[ioquake3] 20/21: New upstream snapshot

Simon McVittie smcv at debian.org
Fri Aug 4 20:39:14 UTC 2017


This is an automated email from the git hooks/post-receive script.

smcv pushed a commit to branch debian/master
in repository ioquake3.

commit bafbfb0e12fbd73663f88c125eb012700613dcca
Author: Simon McVittie <smcv at debian.org>
Date:   Fri Aug 4 18:34:38 2017 +0100

    New upstream snapshot
    
      - Fix read buffer overflow in MSG_ReadBits
        (CVE-2017-11721) (Closes: #870725)
      - Check buffer boundary exactly in MSG_WriteBits, instead of
        potentially failing with a few bytes still available
---
 debian/changelog | 7 ++++++-
 debian/rules     | 4 ++--
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index 05b847e..c368463 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,11 @@
-ioquake3 (1.36+u20170720+dfsg1-2) UNRELEASED; urgency=medium
+ioquake3 (1.36+u20170803+dfsg1-1) UNRELEASED; urgency=medium
 
   * Exclude curl headers from orig tarball
+  * New upstream snapshot
+    - Fix read buffer overflow in MSG_ReadBits
+      (CVE-2017-11721) (Closes: #870725)
+    - Check buffer boundary exactly in MSG_WriteBits, instead of
+      potentially failing with a few bytes still available
 
  -- Simon McVittie <smcv at debian.org>  Fri, 04 Aug 2017 18:31:01 +0100
 
diff --git a/debian/rules b/debian/rules
index 780cc23..2d6a9de 100755
--- a/debian/rules
+++ b/debian/rules
@@ -91,10 +91,10 @@ ORIG_SOURCE = ioquake3
 ORIG_REPO ?= https://github.com/ioquake/ioq3
 ORIG_REL = 1.36
 # Empty if packaging a tagged release
-ORIG_REV = 67dace6c209c91fac5861846364e62c1c67aab77
+ORIG_REV = 2955f8dadb0c521218b634eb98da41de9c429a51
 # Use the date of the ORIG_REV, or 20130426.1 if you snapshot twice in a day,
 # or empty if ORIG_REV is
-ORIG_DATE = 20170720
+ORIG_DATE = 20170803
 ORIG_SUFFIX = +dfsg1
 
 ifeq (${ORIG_REV},)

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-games/ioquake3.git



More information about the Pkg-games-commits mailing list