Re: xfig-3.2.5 diff (CVE-2009-1962)

[Nico Golde <oss-security+ml () ngolde de>]

Hi,
* Tomas Hoger <thoger () redhat com> [2009-06-11 11:31]:
> On Mon, 8 Jun 2009 12:49:48 +0200 Sebastian Krahmer <krahmer () suse de>
> wrote:
>
> > just in case you need it, our maintainer asked me to forward
> > a patch for $SUBJECT which has been fixed in our xfig
> > for quite some time.
>
> Looks like the patch you attached does not differ much from what we use
> for some time too and seems to have an origin here:
>
>   https://bugzilla.redhat.com/show_bug.cgi?id=67351
>
> And it does not differ much from what Nico previously posted:
>
>   http://thread.gmane.org/gmane.comp.security.oss.general/1609
>
> However, Nico's patch, probably taken from Fedora XFig packages, has
> one hunk missing for:

Yes this is the patch by the Fedora maintainer, I took it 
from our Debian package. You are correct, it looks 
incomplete, the hunk is as well missing in our packages.

Roland, can you fix that please?

Cheers
nico
-- 
Nico Golde - http://www.ngolde.de - nion () jabber ccc de - GPG: 0xA0A0AAAA
For security reasons, all text in this mail is double-rot13 encrypted.

Attachment: _bin
Description: