[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
02/02: gnu: libevent-2.0: Include CVE IDs in patches.
|
From: |
Leo Famulari |
|
Subject: |
02/02: gnu: libevent-2.0: Include CVE IDs in patches. |
|
Date: |
Thu, 2 Feb 2017 15:53:01 +0000 (UTC) |
lfam pushed a commit to branch core-updates
in repository guix.
commit e83ef684fc1b490cd54612339a909203d5b94fa4
Author: Leo Famulari <address@hidden>
Date: Thu Feb 2 10:48:53 2017 -0500
gnu: libevent-2.0: Include CVE IDs in patches.
* gnu/packages/patches/libevent-2.0-evdns-fix-remote-stack-overread.patch,
gnu/packages/patches/libevent-2.0-evutil-fix-buffer-overflow.patch,
gnu/packages/patches/libevent-2.0-evdns-fix-searching-empty-hostnames.patch:
Rename to ...
* gnu/packages/patches/libevent-2.0-CVE-2016-10195.patch,
gnu/packages/patches/libevent-2.0-CVE-2016-10196.patch,
gnu/packages/patches/libevent-2.0-CVE-2016-10197.patch: ... new files.
* gnu/local.mk (dist_patch_DATA): Adjust accordingly.
* gnu/packages/libevent.scm (libevent-2.0)[sources]: Likewise.
---
gnu/local.mk | 6 +++---
gnu/packages/libevent.scm | 6 +++---
...te-stack-overread.patch => libevent-2.0-CVE-2016-10195.patch} | 5 ++---
...x-buffer-overflow.patch => libevent-2.0-CVE-2016-10196.patch} | 5 ++---
...g-empty-hostnames.patch => libevent-2.0-CVE-2016-10197.patch} | 5 ++---
5 files changed, 12 insertions(+), 15 deletions(-)
diff --git a/gnu/local.mk b/gnu/local.mk
index e1b4780..ad3be4b 100644
--- a/gnu/local.mk
+++ b/gnu/local.mk
@@ -668,9 +668,9 @@ dist_patch_DATA =
\
%D%/packages/patches/libdrm-symbol-check.patch \
%D%/packages/patches/libepoxy-gl-null-checks.patch \
%D%/packages/patches/libevent-dns-tests.patch \
- %D%/packages/patches/libevent-2.0-evdns-fix-remote-stack-overread.patch
\
- %D%/packages/patches/libevent-2.0-evdns-fix-searching-empty-hostnames.patch
\
- %D%/packages/patches/libevent-2.0-evutil-fix-buffer-overflow.patch \
+ %D%/packages/patches/libevent-2.0-CVE-2016-10195.patch \
+ %D%/packages/patches/libevent-2.0-CVE-2016-10196.patch \
+ %D%/packages/patches/libevent-2.0-CVE-2016-10197.patch \
%D%/packages/patches/libevent-2.1-dns-tests.patch \
%D%/packages/patches/libevent-2.1-skip-failing-test.patch \
%D%/packages/patches/libextractor-ffmpeg-3.patch \
diff --git a/gnu/packages/libevent.scm b/gnu/packages/libevent.scm
index bef09f9..f26ce63 100644
--- a/gnu/packages/libevent.scm
+++ b/gnu/packages/libevent.scm
@@ -80,9 +80,9 @@ loop.")
"18qz9qfwrkakmazdlwxvjmw8p76g70n3faikwvdwznns1agw9hki"))
(patches (search-patches
"libevent-dns-tests.patch"
- "libevent-2.0-evdns-fix-remote-stack-overread.patch"
- "libevent-2.0-evutil-fix-buffer-overflow.patch"
-
"libevent-2.0-evdns-fix-searching-empty-hostnames.patch"))))))
+ "libevent-2.0-CVE-2016-10195.patch"
+ "libevent-2.0-CVE-2016-10196.patch"
+ "libevent-2.0-CVE-2016-10197.patch"))))))
(define-public libev
(package
diff --git
a/gnu/packages/patches/libevent-2.0-evdns-fix-remote-stack-overread.patch
b/gnu/packages/patches/libevent-2.0-CVE-2016-10195.patch
similarity index 89%
rename from
gnu/packages/patches/libevent-2.0-evdns-fix-remote-stack-overread.patch
rename to gnu/packages/patches/libevent-2.0-CVE-2016-10195.patch
index f1907d5..bffe2c4 100644
--- a/gnu/packages/patches/libevent-2.0-evdns-fix-remote-stack-overread.patch
+++ b/gnu/packages/patches/libevent-2.0-CVE-2016-10195.patch
@@ -1,7 +1,6 @@
-Fix buffer overread in libevents DNS code.
-
-Upstream bug report:
+Fix CVE-2016-10195 (buffer overread in libevent's DNS code):
+https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10195
https://github.com/libevent/libevent/issues/317
Patch copied from upstream source repository:
diff --git a/gnu/packages/patches/libevent-2.0-evutil-fix-buffer-overflow.patch
b/gnu/packages/patches/libevent-2.0-CVE-2016-10196.patch
similarity index 90%
rename from gnu/packages/patches/libevent-2.0-evutil-fix-buffer-overflow.patch
rename to gnu/packages/patches/libevent-2.0-CVE-2016-10196.patch
index 4d16a4b..03f96e9 100644
--- a/gnu/packages/patches/libevent-2.0-evutil-fix-buffer-overflow.patch
+++ b/gnu/packages/patches/libevent-2.0-CVE-2016-10196.patch
@@ -1,7 +1,6 @@
-Fix buffer overflow in evutil.
-
-Upstream bug report:
+Fix CVE-2016-10196 (buffer overflow in evutil):
+https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10196
https://github.com/libevent/libevent/issues/318
Patch copied from upstream source repository:
diff --git
a/gnu/packages/patches/libevent-2.0-evdns-fix-searching-empty-hostnames.patch
b/gnu/packages/patches/libevent-2.0-CVE-2016-10197.patch
similarity index 89%
rename from
gnu/packages/patches/libevent-2.0-evdns-fix-searching-empty-hostnames.patch
rename to gnu/packages/patches/libevent-2.0-CVE-2016-10197.patch
index c4ad0a1..c62a328 100644
---
a/gnu/packages/patches/libevent-2.0-evdns-fix-searching-empty-hostnames.patch
+++ b/gnu/packages/patches/libevent-2.0-CVE-2016-10197.patch
@@ -1,7 +1,6 @@
-Fix OOB read on empty hostnames in evdns.
-
-Upstream bug report:
+Fix CVE-2016-10197 (out of bounds read on empty hostnames in evdns):
+https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10197
https://github.com/libevent/libevent/issues/332
Patch copied from upstream source repository: