Overview

Request 1161588 accepted

- Add avahi-CVE-2023-38471.patch: Extract host name using
avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
records (bsc#1216598, CVE-2023-38469).

Loading...

Cliff Zhao's avatar

Hi xiaoguang:

It's better to mention CVE number in the patch comment of SPEC file.

Eg: PATCH-FIX-UPSTREAM avahi-CVE-2023-38469.patch CVE-2023-38469 bsc#1216598 xwang@suse.com -- ...

Another thing is please don't forget to submit to GNOME:Factory.

Thank you!


Cliff Zhao's avatar

Not a mandatory requirement, for you to reference only.

Request History
xiaoguang wang's avatar

xiaoguang_wang created request

- Add avahi-CVE-2023-38471.patch: Extract host name using
avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
records (bsc#1216598, CVE-2023-38469).


xiaoguang wang's avatar

xiaoguang_wang accepted request

Thanks!

openSUSE Build Service is sponsored by