Suggested advisory:
========================

The updated package fixes security vulnerabilities:

GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file. (CVE-2023-40305)

GNU indent 2.2.13 has a heap overread in lexi().

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40305
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MIUH3F63KQJWYR3FLKRZUYYRJOY6FYX/
========================

Updated package in {8|9}/core/updates_testing:
========================
indent-2.2.13-1.1.mga{8|9}

from SRPM:
indent-2.2.13-1.1.mga{8|9}.src.rpm

Assignee: bugsquad => nicolas.salguero

MGA8-64 Xfce on Acer Aspire 5253
No installation issues
followed test from bug 31884:
original reading
#if X
#if Y
#define Z 1
#else
#define Z 0
#endif
#endif
Comand executed:
$ indent indent.c -o testcindentform.c -ppi 3
results in testcindentform.c reading
#if X
#   if Y
#      define Z 1
#   else
#      define Z 0
#   endif
#endif
So good to go.

Whiteboard: MGA8TOO => MGA8TOO MGA8-64-OK
CC: (none) => herman.viaene

MGA9-64 Plasma in Virtualbox:

No installation issues. Attempted to use Herman's test in a cookbook fashion, as I know not what I do...

Created an unindented file testindent.c:

#if X
#if Y
#define Z 1
#else
#define Z 0
#endif
#endif
 
Ran the command $  indent testindent.c -o testindentform.c -ppi 3

Opened testindentform.c with kwrite:

#if X
#   if Y
#      define Z 1
#   else
#      define Z 0
#   endif
#endif

Result same as Herman's, so OKing for MGA9. Validating. Advisory in comment 1.

Whiteboard: MGA8TOO MGA8-64-OK => MGA8TOO MGA8-64-OK MGA9-64-OK
Keywords: (none) => validated_update
CC: (none) => andrewsfarm, sysadmin-bugs

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2023-0274.html

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED