Arch Linux

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#59289 - [bzip2] checksum error in fix-heap-use-after-free-bzip2recover.patch patch

Attached to Project: Arch Linux
Opened by Andreas Baumann (andreas_baumann) - Tuesday, 10 July 2018, 05:49 GMT
Last edited by Ronald van Haren (pressh) - Sunday, 19 August 2018, 13:10 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Ronald van Haren (pressh)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

==> Validating source files with sha1sums...
bzip2-1.0.6.tar.gz ... Passed
bzip2-1.0.4-bzip2recover.patch ... Passed
fix-heap-use-after-free-bzip2recover.patch ... FAILED


Additional info:
* package version(s): 1.0.6-7


Steps to reproduce:

asp export bzip2
cd bzip2
staging-x86_64-build
This task depends upon

Closed by  Ronald van Haren (pressh)
Sunday, 19 August 2018, 13:10 GMT
Reason for closing:  Implemented
Additional comments about closing:  1.0.6-8 in [testing]
Comment by Andreas Baumann (andreas_baumann) - Tuesday, 10 July 2018, 05:51 GMT
Also using external patches from other distros, which may change anytime, is maybe not the best idea.
Comment by Eli Schwartz (eschwartz) - Tuesday, 10 July 2018, 13:36 GMT
Just the diff header was changed: https://gitweb.gentoo.org/repo/gentoo.git/commit/app-arch/bzip2/files/bzip2-1.0.6-CVE-2016-3189.patch?id=bb520d8bd77ae80115fab881dfb7c62b7cd80b80
Comment by Andreas Baumann (andreas_baumann) - Saturday, 18 August 2018, 05:57 GMT
Now also the source tarball changed:

bzip2-1.0.6.tar.gz ... FAILED
bzip2-1.0.4-bzip2recover.patch ... Passed
fix-heap-use-after-free-bzip2recover.patch ... FAILED
Comment by Ronald van Haren (pressh) - Saturday, 18 August 2018, 06:04 GMT
Thanks, I'm aware. Getting fix in sometime this weekend.
Comment by Andreas Baumann (andreas_baumann) - Saturday, 18 August 2018, 06:20 GMT
Thanks. I didn't want stress anybody . :-)

Loading...