diff options
author | Karl Berry <karl@freefriends.org> | 2010-03-25 23:58:27 +0000 |
---|---|---|
committer | Karl Berry <karl@freefriends.org> | 2010-03-25 23:58:27 +0000 |
commit | dd8a83212fcabcff4600aa0a9d7f3264b0fd07dd (patch) | |
tree | 1b5df041965fd25b2f7abc04117ba45b1c174eb1 /Build/source/texk/dvipsk/ChangeLog | |
parent | 5c71f7dcce52cab382d58624cc13df5caf788723 (diff) |
avoid sprintf buffer overflow, CVE-2010-0827
git-svn-id: svn://tug.org/texlive/trunk@17560 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Build/source/texk/dvipsk/ChangeLog')
-rw-r--r-- | Build/source/texk/dvipsk/ChangeLog | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/Build/source/texk/dvipsk/ChangeLog b/Build/source/texk/dvipsk/ChangeLog index a86425f0655..acd0592af89 100644 --- a/Build/source/texk/dvipsk/ChangeLog +++ b/Build/source/texk/dvipsk/ChangeLog @@ -1,5 +1,8 @@ 2010-03-26 Karl Berry <karl@tug.org> + * virtualfont.c (vfopen): do not sprintf too long of a name. + CVE-2010-0827, found by Dan Rosenberg. + * dospecial.c (predospecial): avoid seg fault from integer overflow. CVE-2010-0739, found by Marc Schoenefeld, patch prepared by Jindrich Novy. |