.0

which I think should solve the underlying problem here, assuing the
current debpatch for the vulnerability can be retired.


signature.asc
Description: PGP signature


Bug#556990: kst can't read modern Dirfile data

2009-11-18 Thread D. V. Wiebe
Package: kst
Version: 1.7.0-1

kst is unable to read modern-format Dirfile databases.  Dirfile
databases are read via the GetData library.  The current version
of kst (1.7.0) uses an internal version of GetData which has become
obsolete.  This internal version of GetData is only able to handle
dirfiles conforming to Version 4 (or earlier) of the Dirfile Standards
(c.  October 2006).  The latest version of the Dirfile Standards is
Version 7, released in October 2009.

This problem has been fixed upstream.

The GetData library is now a stand-alone project:

  http://getdata.sourceforge.net/

Starting with version 1.8, kst will use the external library, in
preference to its obsolete internal version, if the modern GetData
library is found at ./configure time.  To fix this bug, then, it is
required to:

* package and install the stand-alone GetData from the above mentioned
  project
* upgrade to kst-1.8.x

so, this is something to keep in mind the next time kst package
is upgraded.  (NB: the upcoming kst 2.x series contains no internal
GetData library and requires the external library to be able to
read Dirfile data.)

For testing purposes, a (very trivial) modern Dirfile database can be
created by creating a file called

  format

containing the following two lines:

/ENDIAN big
format RAW UINT8 1

kst-1.7.0-1 fails to read this dirfile when invoked as:

  $ kst -y format directory-containing-format

(the error in the Kst Debug Dialog is: Failed to load file
'directory-containing-format'.)

However, a locally-compiled version of kst 1.8.0 using the external
GetData library (version 0.6.0) succeeds in reading the dirfile using
the above invocation (resulting in a plot of the ASCII codes of the
characters in the file format).

--
D. V. Wiebe
getd...@ketiltrout.net
http://getdata.sourceforge.net/



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org