mirror of
git://slackware.nl/current.git
synced 2025-01-14 08:01:11 +01:00
75a4a592e5
Mon Apr 25 13:37:00 UTC 2011 Slackware 13.37 x86_64 stable is released! Thanks to everyone who pitched in on this release: the Slackware team, the folks producing upstream code, and linuxquestions.org for providing a great forum for collaboration and testing. The ISOs are off to be replicated, a 6 CD-ROM 32-bit set and a dual-sided 32-bit/64-bit x86/x86_64 DVD. Please consider supporting the Slackware project by picking up a copy from store.slackware.com. We're taking pre-orders now, and offer a discount if you sign up for a subscription. As always, thanks to the Slackware community for testing, suggestions, and feedback. :-) Have fun!
38 lines
1.6 KiB
Diff
38 lines
1.6 KiB
Diff
Submitted By: Ken Moffat <ken at linuxfromscratch dot org>
|
|
Date: 2010-12-09
|
|
Initial Package Version: 2.0.1
|
|
Upstream Status: From Upstream
|
|
Origin: Unknown
|
|
Description: Fixes for CVE-2009-2625 (infinite loop and application hang via
|
|
malformed XML) CVE-2009-3560 (DOS via buffer overrun caused by malformed UTF-8)
|
|
and CVE-2009-3720 (DOS via buffer overrun caused by crafted UTF-8). This
|
|
replaces version -2 which had both the original and the revised fixes for
|
|
CVE-2009-3560 - the revised version is supposed to replace the original, not
|
|
add to it, because of problems with certain perl users of libexpat.
|
|
|
|
|
|
diff -Naur expat-2.0.1.orig//lib/xmlparse.c expat-2.0.1/lib/xmlparse.c
|
|
--- expat-2.0.1.orig//lib/xmlparse.c 2007-05-08 03:25:35.000000000 +0100
|
|
+++ expat-2.0.1/lib/xmlparse.c 2010-12-06 18:01:03.082339393 +0000
|
|
@@ -3703,6 +3703,9 @@
|
|
return XML_ERROR_UNCLOSED_TOKEN;
|
|
case XML_TOK_PARTIAL_CHAR:
|
|
return XML_ERROR_PARTIAL_CHAR;
|
|
+ case -XML_TOK_PROLOG_S:
|
|
+ tok = -tok;
|
|
+ break;
|
|
case XML_TOK_NONE:
|
|
#ifdef XML_DTD
|
|
/* for internal PE NOT referenced between declarations */
|
|
diff -Naur expat-2.0.1.orig//lib/xmltok_impl.c expat-2.0.1/lib/xmltok_impl.c
|
|
--- expat-2.0.1.orig//lib/xmltok_impl.c 2006-11-26 17:34:46.000000000 +0000
|
|
+++ expat-2.0.1/lib/xmltok_impl.c 2010-12-06 18:01:03.082339393 +0000
|
|
@@ -1744,7 +1744,7 @@
|
|
const char *end,
|
|
POSITION *pos)
|
|
{
|
|
- while (ptr != end) {
|
|
+ while (ptr < end) {
|
|
switch (BYTE_TYPE(enc, ptr)) {
|
|
#define LEAD_CASE(n) \
|
|
case BT_LEAD ## n: \
|