Debian Patches

Status for ofono/1.31-4

Patch Description Author Forwarded Bugs Origin Last update
0001-doc-ofonod.8-escape-minus-sign.patch [PATCH] doc/ofonod.8: escape minus sign
I'm a sucker for lintian-cleanliness!
Jonny Lamb <jonny@debian.org> no 2010-11-29
0002-Remove-After-syslog.target-from-systemd-.service-fil.patch Remove After=syslog.target from systemd .service files Laurent Bigonville <bigon@bigon.be> no 2019-12-29
CVE-2023-2794_p1.patch smsutil: ensure the address length in bytes <= 10
If a specially formatted SMS is received, it is conceivable that the
address length might overflow the structure it is being parsed into.
Ensure that the length in bytes of the address never exceeds 10.
Denis Kenzior <denkenz@gmail.com> no 2024-02-29
CVE-2023-2794_p2.patch smsutil: Check cbs_dcs_decode return value
It is better to explicitly check the return value of cbs_dcs_decode
instead of relying on udhi not being changed due to side-effects.
Denis Kenzior <denkenz@gmail.com> no 2024-02-29
CVE-2023-2794_p3.patch simutil: Make sure set_length on the parent succeeds Denis Kenzior <denkenz@gmail.com> no 2024-02-29
CVE-2023-2794_p4.patch smsutil: Use a safer strlcpy
sms_address_from_string is meant as private API, to be used with string
form addresses that have already been sanitized. However, to be safe,
use a safe version of strcpy to avoid overflowing the buffer in case the
input was not sanitized properly. While here, add a '__' prefix to the
function name to help make it clearer that this API is private and
should be used with more care.
Denis Kenzior <denkenz@gmail.com> no 2024-02-29

All known versions for source package 'ofono'

Links