Bug 722752 – <dev-libs/libcroco-0.6.13-r1: Stack overflow in cr_parser_parse_any_core (CVE-2020-12825)

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Sam James 2020-05-12 18:53:43 UTC]

Description:
"libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption."

[Comment 1 Sam James 2020-08-25 15:20:58 UTC]

Patch: https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/1404/diffs?commit_id=44cbd1e718d6a08e59b9300280c340218a84e089 (thanks leio)

[Comment 2 Larry the Git Cow 2021-05-25 21:42:23 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2c5ef4bf3c0497dd26da1f97b48e3a4b2e11241e

commit 2c5ef4bf3c0497dd26da1f97b48e3a4b2e11241e
Author:     Thomas Deutschmann <[e-mail]>
AuthorDate: 2021-05-25 21:42:08 +0000
Commit:     Thomas Deutschmann <[e-mail]>
CommitDate: 2021-05-25 21:42:19 +0000

    dev-libs/libcroco: fix CVE-2020-12825
    
    Bug: https://bugs.gentoo.org/722752
    Package-Manager: Portage-3.0.18, Repoman-3.0.3
    Signed-off-by: Thomas Deutschmann <[e-mail]>

 .../files/libcroco-0.6.13-CVE-2020-12825.patch     | 187 +++++++++++++++++++++
 dev-libs/libcroco/libcroco-0.6.13-r1.ebuild        |  57 +++++++
 2 files changed, 244 insertions(+)

[Comment 3 Sam James 2021-05-26 13:14:36 UTC]

amd64 done

[Comment 4 Sam James 2021-05-26 13:16:54 UTC]

arm64 done

[Comment 5 Sam James 2021-05-26 13:18:02 UTC]

x86 done

[Comment 6 Sam James 2021-05-26 13:32:42 UTC]

arm done

[Comment 7 Sam James 2021-05-26 13:33:25 UTC]

ppc done

[Comment 8 Sam James 2021-05-26 13:33:27 UTC]

ppc64 done

[Comment 9 Rolf Eike Beer 2021-05-27 19:34:26 UTC]

hppa stable

[Comment 10 Rolf Eike Beer 2021-05-28 15:45:53 UTC]

sparc done

[Comment 11 John Helmert III 2021-05-30 16:09:26 UTC]

Please cleanup.

[Comment 12 Larry the Git Cow 2021-05-30 19:43:47 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c2530fef2b523640b7cf3d3195dde3afb23b5f9c

commit c2530fef2b523640b7cf3d3195dde3afb23b5f9c
Author:     Matt Turner <[e-mail]>
AuthorDate: 2021-05-30 19:42:54 +0000
Commit:     Matt Turner <[e-mail]>
CommitDate: 2021-05-30 19:43:29 +0000

    dev-libs/libcroco: Drop old versions
    
    Bug: https://bugs.gentoo.org/722752
    Signed-off-by: Matt Turner <[e-mail]>

 dev-libs/libcroco/libcroco-0.6.13.ebuild | 55 --------------------------------
 1 file changed, 55 deletions(-)

[Comment 13 Thomas Deutschmann (RETIRED) 2021-05-31 21:04:09 UTC]

Added to an existing GLSA request.

[Comment 14 Larry the Git Cow 2022-08-21 02:09:22 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=2a92e2043bdf43ba9d8813b5b7aca6e24d69f047

commit 2a92e2043bdf43ba9d8813b5b7aca6e24d69f047
Author:     GLSAMaker <[e-mail]>
AuthorDate: 2022-08-21 01:34:48 +0000
Commit:     John Helmert III <[e-mail]>
CommitDate: 2022-08-21 01:40:47 +0000

    [ GLSA 202208-33 ] Gnome Shell, gettext, libcroco: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/722752
    Bug: https://bugs.gentoo.org/755848
    Bug: https://bugs.gentoo.org/769998
    Signed-off-by: GLSAMaker <[e-mail]>
    Signed-off-by: John Helmert III <[e-mail]>

 glsa-202208-33.xml | 72 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 72 insertions(+)

[Comment 15 John Helmert III 2022-08-21 02:14:47 UTC]

GLSA released, all done!