Hello community, here is the log from the commit of package libgcrypt checked in at Thu Sep 13 18:48:03 CEST 2007. -------- --- libgcrypt/libgcrypt.changes 2007-02-05 10:26:10.000000000 +0100 +++ /mounts/work_src_done/STABLE/libgcrypt/libgcrypt.changes 2007-09-13 01:29:52.000000000 +0200 @@ -1,0 +2,5 @@ +Thu Sep 13 01:28:53 CEST 2007 - ltinkl@suse.cz + +- add sanity check for mpi of size 0 (#304479) + +------------------------------------------------------------------- New: ---- libgcrypt-mpicheck.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libgcrypt.spec ++++++ --- /var/tmp/diff_new_pack.g26816/_old 2007-09-13 18:47:42.000000000 +0200 +++ /var/tmp/diff_new_pack.g26816/_new 2007-09-13 18:47:42.000000000 +0200 @@ -14,14 +14,15 @@ BuildRequires: libgpg-error-devel URL: http://www.gnu.org/directory/Security/libgcrypt.html Version: 1.2.4 -Release: 1 +Release: 36 Summary: The GNU Crypto Library -License: GNU General Public License (GPL), GNU Library General Public License v. 2.0 and 2.1 (LGPL) +License: GPL v2 or later, LGPL v2 or later Group: Development/Libraries/C and C++ Autoreqprov: on Source: %name-%version.tar.bz2 Patch0: %name-ppc64.patch Patch1: libgcrypt-strict-aliasing.patch +Patch2: libgcrypt-mpicheck.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build PreReq: %install_info_prereq @@ -72,6 +73,7 @@ %setup -q -n libgcrypt-%version %patch0 -p1 %patch1 +%patch2 %build %{?suse_update_config} @@ -124,7 +126,9 @@ %_includedir/* %_datadir/aclocal/* -%changelog -n libgcrypt +%changelog +* Thu Sep 13 2007 - ltinkl@suse.cz +- add sanity check for mpi of size 0 (#304479) * Mon Feb 05 2007 - mkoenig@suse.de - update to version 1.2.4: * Fixed a bug in the memory allocator which could have been the ++++++ libgcrypt-mpicheck.patch ++++++ --- mpi/mpicoder.c +++ mpi/mpicoder.c @@ -51,7 +51,9 @@ else if (!nbits) { log_error ("an mpi of size 0 is not allowed\n"); +/* goto leave; +*/ } buffer += 2; nread = 2; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org