about summary refs log tree commit diff
path: root/debian/patches
diff options
context:
space:
mode:
Diffstat (limited to 'debian/patches')
-rw-r--r--debian/patches/10-format-security.patch21
-rw-r--r--debian/patches/series1
2 files changed, 22 insertions, 0 deletions
diff --git a/debian/patches/10-format-security.patch b/debian/patches/10-format-security.patch
new file mode 100644
index 00000000..84e50288
--- /dev/null
+++ b/debian/patches/10-format-security.patch
@@ -0,0 +1,21 @@
+Description: Fix a format string vulnerability
+Author: Michael Biebl <biebl@debian.org>
+diff --git a/libnm-util/nm-setting-bond.c b/libnm-util/nm-setting-bond.c
+index 9f9f438..fe874ab 100644
+--- a/libnm-util/nm-setting-bond.c
++++ b/libnm-util/nm-setting-bond.c
+@@ -402,10 +402,10 @@ verify (NMSetting *setting, GSList *all_settings, GError **error)
+ 		    || !value[0]
+ 		    || (strlen (value) > 200)
+ 		    || strchr (value, ' ')) {
+-			g_set_error (error,
+-			             NM_SETTING_BOND_ERROR,
+-			             NM_SETTING_BOND_ERROR_INVALID_OPTION,
+-			             key);
++			g_set_error_literal (error,
++			                     NM_SETTING_BOND_ERROR,
++			                     NM_SETTING_BOND_ERROR_INVALID_OPTION,
++			                     key);
+ 			return FALSE;
+ 		}
+ 	}
diff --git a/debian/patches/series b/debian/patches/series
index fc215f9c..14b01b8c 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,3 +1,4 @@
 # Debian patches for network-manager
 02-dbus_access_network_manager.patch
 03-systemd.patch
+10-format-security.patch