The find_archive() overflow is known as CVE-2018-1000097

This commit is contained in:
Petr Písař 2018-03-26 14:27:17 +02:00
parent 2cfe07894e
commit 42e709684b

View File

@ -14,7 +14,8 @@ Group: Applications/Archiving
Source: ftp://ftp.gnu.org/gnu/%{name}/%{name}-%{version}.tar.xz
# Pass compilation with -Werror=format-security, bug #1037323
Patch0: %{name}-4.14.2-Pass-compilation-with-Werror-format-security.patch
# Fix a heap buffer overflow in find_archive(), bug #1548019,
# Fix CVE-2018-1000097 (a heap buffer overflow in find_archive()),
# bug #1548019,
# <http://lists.gnu.org/archive/html/bug-gnu-utils/2018-02/msg00004.html>
Patch1: %{name}-4.15.2-Fix-a-heap-buffer-overflow-in-find_archive.patch
URL: http://www.gnu.org/software/%{name}/
@ -87,7 +88,8 @@ fi
%changelog
* Thu Feb 22 2018 Petr Pisar <ppisar@redhat.com> - 4.15.2-9
- Fix a heap buffer overflow in find_archive() (bug #1548019)
- Fix CVE-2018-1000097 (a heap buffer overflow in find_archive())
(bug #1548019)
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 4.15.2-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild