Compare commits

..

29 Commits
epel8 ... epel9

Author SHA1 Message Date
Dominik Mierzejewski 0405e4a510 Merge branch 'f38' into epel9
1 year ago
Dominik Mierzejewski 8257e1073c Revert "Drop utf8cpp for now"
1 year ago
Dominik Mierzejewski 6d52edf6f9 upload forgotten sources
1 year ago
Dominik Mierzejewski 5aad11d939 update to 1.4.5 (#2254413)
1 year ago
Fedora Release Engineering a9620bbc70 Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
2 years ago
Dominik Mierzejewski b26907d850 Merge branch 'f36' into f37
2 years ago
Dominik Mierzejewski c8d749706b Merge branch 'f35' into f36
2 years ago
Dominik Mierzejewski 0604721266 update to 1.4.4 (#2131232)
2 years ago
Fedora Release Engineering 42b44f7058 Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
3 years ago
Nicolas Chauvet 119cdb5e5e Drop utf8cpp for now
3 years ago
Fedora Release Engineering 113a4cf52d - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
3 years ago
Fedora Release Engineering 3a603f6002 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
4 years ago
Dominik 'Rathann' Mierzejewski 5ff3415971 fix build with GCC-11
4 years ago
Dominik 'Rathann' Mierzejewski 2060f747bf Merge branch 'f33' into f34
4 years ago
Dominik 'Rathann' Mierzejewski bd003920c3 Merge branch 'f32' into f33
4 years ago
Dominik 'Rathann' Mierzejewski abd46b2059 update to 1.4.2 (#1930172)
4 years ago
Fedora Release Engineering 50752b872b - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
4 years ago
Dominik 'Rathann' Mierzejewski 5824335c16 Merge branch 'f32' into f33
4 years ago
Dominik 'Rathann' Mierzejewski ab17a962e2 update to 1.4.1 (#1912485)
4 years ago
Hans de Goede d4bd039df5 Fix FTBFS, straight-forward cmake macro fix (rhbz#1863992)
5 years ago
Fedora Release Engineering 7a27ff1467 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
5 years ago
Fedora Release Engineering de89fc3858 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
5 years ago
Dominik 'Rathann' Mierzejewski a04a351c48 Merge branch 'f31' into f32
5 years ago
Dominik 'Rathann' Mierzejewski f09fb2eaed update to 1.4.0 (#1851593), ABI bump
5 years ago
Fedora Release Engineering 3be9d7fdb9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
5 years ago
Dominik 'Rathann' Mierzejewski a1f14ebea9 Merge branch 'f30' into f31
5 years ago
Dominik 'Rathann' Mierzejewski 31be0ec26a update to 1.3.10 (#1782287)
5 years ago
Dominik 'Rathann' Mierzejewski 6558c8af7d Merge branch 'f30' into f31
5 years ago
Dominik 'Rathann' Mierzejewski 15432e0525 Merge branch 'f29' into f30
5 years ago

6
.gitignore vendored

@ -10,3 +10,9 @@ libebml-1.0.0.tar.bz2
/libebml-1.3.6.tar.xz /libebml-1.3.6.tar.xz
/libebml-1.3.7.tar.xz /libebml-1.3.7.tar.xz
/libebml-1.3.9.tar.xz /libebml-1.3.9.tar.xz
/libebml-1.3.10.tar.xz
/libebml-1.4.0.tar.xz
/libebml-1.4.1.tar.xz
/libebml-1.4.2.tar.xz
/libebml-1.4.4.tar.xz
/libebml-1.4.5.tar.xz

@ -1,31 +0,0 @@
diff -up libebml-1.3.9/src/MemIOCallback.cpp.cve-2023-52339 libebml-1.3.9/src/MemIOCallback.cpp
--- libebml-1.3.9/src/MemIOCallback.cpp.cve-2023-52339 2024-02-02 13:48:28.626522658 +0100
+++ libebml-1.3.9/src/MemIOCallback.cpp 2024-02-02 13:49:59.620078963 +0100
@@ -68,7 +68,8 @@ uint32 MemIOCallback::read(void *Buffer,
if (Buffer == NULL || Size < 1)
return 0;
//If the size is larger than than the amount left in the buffer
- if (Size + dataBufferPos > dataBufferTotalSize) {
+ if (Size + dataBufferPos < Size || // overflow, reading too much
+ Size + dataBufferPos > dataBufferTotalSize) {
//We will only return the remaining data
memcpy(Buffer, dataBuffer + dataBufferPos, dataBufferTotalSize - dataBufferPos);
uint64 oldDataPos = dataBufferPos;
@@ -95,6 +96,8 @@ void MemIOCallback::setFilePointer(int64
size_t MemIOCallback::write(const void *Buffer, size_t Size)
{
+ if (dataBufferPos + Size < Size) // overflow, we can't hold that much
+ return 0;
if (dataBufferMemorySize < dataBufferPos + Size) {
//We need more memory!
dataBuffer = (binary *)realloc((void *)dataBuffer, dataBufferPos + Size);
@@ -109,6 +112,8 @@ size_t MemIOCallback::write(const void *
uint32 MemIOCallback::write(IOCallback & IOToRead, size_t Size)
{
+ if (dataBufferPos + Size < Size) // overflow, we can't hold that much
+ return 0;
if (dataBufferMemorySize < dataBufferPos + Size) {
//We need more memory!
dataBuffer = (binary *)realloc((void *)dataBuffer, dataBufferPos + Size);

@ -1,12 +1,12 @@
diff -up libebml-1.3.7/src/EbmlUnicodeString.cpp.utf8cpp libebml-1.3.7/src/EbmlUnicodeString.cpp diff -up libebml-1.4.4/src/EbmlUnicodeString.cpp.utf8cpp libebml-1.4.4/src/EbmlUnicodeString.cpp
--- libebml-1.3.7/src/EbmlUnicodeString.cpp.utf8cpp 2019-03-12 20:27:42.000000000 +0100 --- libebml-1.4.4/src/EbmlUnicodeString.cpp.utf8cpp 2022-10-11 13:11:14.129418820 +0200
+++ libebml-1.3.7/src/EbmlUnicodeString.cpp 2019-06-07 22:54:39.002363241 +0200 +++ libebml-1.4.4/src/EbmlUnicodeString.cpp 2022-10-11 13:11:44.405608490 +0200
@@ -39,7 +39,7 @@ @@ -40,7 +40,7 @@
#include "ebml/EbmlUnicodeString.h" #include "ebml/EbmlUnicodeString.h"
-#include "lib/utf8-cpp/source/utf8/checked.h" -#include "lib/utf8-cpp/source/utf8/checked.h"
+#include <utf8/checked.h> +#include <utf8/checked.h>
START_LIBEBML_NAMESPACE namespace libebml {

@ -1,13 +1,11 @@
Summary: Extensible Binary Meta Language library Summary: Extensible Binary Meta Language library
Name: libebml Name: libebml
Version: 1.3.9 Version: 1.4.5
Release: 2%{?dist} Release: 1%{?dist}
License: LGPLv2+ License: LGPLv2+
URL: https://www.matroska.org/ URL: https://www.matroska.org/
Source: https://dl.matroska.org/downloads/%{name}/%{name}-%{version}.tar.xz Source: https://dl.matroska.org/downloads/%{name}/%{name}-%{version}.tar.xz
Patch0: %{name}-use-system-utf8cpp.patch Patch0: %{name}-use-system-utf8cpp.patch
# https://github.com/Matroska-Org/libebml/pull/148
Patch1: %{name}-cve-2023-52339.patch
BuildRequires: cmake3 BuildRequires: cmake3
BuildRequires: gcc-c++ BuildRequires: gcc-c++
BuildRequires: utf8cpp-devel BuildRequires: utf8cpp-devel
@ -36,17 +34,16 @@ will use the Extensible Binary Meta Language library.
%prep %prep
%setup -q %setup -q
%patch0 -p1 -b .utf8cpp %patch0 -p1 -b .utf8cpp
%patch1 -p1 -b .cve-2023-52339
rm -r src/lib/utf8-cpp rm -r src/lib/utf8-cpp
%build %build
%cmake3 . %cmake3
make %{?_smp_mflags} %cmake3_build
%install %install
%make_install %cmake3_install
%ldconfig_scriptlets %ldconfig_scriptlets
@ -54,8 +51,8 @@ make %{?_smp_mflags}
%files %files
%license LICENSE.LGPL %license LICENSE.LGPL
%doc ChangeLog %doc NEWS.md
%{_libdir}/%{name}.so.4* %{_libdir}/%{name}.so.5*
%files devel %files devel
%{_includedir}/ebml/ %{_includedir}/ebml/
@ -69,12 +66,63 @@ make %{?_smp_mflags}
%changelog %changelog
* Fri Feb 02 2024 Dominik Mierzejewski <rpm@greysector.net> - 1.3.9-2 * Fri Feb 02 2024 Dominik Mierzejewski <dominik@greysector.net> - 1.4.5-1
- backport fix for CVE-2023-52339 (#2258048, #2258046) - update to 1.4.5 (#2254413)
- fixes CVE-2023-52339 (#2258046, #2258047)
* Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Tue Oct 11 2022 Dominik Mierzejewski <dominik@greysector.net> - 1.4.4-1
- update to 1.4.4 (#2131232)
- drop obsolete patch
* Thu Jul 21 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.2-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Jul 22 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Wed Feb 24 2021 Dominik Mierzejewski <rpm@greysector.net> - 1.4.2-1
- update to 1.4.2 (#1930172)
- fixes CVE-2021-3405 (#1926991)
- fix build with GCC-11
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Mon Jan 25 2021 Dominik Mierzejewski <rpm@greysector.net> - 1.4.1-1
- update to 1.4.1 (#1912485)
- fixes heap use-after-free when parsing malformed file (https://gitlab.com/mbunkus/mkvtoolnix/-/issues/2989)
* Mon Aug 10 2020 Hans de Goede <hdegoede@redhat.com> - 1.4.0-4
- Fix FTBFS, straight-forward cmake macro fix (rhbz#1863992)
* Sat Aug 01 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.0-3
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jul 07 2020 Dominik Mierzejewski <rpm@greysector.net> - 1.4.0-1
- update to 1.4.0 (#1851593), ABI bump
* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.10-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Tue Dec 24 2019 Dominik Mierzejewski <rpm@greysector.net> - 1.3.10-1
- update to 1.3.10 (#1782287)
* Tue Sep 10 2019 Dominik Mierzejewski <rpm@greysector.net> - 1.3.9-1 * Tue Sep 10 2019 Dominik Mierzejewski <rpm@greysector.net> - 1.3.9-1
- update to 1.3.9 (#1688001) - update to 1.3.9 (#1688001)
* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.7-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Jun 07 2019 Dominik Mierzejewski <rpm@greysector.net> - 1.3.7-1 * Fri Jun 07 2019 Dominik Mierzejewski <rpm@greysector.net> - 1.3.7-1
- update to 1.3.7 - update to 1.3.7
- unbundle utf8cpp - unbundle utf8cpp
@ -93,9 +141,21 @@ make %{?_smp_mflags}
- add missing dependencies to -devel subpackage - add missing dependencies to -devel subpackage
- use license and ldconfig_scriptlets macros - use license and ldconfig_scriptlets macros
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.5-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Aug 23 2017 Dominik Mierzejewski <rpm@greysector.net> - 1.3.5-1 * Wed Aug 23 2017 Dominik Mierzejewski <rpm@greysector.net> - 1.3.5-1
- update to 1.3.5 (#1483228) - update to 1.3.5 (#1483228)
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.4-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.4-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.4-2 * Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

@ -1 +1 @@
SHA512 (libebml-1.3.9.tar.xz) = a388fa8ff7acf9a0fb33faf9c00fc07f53794d86a4f894e04e2a690a24e781a7f380a0896e607e801a6f1f0b215407ee09a801e96d4b3e15f39ca71ec3a6d64e SHA512 (libebml-1.4.5.tar.xz) = 6ee2afd538de8b028a1acd4a0f00a8aa230deac297573d868683e96f22fa4953858d3a1d8ab414ac27757f35699e6149f0aaef6eb4d235baa79226d8f36ccb5c

Loading…
Cancel
Save