Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Resolved multiple vulnerabilities #9

Open
wants to merge 7 commits into
base: master
Choose a base branch
from
Open

Resolved multiple vulnerabilities #9

wants to merge 7 commits into from

Commits on Sep 8, 2022

  1. Fix CVE-2019-20006 / bug 15 & CVE-2019-20202 / bug 17 / CVE-2021-31598 … 

    …bug 28

For UTF-8 the multi-byte sequences should use at most 36 bits
(UTF-8 standard uses 21 bits or 4 bytes).

This fixes:
 https://sourceforge.net/p/ezxml/bugs/15/
 https://sourceforge.net/p/ezxml/bugs/17/
 https://sourceforge.net/p/ezxml/bugs/28/

Signed-off-by: Egbert Eich <[email protected]>
Signed-off-by: Egbert Eich <[email protected]>
    @e4t @georgios-stamelakis
    e4t authored and georgios-stamelakis committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    9a1e1d0 View commit details
    Browse the repository at this point in the history

  2. CVE-2021-30485-nullptr-000.patch

    @georgios-stamelakis
    georgios-stamelakis committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    79bda25 View commit details
    Browse the repository at this point in the history

  3. CVE-2021-31229-OOBW-001.patch

    @georgios-stamelakis
    georgios-stamelakis committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    6fb5624 View commit details
    Browse the repository at this point in the history

  4. CVE-2021-31347-OOBRW-000.patch

    @georgios-stamelakis
    georgios-stamelakis committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    a307bd3 View commit details
    Browse the repository at this point in the history

  5. Fix-CVE-2021-26220-bug-23.patch ---- Resolved conflict in main()

    @georgios-stamelakis
    georgios-stamelakis committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    5be6bbe View commit details
    Browse the repository at this point in the history

  6. Fix CVE-2021-26221 / bug 21 

    Make sure malloc() succeeds.
This fixes
 https://sourceforge.net/p/ezxml/bugs/21/

Signed-off-by: Egbert Eich <[email protected]>
Signed-off-by: Egbert Eich <[email protected]>
    @e4t @georgios-stamelakis
    e4t authored and georgios-stamelakis committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    bc35c59 View commit details
    Browse the repository at this point in the history

  7. Fix CVE-2021-26222 / bug 22 

    Make sure malloc() succeeds.
This fixes
 https://sourceforge.net/p/ezxml/bugs/22/

Signed-off-by: Egbert Eich <[email protected]>
Signed-off-by: Egbert Eich <[email protected]>
    @e4t @georgios-stamelakis
    e4t authored and georgios-stamelakis committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    852ce80 View commit details
    Browse the repository at this point in the history