ryan77627/guix
1
0
Fork 0
mirror of https://git.in.rschanz.org/ryan77627/guix.git synced 2024-12-25 13:58:15 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

gnu: libevent-2.0: Include CVE IDs in patches.

Browse source 
* gnu/packages/patches/libevent-2.0-evdns-fix-remote-stack-overread.patch,
gnu/packages/patches/libevent-2.0-evutil-fix-buffer-overflow.patch,
gnu/packages/patches/libevent-2.0-evdns-fix-searching-empty-hostnames.patch:
Rename to ...
* gnu/packages/patches/libevent-2.0-CVE-2016-10195.patch,
gnu/packages/patches/libevent-2.0-CVE-2016-10196.patch,
gnu/packages/patches/libevent-2.0-CVE-2016-10197.patch: ... new files.
* gnu/local.mk (dist_patch_DATA): Adjust accordingly.
* gnu/packages/libevent.scm (libevent-2.0)[sources]: Likewise.
This commit is contained in:
Leo Famulari 2017-02-02 10:48:53 -05:00
parent e8c83d04e1
commit e83ef684fc
No known key found for this signature in database
GPG key ID: 2646FA30BACA7F08
5 changed files with 12 additions and 15 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
gnu/local.mk
View file

@ -668,9 +668,9 @@ dist_patch_DATA = \
%D%/packages/patches/libdrm-symbol-check.patch \ %D%/packages/patches/libdrm-symbol-check.patch \
%D%/packages/patches/libepoxy-gl-null-checks.patch \ %D%/packages/patches/libepoxy-gl-null-checks.patch \
%D%/packages/patches/libevent-dns-tests.patch \ %D%/packages/patches/libevent-dns-tests.patch \
%D%/packages/patches/libevent-2.0-evdns-fix-remote-stack-overread.patch \ %D%/packages/patches/libevent-2.0-CVE-2016-10195.patch \
%D%/packages/patches/libevent-2.0-evdns-fix-searching-empty-hostnames.patch \ %D%/packages/patches/libevent-2.0-CVE-2016-10196.patch \
%D%/packages/patches/libevent-2.0-evutil-fix-buffer-overflow.patch \ %D%/packages/patches/libevent-2.0-CVE-2016-10197.patch \
%D%/packages/patches/libevent-2.1-dns-tests.patch \ %D%/packages/patches/libevent-2.1-dns-tests.patch \
%D%/packages/patches/libevent-2.1-skip-failing-test.patch \ %D%/packages/patches/libevent-2.1-skip-failing-test.patch \
%D%/packages/patches/libextractor-ffmpeg-3.patch \ %D%/packages/patches/libextractor-ffmpeg-3.patch \

6
gnu/packages/libevent.scm
View file

@ -80,9 +80,9 @@ (define-public libevent-2.0
"18qz9qfwrkakmazdlwxvjmw8p76g70n3faikwvdwznns1agw9hki")) "18qz9qfwrkakmazdlwxvjmw8p76g70n3faikwvdwznns1agw9hki"))
(patches (search-patches (patches (search-patches
"libevent-dns-tests.patch" "libevent-dns-tests.patch"
"libevent-2.0-evdns-fix-remote-stack-overread.patch" "libevent-2.0-CVE-2016-10195.patch"
"libevent-2.0-evutil-fix-buffer-overflow.patch" "libevent-2.0-CVE-2016-10196.patch"
"libevent-2.0-evdns-fix-searching-empty-hostnames.patch")))))) "libevent-2.0-CVE-2016-10197.patch"))))))
(define-public libev (define-public libev
(package (package

5
gnu/packages/patches/libevent-2.0-evdns-fix-remote-stack-overread.patch → gnu/packages/patches/libevent-2.0-CVE-2016-10195.patch
View file

@ -1,7 +1,6 @@
Fix buffer overread in libevents DNS code. Fix CVE-2016-10195 (buffer overread in libevent's DNS code):
Upstream bug report:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10195
https://github.com/libevent/libevent/issues/317 https://github.com/libevent/libevent/issues/317
Patch copied from upstream source repository: Patch copied from upstream source repository:

5
gnu/packages/patches/libevent-2.0-evutil-fix-buffer-overflow.patch → gnu/packages/patches/libevent-2.0-CVE-2016-10196.patch
View file

@ -1,7 +1,6 @@
Fix buffer overflow in evutil. Fix CVE-2016-10196 (buffer overflow in evutil):
Upstream bug report:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10196
https://github.com/libevent/libevent/issues/318 https://github.com/libevent/libevent/issues/318
Patch copied from upstream source repository: Patch copied from upstream source repository:

5
gnu/packages/patches/libevent-2.0-evdns-fix-searching-empty-hostnames.patch → gnu/packages/patches/libevent-2.0-CVE-2016-10197.patch
View file

@ -1,7 +1,6 @@
Fix OOB read on empty hostnames in evdns. Fix CVE-2016-10197 (out of bounds read on empty hostnames in evdns):
Upstream bug report:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10197
https://github.com/libevent/libevent/issues/332 https://github.com/libevent/libevent/issues/332
Patch copied from upstream source repository: Patch copied from upstream source repository: