summaryrefslogtreecommitdiff
path: root/Build/source/texk/dvipsk/ChangeLog
diff options
context:
space:
mode:
authorKarl Berry <karl@freefriends.org>2010-03-25 23:58:27 +0000
committerKarl Berry <karl@freefriends.org>2010-03-25 23:58:27 +0000
commitdd8a83212fcabcff4600aa0a9d7f3264b0fd07dd (patch)
tree1b5df041965fd25b2f7abc04117ba45b1c174eb1 /Build/source/texk/dvipsk/ChangeLog
parent5c71f7dcce52cab382d58624cc13df5caf788723 (diff)
avoid sprintf buffer overflow, CVE-2010-0827
git-svn-id: svn://tug.org/texlive/trunk@17560 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Build/source/texk/dvipsk/ChangeLog')
-rw-r--r--Build/source/texk/dvipsk/ChangeLog3
1 files changed, 3 insertions, 0 deletions
diff --git a/Build/source/texk/dvipsk/ChangeLog b/Build/source/texk/dvipsk/ChangeLog
index a86425f0655..acd0592af89 100644
--- a/Build/source/texk/dvipsk/ChangeLog
+++ b/Build/source/texk/dvipsk/ChangeLog
@@ -1,5 +1,8 @@
2010-03-26 Karl Berry <karl@tug.org>
+ * virtualfont.c (vfopen): do not sprintf too long of a name.
+ CVE-2010-0827, found by Dan Rosenberg.
+
* dospecial.c (predospecial): avoid seg fault from integer overflow.
CVE-2010-0739, found by Marc Schoenefeld, patch prepared
by Jindrich Novy.