Blame SOURCES/cyrus-imapd-cve_2019_11356.patch

0f9cf8
diff --git a/imap/httpd.c b/imap/httpd.c
0f9cf8
index dc53f8c..24b65e5 100644
0f9cf8
--- a/imap/httpd.c
0f9cf8
+++ b/imap/httpd.c
0f9cf8
@@ -2202,7 +2202,7 @@ EXPORTED time_t calc_compile_time(const char *time, const char *date)
0f9cf8
     memset(&tm, 0, sizeof(struct tm));
0f9cf8
     tm.tm_isdst = -1;
0f9cf8
     sscanf(time, "%02d:%02d:%02d", &tm.tm_hour, &tm.tm_min, &tm.tm_sec);
0f9cf8
-    sscanf(date, "%s %2d %4d", month, &tm.tm_mday, &tm.tm_year);
0f9cf8
+    sscanf(date, "%3s %2d %4d", month, &tm.tm_mday, &tm.tm_year);
0f9cf8
     tm.tm_year -= 1900;
0f9cf8
     for (tm.tm_mon = 0; tm.tm_mon < 12; tm.tm_mon++) {
0f9cf8
         if (!strcmp(month, monthname[tm.tm_mon])) break;
0f9cf8
diff --git a/imap/ical_support.c b/imap/ical_support.c
0f9cf8
index 1d7550a..e1bda50 100644
0f9cf8
--- a/imap/ical_support.c
0f9cf8
+++ b/imap/ical_support.c
0f9cf8
@@ -458,7 +458,7 @@ const char *get_icalcomponent_errstr(icalcomponent *ical)
0f9cf8
 
0f9cf8
                 /* Check if this is an empty property error */
0f9cf8
                 if (sscanf(errstr,
0f9cf8
-                           "No value for %s property", propname) == 1) {
0f9cf8
+                           "No value for %255s property", propname) == 1) {
0f9cf8
                     /* Empty LOCATION is OK */
0f9cf8
                     if (!strcasecmp(propname, "LOCATION")) continue;
0f9cf8
                     if (!strcasecmp(propname, "COMMENT")) continue;