- Fixed CVE-2007-4045 patch; has no effect with shipped packages since they

are linked with gnutls.
This commit is contained in:
Tim Waugh 2007-11-13 14:54:12 +00:00
parent e6351f16b1
commit 991c06573d
2 changed files with 4 additions and 2 deletions

View File

@ -16,8 +16,8 @@ diff -up cups-1.3.4/scheduler/client.c.CVE-2007-4045 cups-1.3.4/scheduler/client
+ c;
+ c = (cupsd_client_t *)cupsArrayNext(Clients))
+ {
+ bio = SSL_get_wbio(c->http.tls);
+ BIO_ctrl(bio, BIO_C_SET_FILE_PTR, 0, (char *)HTTP(c));
+ if (c->http.tls)
+ BIO_ctrl(SSL_get_wbio(c->http.tls), BIO_C_SET_FILE_PTR, 0, (char *)HTTP(c));
+ }
+ cupsArrayRestore (Clients);
+#endif

View File

@ -450,6 +450,8 @@ rm -rf $RPM_BUILD_ROOT
%changelog
* Tue Nov 13 2007 Tim Waugh <twaugh@redhat.com>
- Fixed CVE-2007-4045 patch; has no effect with shipped packages since they
are linked with gnutls.
- LSPP cupsdSetString/ClearString fixes (bug #378451).
* Wed Nov 7 2007 Tim Waugh <twaugh@redhat.com> 1:1.3.4-2