[Bug 250971] textproc/raptor2 heap overflow

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250971

--- Comment #3 from commit-hook at FreeBSD.org ---
A commit references this bug:

Author: tcberner
Date: Mon Nov  9 05:30:11 UTC 2020
New revision: 554671
URL: https://svnweb.freebsd.org/changeset/ports/554671

Log:
  textproc/raptor2 heap overflow

  According to https://www.openwall.com/lists/oss-security/2017/06/07/1 there
are
  two heap overflows in raptor 2.0.15.

  A CVE has been assigned:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18926

  The upstream raptor github repo has a patch:
   
https://github.com/dajobe/raptor/commit/590681e546cd9aa18d57dc2ea1858cb734a3863f.patch

  PR:           250971
  Submitted by: truckman
  MFH:          2020Q4
  Security:     CVE-2017-18926

Changes:
  head/textproc/raptor2/Makefile
  head/textproc/raptor2/files/
  head/textproc/raptor2/files/patch-CVE-2017-18926

-- 
You are receiving this mail because:
You are the assignee for the bug.