public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Stanislav Ochotnicky <sochotnicky@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/xfig] epel10.2: Fix buffer overflow when opening malicious fig files
Date: Sat, 30 May 2026 14:28:13 GMT [thread overview]
Message-ID: <178015129313.1.11617794462096182597.rpms-xfig-c67236fabbb2@fedoraproject.org> (raw)
A new commit has been pushed.
Repo : rpms/xfig
Branch : epel10.2
Commit : c67236fabbb275cbd26203ba3389e8ab0e368da6
Author : Stanislav Ochotnicky <sochotnicky@redhat.com>
Date : 2010-12-06T09:51:11+01:00
Stats : +6/-1 in 1 file(s)
URL : https://src.fedoraproject.org/rpms/xfig/c/c67236fabbb275cbd26203ba3389e8ab0e368da6?branch=epel10.2
Log:
Fix buffer overflow when opening malicious fig files
---
diff --git a/xfig.spec b/xfig.spec
index b23766b..9d0489f 100644
--- a/xfig.spec
+++ b/xfig.spec
@@ -3,7 +3,7 @@
Summary: An X Window System tool for drawing basic vector graphics
Name: xfig
Version: 3.2.5
-Release: 24.b%{?dist}
+Release: 25.b%{?dist}
License: MIT
Group: Applications/Multimedia
URL: http://www.xfig.org/
@@ -20,6 +20,7 @@ Patch10: xfig-3.2.5-enable-Xaw3d.patch
Patch13: xfig-3.2.5-urwfonts.patch
Patch19: xfig-3.2.5-debian.patch
Patch20: xfig-3.2.5b-fix-eps-reading.patch
+Patch21: xfig-3.2.5b-fix-fig-buffer-overflow.patch
BuildRequires: libjpeg-devel
BuildRequires: libpng-devel
@@ -94,6 +95,7 @@ Files common to both the plain Xaw and the Xaw3d version of xfig.
%patch13 -p1 -b .urw
%patch19 -p1
%patch20 -p1
+%patch21
iconv -f ISO-8859-1 -t UTF8 CHANGES > tmp; touch -r CHANGES tmp; mv tmp CHANGES
rm Doc/html/images/sav1a0.tmp
chmod -x `find -type f`
@@ -186,6 +188,9 @@ fi
%changelog
+* Mon Dec 6 2010 Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.2.5-25.b
+- Fix buffer overflow when opening malicious fig files
+
* Thu Nov 25 2010 Hans de Goede <hdegoede@redhat.com> 3.2.5-24.b
- Fix importing of eps files (#657290)
reply other threads:[~2026-05-30 14:28 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178015129313.1.11617794462096182597.rpms-xfig-c67236fabbb2@fedoraproject.org \
--to=sochotnicky@redhat.com \
--cc=git-commits@fedoraproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox