Re: Buffer overflow in the StringQuotedWord() function
Matěj Cepl <[email protected]> Thu, 22 Oct 2020 08:09:24 +0200
| Newsgroups | gmane.comp.type-setting.lout |
|---|---|
| Organization | <>< |
| Message-ID | <[email protected]> |
--=-lgyhrRnSdrdtCMG85Ttk Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable William Bader p=C3=AD=C5=A1e v =C4=8Ct 22. 10. 2020 v 04:42 +0000: > > I have the descriptions below, and I attached the example files that ca= use the problems (although the mailing list might strip it). > I am willing to look at it next week if no one else is already looking at= it. If anybody provides patches for these CVEs, I will very happily apply them to both SUSE and Fedora packages. If anybody creates a new home for lout and collects all patches flying around in the great FLOSS tradition, I will happily change the packages as well. Best, Mat=C4=9Bj --=20 https://matej.ceplovi.cz/blog/, Jabber: [email protected] GPG Finger: 3C76 A027 CA45 AD70 98B5 BC1D 7920 5802 880B C9D8 =20 I am a Roman Catholic, so that I do not expect `history' to be anything but a `long defeat' -- though it contains (and in a legend may contain more clearly and movingly) some samples or glimpses of final victory. -- J.R.R. Tolkien --=-lgyhrRnSdrdtCMG85Ttk Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEPHagJ8pFrXCYtbwdeSBYAogLydgFAl+RIhQACgkQeSBYAogL ydhttw//biknIZtsCKWboQJgFw/RUpemPNYO4BEFUAYvS6jeNPIzPY0lfAg/lmB0 phswHTty/guUcFe4zIFE1Xp55OD0QkI+HqUgAKiAnMvBo7YHBbhHiWlMB7HQUIuC xZjBY73AZO1lxKI7n0vcgQO0HCVOKYuck4USowSiEkbVHxZzOjsRdvA7UVlOcbMV UnsZYm2N6WHkAt9CmvXsfJxAvGOKbX9dao4sgEbh9wAcY/CfGTjUmLnzxTVyNByZ iNqgq+1AxDwl9OeZv1JY3qbxXv6hAYIcGP/LEwOUBtdVFdaoIAXj2a4WiqjuSFdd yioOoJ5XMYzOX3qAB0YFo/NnCE5cuQ4q7NRAvXGD54NG5GoUZfOsX3RGOBJnp/jF ozkCJhPOfh4C+kJBSbgk/hSTrkjclqBPNVn7CzPAFKTBWw8eC1aLtf2iRrZbdExy jTf9g+bGbaR2zHAjJVSdFXW1R9ok8GWyoxmC2tvjCFsqyaaqrGYAoOed8kVhKoEe XDXxzuazxfErkkhF0LPykGVD2Egz5vsLRP9Zm45iy2CggZ/HPPrPl7MIg0NJvlpJ /a6WUHpboMKDwrnxW1BQfC3Iw7NL13m5qbld45Bjyjy5e9ju8EpzrrnA5e8yWxPW MDmOKxNlWT53T97LC9p5DFIAYcyCq8NyfJMTZDPuLM4I0Gfk6eY= =CkKc -----END PGP SIGNATURE----- --=-lgyhrRnSdrdtCMG85Ttk--