From 42e709684be30887121cd9e07b1cdc6c25ce65fd Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20P=C3=ADsa=C5=99?= Date: Mon, 26 Mar 2018 14:27:17 +0200 Subject: [PATCH] The find_archive() overflow is known as CVE-2018-1000097 --- sharutils.spec | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/sharutils.spec b/sharutils.spec index 2d7dcb5..17ea97f 100644 --- a/sharutils.spec +++ b/sharutils.spec @@ -14,7 +14,8 @@ Group: Applications/Archiving Source: ftp://ftp.gnu.org/gnu/%{name}/%{name}-%{version}.tar.xz # Pass compilation with -Werror=format-security, bug #1037323 Patch0: %{name}-4.14.2-Pass-compilation-with-Werror-format-security.patch -# Fix a heap buffer overflow in find_archive(), bug #1548019, +# Fix CVE-2018-1000097 (a heap buffer overflow in find_archive()), +# bug #1548019, # Patch1: %{name}-4.15.2-Fix-a-heap-buffer-overflow-in-find_archive.patch URL: http://www.gnu.org/software/%{name}/ @@ -87,7 +88,8 @@ fi %changelog * Thu Feb 22 2018 Petr Pisar - 4.15.2-9 -- Fix a heap buffer overflow in find_archive() (bug #1548019) +- Fix CVE-2018-1000097 (a heap buffer overflow in find_archive()) + (bug #1548019) * Fri Feb 09 2018 Fedora Release Engineering - 4.15.2-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild