2 ms·
I can't seem to find a link to the patch - I'd like to take a look at the fix. Anyone know where I could find it?
by tjbiddle 12y ago
I can't seem to find a link to the patch - I'd like to take a look at the fix. Anyone know where I could find it?
- DrewHintz 12y agoThis diff appears to contain the patch: https://launchpadlibrarian.net/185571456/apt_0.7.25.3ubuntu9.17_0.7.25.3ubuntu9.17.1.diff.gz https://launchpadlibrarian.net/185571456/apt_0.7.25.3ubuntu9... For example, you can see the change in cdrom: handling code as mentioned in the security notice.
- agwa 12y agoThat doesn't contain the buffer overflow fix. You can tell from the diff of the changelog that the fix is already there.
- agwa 12y agoHere's a diff between apt-0.9.7.9+deb7u4 and apt-0.9.7.9+deb7u5, obtained via `apt-get source`: https://gist.github.com/AGWA/4069e45856ed261ac0af https://gist.github.com/AGWA/4069e45856ed261ac0af You can see the change from a fixed-length buffer to a std::string. This is apt's Git repo, but the commit hasn't landed there yet: https://anonscm.debian.org/cgit/apt/apt.git/ https://anonscm.debian.org/cgit/apt/apt.git/