Re: CVE-2012-1149 Is there a patch?

Hi Andor,

On Wed, 2012-05-23 at 16:02 +0200, Andor E wrote:
> I'm trying to backport the fix for CVE-2012-1149 to OOo 3.2.1. There
> doesn't seem to be a single commit dealing with that. Can someone tell
> me, which commits are part of this fix.

        Typically we commit fixes to git before we can make them public, in
some cases -waay- before we can, so it is easy to lose them.

        Then again, if you dig around the git log on the libreoffice-3-5 (or if
it there the libreoffice-3-4 branch which is even quieter) it seems
likely you'll be able to dig it out.

        Off the top of my head this was:

From 93947e85ae1434940aaad516edb60f259b15e950 Mon Sep 17 00:00:00 2001
From: Michael Meeks <michael.meeks@suse.com>
Date: Wed, 14 Dec 2011 10:07:01 +0000
Subject: [PATCH] Cleanup jpeg bitmap creation & loading code

Signed-off-by: Caolan McNamara <caolanm@redhat.com>

        HTH,

                Michael.

-- 
michael.meeks@suse.com  <><, Pseudo Engineer, itinerant idiot