diff options
| author | TBK <tbk@jjtc.eu> | 2020-02-24 21:15:36 +0100 |
|---|---|---|
| committer | Leo <thinkabit.ukim@gmail.com> | 2020-02-24 17:29:37 -0300 |
| commit | ff0ba778a6651a6d66c94171e62dd4644c239039 (patch) | |
| tree | 1f7a224334d7f3544be1b764a6cdf24e87a16623 /main/cvs/cvs-1.12.12-musl.patch | |
| parent | 90e64b894c1cd230b23b58685d08c4d4334c68e8 (diff) | |
| download | aports-ff0ba778a6651a6d66c94171e62dd4644c239039.tar.bz2 aports-ff0ba778a6651a6d66c94171e62dd4644c239039.tar.xz | |
main/cvs: security upgrade to 1.12.12
Most distros uses 1.12.13 (https://repology.org/project/cvs/versions) but according to Gentoo it is usable, so following Gentoo (https://bugs.gentoo.org/124733) 1.12.12 is the way forward.
CVEs:
* CVE-2010-3846 - https://bugzilla.redhat.com/show_bug.cgi?id=642146
* CVE-2012-0804 - https://security-tracker.debian.org/tracker/CVE-2012-0804
* CVE-2017-12836 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871810#10
Diffstat (limited to 'main/cvs/cvs-1.12.12-musl.patch')
| -rw-r--r-- | main/cvs/cvs-1.12.12-musl.patch | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/main/cvs/cvs-1.12.12-musl.patch b/main/cvs/cvs-1.12.12-musl.patch new file mode 100644 index 0000000000..e426cf55fc --- /dev/null +++ b/main/cvs/cvs-1.12.12-musl.patch @@ -0,0 +1,13 @@ +http://gcc.gnu.org/ml/gcc/2003-04/msg00518.html + +--- a/lib/regex.c ++++ b/lib/regex.c +@@ -8184,7 +8184,7 @@ + if (msg_size > errbuf_size) + { + #if defined HAVE_MEMPCPY || defined _LIBC +- *((char *) __mempcpy (errbuf, msg, errbuf_size - 1)) = '\0'; ++ *((char *) mempcpy (errbuf, msg, errbuf_size - 1)) = '\0'; + #else + memcpy (errbuf, msg, errbuf_size - 1); + errbuf[errbuf_size - 1] = 0; |