Description of problem: rpmbuild cannot apply cups-CVE-2008-3640.patch due to the patch corruption. Version-Release number of selected component (if applicable): cups-1.1.17-13.3.54.src.rpm cups-1.1.17-13.3.55.src.rpm How reproducible: always Steps to Reproduce: 1. rpm -i cups-1.1.17-13.3.54.src.rpm 2. rpmbuild -bp /usr/src/redhat/SPEC/cups.spec Actual results: error: File /usr/src/redhat/SOURCES/cups-CVE-2008-3640.patch is smaller than 4 bytes Expected results: Unpack the sources and apply the patch. Additional info:
We will assign this issue CVE-2009-0577.
Thank you for reporting this issue. We will produce a security update to address this for Red Hat Enterprise Linux 3. Note that Red Hat Enterprise Linux 4 and 5 already contain the correct fix for CVE-2008-3640 and do not need to be updated.
This issue was addressed in: Red Hat Enterprise Linux: http://rhn.redhat.com/errata/RHSA-2009-0308.html