diff -Nru xawtv-3.103/debian/changelog xawtv-3.103/debian/changelog --- xawtv-3.103/debian/changelog 2016-02-07 12:48:59.000000000 +0000 +++ xawtv-3.103/debian/changelog 2020-09-14 20:18:08.000000000 +0000 @@ -1,8 +1,16 @@ -xawtv (3.103-3build1) xenial; urgency=medium +xawtv (3.103-3+deb8u1build0.16.04.1) xenial-security; urgency=medium - * No-change rebuild for ncurses6 transition. + * fake sync from Debian - -- Matthias Klose Sun, 07 Feb 2016 12:48:59 +0000 + -- Eduardo Barretto Mon, 14 Sep 2020 17:18:08 -0300 + +xawtv (3.103-3+deb8u1) jessie-security; urgency=high + + * Non-maintainer upload by the LTS Team. + * v4l-conf: add patch to check file type before opening it. + (Fixes: CVE-2020-13696) (Closes: #962221) + + -- Utkarsh Gupta Fri, 12 Jun 2020 10:51:11 +0530 xawtv (3.103-3) unstable; urgency=low diff -Nru xawtv-3.103/debian/patches/CVE-2020-13696.diff xawtv-3.103/debian/patches/CVE-2020-13696.diff --- xawtv-3.103/debian/patches/CVE-2020-13696.diff 1970-01-01 00:00:00.000000000 +0000 +++ xawtv-3.103/debian/patches/CVE-2020-13696.diff 2020-06-12 05:13:55.000000000 +0000 @@ -0,0 +1,41 @@ +Description: v4l-conf: check file type before opening it. + Let's avoid open the file if it doesn't exist or it is not + a file of the right type. +Author: Mauro Carvalho Chehab +Author: Utkarsh Gupta +Bug-Debian: https://bugs.debian.org/962221 +Last-Update: 2020-06-12 + +--- a/console/v4l-conf.c ++++ b/console/v4l-conf.c +@@ -134,20 +134,23 @@ + exit(1); + } + +- /* open & check v4l device */ +- if (-1 == (fd = open(device,O_RDWR))) { +- fprintf(stderr, "can't open %s: %s\n", device, strerror(errno)); ++ /* First check if the device is really a devnode of the right type */ ++ if (-1 == stat(device, &stb)) { ++ fprintf(stderr, "%s: invalid path or file is not of the right type\n", device); + exit(1); + } + +- if (-1 == fstat(fd,&stb)) { +- fprintf(stderr, "fstat(%s): %s\n", device, strerror(errno)); ++ if (!S_ISCHR(stb.st_mode) || (major(stb.st_rdev) != major)) { ++ fprintf(stderr, "%s: invalid path or file is not of the right type\n", device); + exit(1); + } +- if (!S_ISCHR(stb.st_mode) || (major(stb.st_rdev) != major)) { +- fprintf(stderr, "%s: wrong device\n", device); ++ ++ /* Then open it */ ++ if (-1 == (fd = open(device,O_RDWR))) { ++ fprintf(stderr, "can't open %s: %s\n", device, strerror(errno)); + exit(1); + } ++ + return fd; + } + diff -Nru xawtv-3.103/debian/patches/series xawtv-3.103/debian/patches/series --- xawtv-3.103/debian/patches/series 2014-01-14 17:59:45.000000000 +0000 +++ xawtv-3.103/debian/patches/series 2020-06-12 05:19:51.000000000 +0000 @@ -3,4 +3,5 @@ minor_spelling_change.diff mayhem_showriff.diff mayhem_rootv.diff -do_not_link_xprint.diff \ No newline at end of file +do_not_link_xprint.diff +CVE-2020-13696.diff