Debian Patches

Status for libcdio/2.1.0-5

Patch Description Author Forwarded Bugs Origin Last update
Use-getmntent-setmntent-for-reading-mounts.patch [PATCH] Use getmntent/setmntent for reading mounts
Since fields in the mtab and fstab files are separated by
whitespace, octal escapes are used to represent the characters
space (\040), tab (\011), newline (\012), and backslash (\\) in
those files when they occur in one of the four strings in a
mntent structure. The routines addmntent() and getmntent() will
convert from string representation to escaped representation and
back. When converting from escaped representation, the sequence
\134 is also converted to a backslash.
Miguel Borges de Freitas <enen92@kodi.tv> no 2022-02-02
arm-t64-redirect-fix.patch Fix implicit declaration after armhf time_t transition
===================================================================
Zixing Liu <zixing.liu@canonical.com> no 2024-04-03
CVE-2024-36600-1.patch Allocate enough space for growth and additional buffer Mansour Gashasbi <gashasbi@gmail.com> no 2024-05-16
CVE-2024-36600-2.patch Limit the maximum read count to prevent overflow Mansour Gashasbi <gashasbi@gmail.com> no 2024-05-16
CVE-2024-36600-3.patch Add input validation to unicode16_decode function Mansour Gashasbi <gashasbi@gmail.com> no 2024-05-16
CVE-2024-36600-4.patch Add bounds checking for directory buffer size and total size calculation Mansour Gashasbi <gashasbi@gmail.com> no 2024-05-16
CVE-2024-36600-5.patch Fix overflow in iso9660 dir read (32-bit) Mansour Gashasbi <gashasbi@gmail.com> no 2024-05-19
CVE-2024-36600-6.patch Check the validity of i_extended_attr member in udf_get_lba() Mansour Gashasbi <gashasbi@gmail.com> no 2024-05-22
CVE-2024-36600-7.patch Add 32-bit size teset only when needed "R. Bernstein" <rocky@gnu.org> no 2024-05-23
ncursesw.diff Use ncursesw instead of ncurses
diff --git a/configure.ac b/configure.ac
index 5f9f9e78..7fcf6a64 100644
no
Drop-LIBCDIO_SOURCE_PATH-by-dropping-STRIP_FROM_PATH.patch [PATCH] Drop LIBCDIO_SOURCE_PATH by dropping STRIP_FROM_PATH Doxygen setup; it's not used as FULL_PATH_NAMES = no Chris Lamb <chris@chris-lamb.co.uk> no 2017-07-28
src-cdda-player.c-always-use-s-style-format-for-prin.patch [PATCH] src/cdda-player.c: always use "%s"-style format for printf()-style functions

`ncuses-6.3` added printf-style function attributes and now makes
it easier to catch cases when user input is used in palce of format
string when built with CFLAGS=-Werror=format-security:

cdda-player.c:1032:31:
error: format not a string literal and no format arguments [-Werror=format-security]
1032 | mvprintw(i_line++, 0, line);
| ^~~~

Let's wrap all the missing places with "%s" format.
Sergei Trofimovich <slyich@gmail.com> no 2021-11-01
Correct-realpath-test-failure.patch Correct realpath test failure
See https://savannah.gnu.org/bugs/?62948
Patch courtesy of Martin Liška <marxin>

(cherry picked from commit 56335fff0f21d294cd0e478d49542a43e9495ed0)
"R. Bernstein" <rocky@gnu.org> no 2022-08-24

All known versions for source package 'libcdio'

Links