From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from smtp2.osuosl.org (smtp2.osuosl.org [140.211.166.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 86466C4332F for ; Wed, 14 Dec 2022 19:03:58 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp2.osuosl.org (Postfix) with ESMTP id 2A20B40BD5; Wed, 14 Dec 2022 19:03:58 +0000 (UTC) DKIM-Filter: OpenDKIM Filter v2.11.0 smtp2.osuosl.org 2A20B40BD5 X-Virus-Scanned: amavisd-new at osuosl.org Received: from smtp2.osuosl.org ([127.0.0.1]) by localhost (smtp2.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T5nlNByfpj03; Wed, 14 Dec 2022 19:03:57 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by smtp2.osuosl.org (Postfix) with ESMTP id 5B44140BD3; Wed, 14 Dec 2022 19:03:56 +0000 (UTC) DKIM-Filter: OpenDKIM Filter v2.11.0 smtp2.osuosl.org 5B44140BD3 Received: from smtp1.osuosl.org (smtp1.osuosl.org [140.211.166.138]) by ash.osuosl.org (Postfix) with ESMTP id 4852A1BF312 for ; Wed, 14 Dec 2022 19:03:55 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp1.osuosl.org (Postfix) with ESMTP id 2376D8125D for ; Wed, 14 Dec 2022 19:03:55 +0000 (UTC) DKIM-Filter: OpenDKIM Filter v2.11.0 smtp1.osuosl.org 2376D8125D X-Virus-Scanned: amavisd-new at osuosl.org Received: from smtp1.osuosl.org ([127.0.0.1]) by localhost (smtp1.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gx899BX4lBqj for ; Wed, 14 Dec 2022 19:03:54 +0000 (UTC) X-Greylist: from auto-whitelisted by SQLgrey-1.8.0 DKIM-Filter: OpenDKIM Filter v2.11.0 smtp1.osuosl.org 0716D80BFC Received: from relay2-d.mail.gandi.net (relay2-d.mail.gandi.net [217.70.183.194]) by smtp1.osuosl.org (Postfix) with ESMTPS id 0716D80BFC for ; Wed, 14 Dec 2022 19:03:53 +0000 (UTC) Received: (Authenticated sender: peter@korsgaard.com) by mail.gandi.net (Postfix) with ESMTPSA id CA79A4000A; Wed, 14 Dec 2022 19:03:50 +0000 (UTC) Received: from peko by dell.be.48ers.dk with local (Exim 4.94.2) (envelope-from ) id 1p5X2i-000WMX-9R; Wed, 14 Dec 2022 20:03:48 +0100 From: Peter Korsgaard To: Quentin Schulz References: <20221213-cairo-cves-v1-0-b802b492d112@theobroma-systems.com> <20221213-cairo-cves-v1-2-b802b492d112@theobroma-systems.com> Date: Wed, 14 Dec 2022 20:03:48 +0100 In-Reply-To: <20221213-cairo-cves-v1-2-b802b492d112@theobroma-systems.com> (Quentin Schulz's message of "Wed, 14 Dec 2022 12:16:02 +0100") Message-ID: <87len9u7sb.fsf@dell.be.48ers.dk> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux) MIME-Version: 1.0 Subject: Re: [Buildroot] [PATCH 2/2] package/cairo: fix CVE-2020-35492 X-BeenThere: buildroot@buildroot.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Quentin Schulz , Fabrice Fontaine , buildroot@buildroot.org Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: buildroot-bounces@buildroot.org Sender: "buildroot" >>>>> "Quentin" == Quentin Schulz writes: > From: Quentin Schulz > Add an upstream patch to fix CVE-2020-35492: > A flaw was found in cairo's image-compositor.c in all versions prior to > 1.17.4. This flaw allows an attacker who can provide a crafted input > file to cairo's image-compositor (for example, by convincing a user to > open a file in an application using cairo, or if an application uses > cairo on untrusted input) to cause a stack buffer overflow -> > out-of-bounds WRITE. The highest impact from this vulnerability is to > confidentiality, integrity, as well as system availability. > Important note: this is not the exact upstream patch. Indeed, the > upstream patch[1] contains a png file which appears as a binary diff > inside the patch. The `patch` tool which is used by Buildroot to apply > patches does not handle that kind of diff. Since it is just a test, it > shouldn't impact the quality of the CVE fix and all changes related to > the test are removed from the patch. > [1] https://gitlab.freedesktop.org/cairo/cairo/-/commit/03a820b173ed1fdef6ff14b4468f5dbc02ff59be > Cc: Quentin Schulz > Signed-off-by: Quentin Schulz Committed, thanks. -- Bye, Peter Korsgaard _______________________________________________ buildroot mailing list buildroot@buildroot.org https://lists.buildroot.org/mailman/listinfo/buildroot