| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| 0001-doc-ofonod.8-escape-minus-sign.patch | [PATCH] doc/ofonod.8: escape minus sign I'm a sucker for lintian-cleanliness! |
Jonny Lamb <jonny@debian.org> | no | 2010-11-29 | ||
| 0002-Remove-After-syslog.target-from-systemd-.service-fil.patch | Remove After=syslog.target from systemd .service files | Laurent Bigonville <bigon@bigon.be> | no | 2019-12-29 | ||
| CVE-2023-2794_p1.patch | smsutil: ensure the address length in bytes <= 10 If a specially formatted SMS is received, it is conceivable that the address length might overflow the structure it is being parsed into. Ensure that the length in bytes of the address never exceeds 10. |
Denis Kenzior <denkenz@gmail.com> | no | 2024-02-29 | ||
| CVE-2023-2794_p2.patch | smsutil: Check cbs_dcs_decode return value It is better to explicitly check the return value of cbs_dcs_decode instead of relying on udhi not being changed due to side-effects. |
Denis Kenzior <denkenz@gmail.com> | no | 2024-02-29 | ||
| CVE-2023-2794_p3.patch | simutil: Make sure set_length on the parent succeeds | Denis Kenzior <denkenz@gmail.com> | no | 2024-02-29 | ||
| CVE-2023-2794_p4.patch | smsutil: Use a safer strlcpy sms_address_from_string is meant as private API, to be used with string form addresses that have already been sanitized. However, to be safe, use a safe version of strcpy to avoid overflowing the buffer in case the input was not sanitized properly. While here, add a '__' prefix to the function name to help make it clearer that this API is private and should be used with more care. |
Denis Kenzior <denkenz@gmail.com> | no | 2024-02-29 |