summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndreas Sturmlechner <asturm@gentoo.org>2020-05-02 13:12:48 +0200
committerAndreas Sturmlechner <asturm@gentoo.org>2020-08-22 18:06:40 +0200
commitd9c0647ef9ae9f3837fe4be808b9e6e09a3b0371 (patch)
treed7458c8a2f861dc1b465dd7afcab5b784548530a /media-gfx/gimp/files/gimp-2.8.22-cve-2017-17788.patch
parentprofiles: powerpc/ppc32: Add 'gimp' to use.stable.mask (diff)
downloadgentoo-d9c0647ef9ae9f3837fe4be808b9e6e09a3b0371.tar.gz
gentoo-d9c0647ef9ae9f3837fe4be808b9e6e09a3b0371.tar.bz2
gentoo-d9c0647ef9ae9f3837fe4be808b9e6e09a3b0371.zip
media-gfx/gimp: Drop 2.8.22-r2 and 2.9.8-r1
Effectively dropping to ~ppc. Bug: https://bugs.gentoo.org/685624 Package-Manager: Portage-2.3.99, Repoman-2.3.22 Signed-off-by: Andreas Sturmlechner <asturm@gentoo.org>
Diffstat (limited to 'media-gfx/gimp/files/gimp-2.8.22-cve-2017-17788.patch')
-rw-r--r--media-gfx/gimp/files/gimp-2.8.22-cve-2017-17788.patch29
1 files changed, 0 insertions, 29 deletions
diff --git a/media-gfx/gimp/files/gimp-2.8.22-cve-2017-17788.patch b/media-gfx/gimp/files/gimp-2.8.22-cve-2017-17788.patch
deleted file mode 100644
index 2bf16b85e607..000000000000
--- a/media-gfx/gimp/files/gimp-2.8.22-cve-2017-17788.patch
+++ /dev/null
@@ -1,29 +0,0 @@
-From: Hanno Boeck <hanno@hboeck.de>
-Date: Mon, 27 Nov 2017 00:37:29 +0100
-Subject: 790783 - buffer overread in XCF parser if version field...
-Origin: https://git.gnome.org/browse/GIMP/commit/?id=702c4227e8b6169f781e4bb5ae4b5733f51ab126
-Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2017-17788
-Bug-Debian: https://bugs.debian.org/885347
-Bug: https://bugzilla.gnome.org/show_bug.cgi?id=790783
-
-...has no null terminator
-
-Check for the presence of '\0' before using atoi() on the version
-string. Patch slightly modified (mitch).
-[carnil: backport to gimp-2-8: affected code in xcf_load_invoker]
----
- app/xcf/xcf.c | 3 ++-
- 1 file changed, 2 insertions(+), 1 deletion(-)
-
---- a/app/xcf/xcf.c
-+++ b/app/xcf/xcf.c
-@@ -318,7 +318,8 @@ xcf_load_invoker (GimpProcedure *pr
- {
- info.file_version = 0;
- }
-- else if (id[9] == 'v')
-+ else if (id[9] == 'v' &&
-+ id[13] == '\0')
- {
- info.file_version = atoi (id + 10);
- }