diff options
author | V3n3RiX <venerix@koprulu.sector> | 2023-10-10 00:07:53 +0100 |
---|---|---|
committer | V3n3RiX <venerix@koprulu.sector> | 2023-10-10 00:07:53 +0100 |
commit | 024d1b6f101ade7073320fba887d4808c933a8e8 (patch) | |
tree | 421168a6409273df1171f750816ce32dc2779a4f /media-libs/libcue | |
parent | 4e4ee9865a958b6a854f9bca96637244c628d525 (diff) |
gentoo auto-resync : 10:10:2023 - 00:07:53
Diffstat (limited to 'media-libs/libcue')
-rw-r--r-- | media-libs/libcue/Manifest | 2 | ||||
-rw-r--r-- | media-libs/libcue/files/CVE-2023-43641.patch | 15 | ||||
-rw-r--r-- | media-libs/libcue/libcue-2.2.1-r1.ebuild | 24 |
3 files changed, 41 insertions, 0 deletions
diff --git a/media-libs/libcue/Manifest b/media-libs/libcue/Manifest index 9adf7b421ab7..5fc6aac13aa9 100644 --- a/media-libs/libcue/Manifest +++ b/media-libs/libcue/Manifest @@ -1,3 +1,5 @@ +AUX CVE-2023-43641.patch 409 BLAKE2B 141e918945e422f84602df33b43f4ab4aebd6dc44985d9908c83cce5514311b5610a274766cc9857a9fdffc0fac332f501c94364731320c34b817e9d30c231e0 SHA512 fd756d6949ed8032e6a4f4a3d0cd88d49f251e494df05497704b769c4d5157ecd5944b788ec4f6af60c4d461a346ed72b3e32f0926cd1ff66b9a8f67a199c7a9 DIST libcue-2.2.1.tar.gz 24177 BLAKE2B 478f897567aee006c9e835bbf6e54373351b6b4e4bb68154c94f13107b38bdb670fa032d69744e7dbc51132d86dbf276cbf9701c9d7da0882820b71adae53362 SHA512 32e476cb09ed2cb2d64aaba1342fb91e77e448391b493a3a794a8d2a6723a0e6097a90b11c6ad82998cb7f270f4f18c2578d7b8575f6929c2a35502e09ebc964 +EBUILD libcue-2.2.1-r1.ebuild 512 BLAKE2B e62dd095bb69abff29aafa80d3c3162a0e88a78ef3e66d4687b66b8adc4b22216dadb23c3bc9e7f66cb86cdf9ba6cfd9b946c34e95c27ee6dff0200475a13b0c SHA512 5bb5750ba619e5786010f18e5cdef510298e93b0e43b5c35448d0dec4193a78594c2e501b1391ea748efe210ec2ce50ccc50ad0c78cad258e096173b63ed4669 EBUILD libcue-2.2.1.ebuild 456 BLAKE2B 24a08f91791c356c67eaf9c56659c6e034d00d12ac842b385677cd0876d38a22994b2bf4ca456772af95fd7c3c807183671d2a78f8be605a3fad7f478c54ed11 SHA512 f50794fd7560a78509c1eb6743e2b2ff60e97eb2ce61e3b3a28db46ca7eda1fde9181cf875878ebbad37b5ebddd55ff15e48b8dafb8b18d1e07382b00c937855 MISC metadata.xml 334 BLAKE2B 02d441ff7dcdb2138ee06f2819e25c49f313b71ed0c6f742e4dcfbf6b32cf619850e4b13ffd611ecac9374d3ffdfbe9115bd668f83024c83de25452bf88e5c02 SHA512 1bcdf9c97b0cf3e40cbc2a751f7c9e9f93f2a5995ebafbfacff2dcd023caf99cbeb18101a683dcf2ad9e5acdd697fc487bbb693131ef02e675fd189e77c805db diff --git a/media-libs/libcue/files/CVE-2023-43641.patch b/media-libs/libcue/files/CVE-2023-43641.patch new file mode 100644 index 000000000000..b94de663aaa0 --- /dev/null +++ b/media-libs/libcue/files/CVE-2023-43641.patch @@ -0,0 +1,15 @@ +https://github.blog/2023-10-09-coordinated-disclosure-1-click-rce-on-gnome-cve-2023-43641/ + +diff --git a/cd.c b/cd.c +index cf77a18..4bbea19 100644 +--- a/cd.c ++++ b/cd.c +@@ -339,7 +339,7 @@ track_get_rem(const Track* track) + + void track_set_index(Track *track, int i, long ind) + { +- if (i > MAXINDEX) { ++ if (i < 0 || i > MAXINDEX) { + fprintf(stderr, "too many indexes\n"); + return; + } diff --git a/media-libs/libcue/libcue-2.2.1-r1.ebuild b/media-libs/libcue/libcue-2.2.1-r1.ebuild new file mode 100644 index 000000000000..979036a6ead3 --- /dev/null +++ b/media-libs/libcue/libcue-2.2.1-r1.ebuild @@ -0,0 +1,24 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +inherit cmake + +DESCRIPTION="CUE Sheet Parser Library" +HOMEPAGE="https://github.com/lipnitsk/libcue" +SRC_URI="https://github.com/lipnitsk/${PN}/archive/v${PV}.tar.gz -> ${P}.tar.gz" + +LICENSE="GPL-2" +SLOT="0/2" +KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~loong ~ppc ~ppc64 ~riscv ~sparc ~x86" +IUSE="" + +BDEPEND=" + sys-devel/bison + sys-devel/flex +" + +PATCHES=( + "${FILESDIR}"/CVE-2023-43641.patch +) |