~ubuntu-branches/ubuntu/breezy/koffice/breezy-security

« back to all changes in this revision

Viewing changes to kexi/scripting/python/CXX/Readme.Kross.txt

  • Committer: Bazaar Package Importer
  • Author(s): Jonathan Riddell
  • Date: 2005-10-11 14:49:50 UTC
  • mfrom: (1.1.2 upstream)
  • Revision ID: james.westby@ubuntu.com-20051011144950-lwpngbifzp8nk0ds
Tags: 1:1.4.1-0ubuntu7
* SECURITY UPDATE: fix heap based buffer overflow in the RTF importer of KWord
* Opening specially crafted RTF files in KWord can cause
  execution of abitrary code.
* Add kubuntu_01_rtfimport_heap_overflow.diff
* References:
  CAN-2005-2971
  CESA-2005-005
  http://www.koffice.org/security/advisory-20051011-1.txt

Show diffs side-by-side

added added

removed removed

Lines of Context:
 
1
Kross uses PyCXX 5.3.0 (http://cxx.sourceforge.net/)
 
2
to access the Python C API.
 
3
 
 
4
Following patches where applied and send back
 
5
to the PyCXX team.
 
6
 
 
7
- cxx530-unsigned.patch
 
8
  http://sourceforge.net/tracker/index.php?func=detail&aid=1085205&group_id=3180&atid=303180
 
9
- cxx530-isinstance.patch
 
10
  http://sourceforge.net/tracker/index.php?func=detail&aid=1178048&group_id=3180&atid=303180
 
11
- cxx530-dir.patch
 
12
  http://sourceforge.net/tracker/index.php?func=detail&aid=1186676&group_id=3180&atid=303180
 
13
 
 
14
I also changed some namespace- and include stuff to
 
15
get PyCXX compiled the way we use it. I'll try to
 
16
minimize such changes and add patches for such
 
17
changes within next merge.