Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Updates to avoid CVE-2021-34552, CVE-2021-25287, CVE-2021-25288, CVE-2020-10994 #1

Merged
merged 10 commits into from Jul 28, 2021
Merged

Updates to avoid CVE-2021-34552, CVE-2021-25287, CVE-2021-25288, CVE-2020-10994 #1

merged 10 commits into from Jul 28, 2021

Commits on Jul 27, 2021

  1. Limit sprintf modes to 10 characters 

    (cherry picked from commit 5f4504b)
    @radarhere @jeremywestwood
    radarhere authored and jeremywestwood committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    194c5dd View commit details
    Browse the repository at this point in the history

  2. Use snprintf instead of sprintf 

    (cherry picked from commit 518ee37)
    @radarhere @jeremywestwood
    radarhere authored and jeremywestwood committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    59d1876 View commit details
    Browse the repository at this point in the history

  3. added brackets lost in the merge conflict

    @jeremywestwood
    jeremywestwood committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    9bc68a1 View commit details
    Browse the repository at this point in the history

  4. add +j5 to the version

    @jeremywestwood
    jeremywestwood committed Jul 27, 2021
    Configuration menu
    Copy the full SHA
    ef80420 View commit details
    Browse the repository at this point in the history

Commits on Jul 28, 2021

  1. update some of the package routes to fetch from the pillow depends ur… 

    …l rather than sourceforge which seems to give some problems.
    @jeremywestwood
    jeremywestwood committed Jul 28, 2021
    Configuration menu
    Copy the full SHA
    27a9785 View commit details
    Browse the repository at this point in the history

  2. comment out the python versions we don't need to try and build

    @jeremywestwood
    jeremywestwood committed Jul 28, 2021
    Configuration menu
    Copy the full SHA
    dde12fb View commit details
    Browse the repository at this point in the history

  3. add the disable-jpeg2000 flag to fix related CVEs

    @jeremywestwood
    jeremywestwood committed Jul 28, 2021
    Configuration menu
    Copy the full SHA
    c9da413 View commit details
    Browse the repository at this point in the history

  4. removed the 64 bit script from being created as we don't need it and … 

    …it breaks
    @jeremywestwood
    jeremywestwood committed Jul 28, 2021
    Configuration menu
    Copy the full SHA
    8fdd5ba View commit details
    Browse the repository at this point in the history

  5. Added some instructions for workarounds to build this, hopefully thes… 

    …e can be removed in future.
    @jeremywestwood
    jeremywestwood committed Jul 28, 2021
    Configuration menu
    Copy the full SHA
    915b68f View commit details
    Browse the repository at this point in the history

  6. correct version number for VC 10.0

    @jeremywestwood
    jeremywestwood committed Jul 28, 2021
    Configuration menu
    Copy the full SHA
    fe71471 View commit details
    Browse the repository at this point in the history