dev-libs/capstone: bump up to 3.0.5-rc2, fix CVE-2017-6952, bug #612912
authorSergei Trofimovich <slyfox@gentoo.org>
Sat, 25 Mar 2017 16:07:40 +0000 (16:07 +0000)
committerSergei Trofimovich <slyfox@gentoo.org>
Sat, 25 Mar 2017 16:07:40 +0000 (16:07 +0000)
commit83209f33a128ec7f48adbfad813cfbc13a2fd444
tree0cb1718468be78966008a9150bfb0f20d52af8f1
parenta3cccdab1a07fdf64afad454f1c747bcf039c4bf
dev-libs/capstone: bump up to 3.0.5-rc2, fix CVE-2017-6952, bug #612912

I don't believe 3.0.4 is affected:

- it's a vulnerability in windows kernel driver. Not something you can easily build in gentoo today as it requires MSVS to build a driver
- the windows code was added in capstone-3.0.5-rc1. It's not present in 3.0.4 in gentoo at all

But not to forget about the vulnerability on next bump
I'm bumping up to vilnerable release candidate and applying
the upstream patch to fix CVE-2017-6952.

Reported-by: Agostino Sarubbo
Bug: https://bugs.gentoo.org/612912
Package-Manager: Portage-2.3.5, Repoman-2.3.2
dev-libs/capstone/Manifest
dev-libs/capstone/capstone-3.0.5_rc2.ebuild [new file with mode: 0644]
dev-libs/capstone/files/capstone-3.0.5_rc2-CVE-2017-6952.patch [new file with mode: 0644]
dev-libs/capstone/files/capstone-3.0.5_rc2-FLAGS.patch [new file with mode: 0644]