debian/0000775000000000000000000000000013120031716007162 5ustar debian/control0000664000000000000000000000341012263202010010555 0ustar Source: libmwaw Priority: optional Maintainer: Ubuntu Developers XSBC-Original-Maintainer: Rene Engelhard Build-Depends: dh-autoreconf, debhelper (>= 9), doxygen, libboost-dev, libwpd-dev (>= 0.9.0), pkg-config, zlib1g-dev Standards-Version: 3.9.4 Section: libs Homepage: http://sourceforge.net/projects/libmwaw Package: libmwaw-dev Section: libdevel Architecture: any Depends: libmwaw-0.1-1 (= ${binary:Version}), libwpd-dev (>= 0.9.0), ${misc:Depends} Description: import library for some old mac text document -- development libmwaw contains some import filters for old mac text documents (MacWrite, ClarisWorks, ... ) based on top of libwpd. . This package contains the development files (headers, ...). Package: libmwaw-doc Section: doc Architecture: all Depends: ${misc:Depends} Description: import library for some old mac text document -- documentation libmwaw contains some import filters for old mac text documents (MacWrite, ClarisWorks, ... ) based on top of libwpd. . This package contains the documentation. Package: libmwaw-0.1-1 Architecture: any Depends: ${misc:Depends}, ${shlibs:Depends} Description: import library for some old mac text document libmwaw contains some import filters for old mac text documents (MacWrite, ClarisWorks, ... ) based on top of libwpd. Package: libmwaw-tools Section: utils Architecture: any Depends: ${misc:Depends}, ${shlibs:Depends} Description: import library for some old mac text document -- tools libmwaw contains some import filters for old mac text documents (MacWrite, ClarisWorks, ... ) based on top of libwpd. . This package contains vsd2xtml and vsd2raw. debian/docs0000664000000000000000000000000712116366317010046 0ustar README debian/changelog0000664000000000000000000000260113120031264011031 0ustar libmwaw (0.1.11-1ubuntu1.1) trusty-security; urgency=medium * SECURITY UPDATE: DoS and possible code exec via out-of-bounds write - debian/patches/CVE-2017-9433.patch: resize vector correctly in src/lib/MSW1Parser.cxx. - CVE-2017-9433 -- Marc Deslauriers Tue, 13 Jun 2017 14:44:59 -0400 libmwaw (0.1.11-1ubuntu1) trusty; urgency=medium * Use dh-autoreconf to get new libtool macros for ppc64el. -- Logan Rosen Wed, 08 Jan 2014 02:53:22 -0500 libmwaw (0.1.11-1) unstable; urgency=low * New upstream release * debian/control: fix typos in description (closes: #725473) -- Rene Engelhard Tue, 08 Oct 2013 19:46:25 +0200 libmwaw (0.1.10-1) unstable; urgency=low * New upstream release -- Rene Engelhard Mon, 01 Jul 2013 23:51:17 +0200 libmwaw (0.1.9-1) unstable; urgency=low * New upstream release -- Rene Engelhard Wed, 22 May 2013 20:00:32 +0200 libmwaw (0.1.8-1) unstable; urgency=low * New upstream release -- Rene Engelhard Sun, 05 May 2013 20:25:06 +0200 libmwaw (0.1.7-2) unstable; urgency=low * upload to unstable -- Rene Engelhard Thu, 18 Apr 2013 23:02:18 +0200 libmwaw (0.1.7-1) experimental; urgency=low * Initial release -- Rene Engelhard Sat, 13 Apr 2013 13:13:21 +0200 debian/libmwaw-dev.dirs0000664000000000000000000000002411576344476012306 0ustar usr/lib usr/include debian/libmwaw-0.1-1.install0000664000000000000000000000002212113471176012651 0ustar usr/lib/lib*.so.* debian/libmwaw-tools.install0000664000000000000000000000006512116362322013357 0ustar usr/bin/mwaw2html usr/bin/mwaw2raw usr/bin/mwaw2text debian/source/0000775000000000000000000000000011576344476010511 5ustar debian/source/format0000664000000000000000000000001411576344476011717 0ustar 3.0 (quilt) debian/compat0000664000000000000000000000000212113470477010374 0ustar 9 debian/patches/0000775000000000000000000000000013120031250010602 5ustar debian/patches/CVE-2017-9433.patch0000664000000000000000000000165013120031250013231 0ustar Description: fix DoS and possible code exec via out-of-bounds write Origin: backport, https://sourceforge.net/p/libmwaw/libmwaw/ci/68b3b74569881248bfb6cbb4266177cc253b292f/ Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864366 Index: libmwaw-0.1.11/src/lib/MSW1Parser.cxx =================================================================== --- libmwaw-0.1.11.orig/src/lib/MSW1Parser.cxx 2017-06-13 14:44:54.085679526 -0400 +++ libmwaw-0.1.11/src/lib/MSW1Parser.cxx 2017-06-13 14:44:54.053679127 -0400 @@ -882,7 +882,7 @@ bool MSW1Parser::readFootnoteCorresponda int id = fIt++->second; fPos[1] = fIt==footnoteMap.end() ? m_state->m_eot : fIt->first; if (id >= int(m_state->m_footnotesList.size())) - m_state->m_footnotesList.resize(size_t(id),0); + m_state->m_footnotesList.resize(size_t(id)+1,0); m_state->m_footnotesList[size_t(id)]=fPos; } ascii().addDelimiter(input->tell(),'|'); debian/patches/series0000664000000000000000000000002413120031102012007 0ustar CVE-2017-9433.patch debian/copyright0000664000000000000000000000731212132236620011123 0ustar Format: http://dep.debian.net/deps/dep5 Upstream-Name: libmwaw Source: http://sourceforge.net/projects/libmwaw/?source=dlp Files: * Copyright: Copyright (C) 2002 William Lachance (wrlach@gmail.com) Copyright (C) 2002,2004 Marc Maurer (uwog@uwog.net) Copyright (C) 2004-2006 Fridrich Strba (fridrich.strba@bluewin.ch) Copyright (C) 2006, 2007 Andrew Ziem Copyright (C) 2011, 2012 Alonso Laurent (alonso@loria.fr) License: MPL-1.1 | GPL-2+ | LGPL-2+ On Debian systems, you can find the full text of the GPL in /usr/share/common-licenses/GPL and of the LGPL in /usr/share/common-licenses/LGPL Files: src/lib/MWAWOLEStream.* Copyright: Copyright (C) 2002-2005 Ariya Hidayat License: BSD Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of the authors nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Copyright (C) 2002-2005 Ariya Hidayat Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of the authors nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. debian/watch0000664000000000000000000000007512116361170010221 0ustar version=3 http://sf.net/libmwaw/libmwaw-(\d.\d.\d)\.tar\.bz2 debian/libmwaw-dev.install0000664000000000000000000000006212113471176012777 0ustar usr/include/* usr/lib/lib*.so usr/lib/pkgconfig/* debian/libmwaw-doc.install0000664000000000000000000000001612115172664012767 0ustar usr/share/doc debian/rules0000775000000000000000000000040612263201750010246 0ustar #!/usr/bin/make -f # Uncomment this to turn on verbose mode. #export DH_VERBOSE=1 %: dh $@ --with autoreconf override_dh_auto_configure: dh_auto_configure -- --disable-werror --docdir=/usr/share/doc/libmwaw-doc --libdir=/usr/lib \ --disable-silent-rules