SOURCES/arpwatch-2.1a15-hostname-buffer.patch

@@ -0,0 +1,11 @@
+--- a/db.c	2000-10-01 01:39:58.000000000 +0200
++++ b/db.c	2024-01-03 10:29:20.367656089 +0100
+@@ -62,7 +62,7 @@
+ /* Ethernet info */
+ struct einfo {
+ 	u_char e[6];		/* ether address */
+-	char h[34];		/* simple hostname */
++	char h[64];		/* simple hostname */
+ 	time_t t;		/* timestamp */
+ };
+ 

SOURCES/arpwatch-2.1a15-unbounded-hostname-copy.patch

@@ -0,0 +1,15 @@
+--- a/db.c	2024-01-03 10:36:30.009600848 +0100
++++ b/db.c	2024-02-21 11:35:04.420115207 +0100
+@@ -283,8 +283,10 @@
+ 	BCOPY(e, ep->e, 6);
+ 	if (h == NULL && !initializing)
+ 		h = getsname(a);
+-	if (h != NULL && !isdigit((int)*h))
+-		strcpy(ep->h, h);
++	if (h != NULL) {
++		strncpy(ep->h, h, sizeof(ep->h));
++		ep->h[sizeof(ep->h) - 1] = '\0';
++	}
+ 	ep->t = t;
+ 	return (ep);
+ }

SPECS/arpwatch.spec

@@ -4,7 +4,7 @@
 Name: arpwatch
 Epoch: 14
 Version: 2.1a15
-Release: 44%{?dist}
+Release: 46%{?dist}
 Summary: Network monitoring tools for tracking IP addresses on a network
 Group: Applications/System
 License: BSD with advertising
@@ -41,6 +41,8 @@ Patch17: arpwatch-pie.patch
 Patch18: arpwatch-aarch64.patch
 Patch19: arpwatch-promisc.patch
 Patch20: arpwatch-ethernet-address-format.patch
+Patch21: arpwatch-2.1a15-hostname-buffer.patch
+Patch22: arpwatch-2.1a15-unbounded-hostname-copy.patch
 
 %description
 The arpwatch package contains arpwatch and arpsnmp.  Arpwatch and
@@ -74,6 +76,8 @@ network.
 %patch18 -p1 -b .aarch64
 %patch19 -p1 -b .promisc
 %patch20 -p1 -b .ethernet-address
+%patch21 -p1 -b .hostname-buffer
+%patch22 -p1 -b .hostname-buffer-bound
 
 %build
 %configure
@@ -150,6 +154,16 @@ fi
 %attr(0644,-,arpwatch) %verify(not md5 size mtime) %config(noreplace) %{_vararpwatch}/ethercodes.dat
 
 %changelog
+* Wed Feb 21 2024 Pavel Simovec <psimovec@redhat.com> - 14:2.1a15-46
+- Give a bound to hostname buffer copy
+- Resolves: RHEL-5636
+
+* Thu Jan 25 2024 Pavel Simovec <psimovec@redhat.com> - 14:2.1a15-45
+- rebuilt
+
+* Wed Jan 03 2024 Pavel Simovec <psimovec@redhat.com> - 14:2.1a15-44
+- Increase hostname buffer
+
 * Tue Dec  3 2019 Jan Synáček <jsynacek@redhat.com> - 14:2.1a15-43
 - MAC addresses are not shown properly (#1778313)