Blame SOURCES/cyrus-imapd-cve_2019_11356.patch

020be8
diff --git a/imap/httpd.c b/imap/httpd.c
020be8
index dc53f8c..24b65e5 100644
020be8
--- a/imap/httpd.c
020be8
+++ b/imap/httpd.c
020be8
@@ -2202,7 +2202,7 @@ EXPORTED time_t calc_compile_time(const char *time, const char *date)
020be8
     memset(&tm, 0, sizeof(struct tm));
020be8
     tm.tm_isdst = -1;
020be8
     sscanf(time, "%02d:%02d:%02d", &tm.tm_hour, &tm.tm_min, &tm.tm_sec);
020be8
-    sscanf(date, "%s %2d %4d", month, &tm.tm_mday, &tm.tm_year);
020be8
+    sscanf(date, "%3s %2d %4d", month, &tm.tm_mday, &tm.tm_year);
020be8
     tm.tm_year -= 1900;
020be8
     for (tm.tm_mon = 0; tm.tm_mon < 12; tm.tm_mon++) {
020be8
         if (!strcmp(month, monthname[tm.tm_mon])) break;
020be8
diff --git a/imap/ical_support.c b/imap/ical_support.c
020be8
index 1d7550a..e1bda50 100644
020be8
--- a/imap/ical_support.c
020be8
+++ b/imap/ical_support.c
020be8
@@ -458,7 +458,7 @@ const char *get_icalcomponent_errstr(icalcomponent *ical)
020be8
 
020be8
                 /* Check if this is an empty property error */
020be8
                 if (sscanf(errstr,
020be8
-                           "No value for %s property", propname) == 1) {
020be8
+                           "No value for %255s property", propname) == 1) {
020be8
                     /* Empty LOCATION is OK */
020be8
                     if (!strcasecmp(propname, "LOCATION")) continue;
020be8
                     if (!strcasecmp(propname, "COMMENT")) continue;