public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Benjamin Gilbert <bgilbert@backtick.net>
To: git-commits@fedoraproject.org
Subject: [rpms/openslide] epel10: Fix CVE-2026-48977
Date: Mon, 08 Jun 2026 07:57:34 GMT [thread overview]
Message-ID: <178090545472.1.3658005336920106690.rpms-openslide-021fda826272@fedoraproject.org> (raw)
A new commit has been pushed.
Repo : rpms/openslide
Branch : epel10
Commit : 021fda826272ffaa69c814d9e9934ad65e5b5fbb
Author : Benjamin Gilbert <bgilbert@backtick.net>
Date : 2026-06-08T02:56:19-05:00
Stats : +20/-1 in 2 file(s)
URL : https://src.fedoraproject.org/rpms/openslide/c/021fda826272ffaa69c814d9e9934ad65e5b5fbb?branch=epel10
Log:
Fix CVE-2026-48977
---
diff --git a/openslide.spec b/openslide.spec
index e571ab3..a3e2d60 100644
--- a/openslide.spec
+++ b/openslide.spec
@@ -6,6 +6,8 @@ Summary: C library for reading virtual slides
License: LGPL-2.1-only
URL: https://openslide.org/
Source0: https://github.com/%{name}/%{name}/releases/download/v%{version}/%{name}-%{version}.tar.xz
+# https://github.com/openslide/openslide/pull/751
+Patch0: ventana-CVE-2026-48977.patch
BuildRequires: pkgconfig(glib-2.0)
BuildRequires: pkgconfig(cairo)
@@ -58,7 +60,7 @@ with virtual slides.
%prep
-%autosetup
+%autosetup -p1
%build
diff --git a/ventana-CVE-2026-48977.patch b/ventana-CVE-2026-48977.patch
new file mode 100644
index 0000000..a98ebb1
--- /dev/null
+++ b/ventana-CVE-2026-48977.patch
@@ -0,0 +1,17 @@
+diff --git a/src/openslide-vendor-ventana.c b/src/openslide-vendor-ventana.c
+index 1297cc3f45a6..0fdf8f783329 100644
+--- a/src/openslide-vendor-ventana.c
++++ b/src/openslide-vendor-ventana.c
+@@ -516,6 +516,12 @@ static struct bif *parse_level0_xml(const char *xml,
+ // get tile counts
+ PARSE_INT_ATTRIBUTE_OR_RETURN(info, ATTR_NUM_COLS, area->tiles_across, NULL);
+ PARSE_INT_ATTRIBUTE_OR_RETURN(info, ATTR_NUM_ROWS, area->tiles_down, NULL);
++ if (area->tiles_across < 1 || area->tiles_down < 1) {
++ g_set_error(err, OPENSLIDE_ERROR, OPENSLIDE_ERROR_FAILED,
++ "Area has invalid tile count %"PRId64"x%"PRId64,
++ area->tiles_across, area->tiles_down);
++ return NULL;
++ }
+
+ // get position
+ // it seems these are always whole numbers, but they are sometimes
reply other threads:[~2026-06-08 7:57 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178090545472.1.3658005336920106690.rpms-openslide-021fda826272@fedoraproject.org \
--to=bgilbert@backtick.net \
--cc=git-commits@fedoraproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox