rpms/mldonkey/F-10 url_slashes.patch, NONE, 1.1 mldonkey.spec, 1.3, 1.4
by Richard W.M. Jones
Author: rjones
Update of /cvs/pkgs/rpms/mldonkey/F-10
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv15557
Modified Files:
mldonkey.spec
Added Files:
url_slashes.patch
Log Message:
- Fix remote arbitrary file disclosure via a GET request with more
than one leading / (slash) character in the filename (rhbz#487132).
url_slashes.patch:
--- NEW FILE url_slashes.patch ---
diff -a -x Root -x Repository -x Tag -x Entries -x Entries.Log -x .svn -x '*.rej' -x '*.orig' -x '*.cmi' -x '*.cma' -x '*.cmo' -x '*.cmx' -x '*.cmxa' -x '*.a' -x '*.o' -x .depend -x Makefile -x mlnet -x ocamlpp.byte -N -r -u ./src/utils/lib/url.ml ./src/utils/lib/url.ml
--- ./src/utils/lib/url.ml 2007-03-17 19:49:32.000000000 +0100
+++ ./src/utils/lib/url.ml 2009-02-23 19:29:04.000000000 +0100
@@ -175,6 +175,19 @@
Buffer.contents res
let of_string ?(args=[]) s =
+ let remove_leading_slashes s =
+ let len = String.length s in
+ let left =
+ let rec aux i =
+ if i < len && s.[i] = '/' then aux (i+1) else i in
+ aux 0 in
+ if left = 0 then s
+ else
+ String.sub s left (len - left) in
+
+ (* redefine s to remove all leading slashes *)
+ let s = remove_leading_slashes s in
+
let s = put_args s args in
let url =
let get_two init_pos =
Index: mldonkey.spec
===================================================================
RCS file: /cvs/pkgs/rpms/mldonkey/F-10/mldonkey.spec,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -r1.3 -r1.4
--- mldonkey.spec 10 Feb 2009 16:07:59 -0000 1.3
+++ mldonkey.spec 26 Feb 2009 09:00:13 -0000 1.4
@@ -1,6 +1,6 @@
Name: mldonkey
Version: 2.9.7
-Release: 2%{?dist}
+Release: 3%{?dist}
Summary: Client for several P2P networks
License: GPLv2+
Source0: http://downloads.sourceforge.net/%{name}/%{name}-%{version}.tar.bz2
@@ -9,6 +9,7 @@
Source9: mldonkey_df_monitor.sh
Source11: mldonkey.logrotate
Patch0: mldonkey-initscript.patch
+Patch1: url_slashes.patch
URL: http://mldonkey.sourceforge.net
Group: Applications/Internet
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -125,6 +126,7 @@
%prep
%setup -q
%patch0 -p1 -b .fedora
+%patch1 -p0
# Let's make rpmlint happy
sed -i 's|\r||g' distrib/ed2k_submit/README.MLdonkeySubmit
sed -i 's|\r||g' docs/slavanap.txt
@@ -319,6 +321,10 @@
%changelog
+* Thu Feb 26 2009 Richard W.M. Jones <rjones(a)redhat.com> - 2.9.7-3
+- Fix remote arbitrary file disclosure via a GET request with more
+ than one leading / (slash) character in the filename (rhbz#487132).
+
* Tue Feb 10 2009 Peter Lemenkov <lemenkov(a)gmail.com> 2.9.7-2
- Fixed bz# 484884
15 years, 1 month
rpms/mldonkey/devel url_slashes.patch, NONE, 1.1 mldonkey.spec, 1.4, 1.5
by Richard W.M. Jones
Author: rjones
Update of /cvs/pkgs/rpms/mldonkey/devel
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv15483
Modified Files:
mldonkey.spec
Added Files:
url_slashes.patch
Log Message:
- Fix remote arbitrary file disclosure via a GET request with more
than one leading / (slash) character in the filename (rhbz#487132).
url_slashes.patch:
--- NEW FILE url_slashes.patch ---
diff -a -x Root -x Repository -x Tag -x Entries -x Entries.Log -x .svn -x '*.rej' -x '*.orig' -x '*.cmi' -x '*.cma' -x '*.cmo' -x '*.cmx' -x '*.cmxa' -x '*.a' -x '*.o' -x .depend -x Makefile -x mlnet -x ocamlpp.byte -N -r -u ./src/utils/lib/url.ml ./src/utils/lib/url.ml
--- ./src/utils/lib/url.ml 2007-03-17 19:49:32.000000000 +0100
+++ ./src/utils/lib/url.ml 2009-02-23 19:29:04.000000000 +0100
@@ -175,6 +175,19 @@
Buffer.contents res
let of_string ?(args=[]) s =
+ let remove_leading_slashes s =
+ let len = String.length s in
+ let left =
+ let rec aux i =
+ if i < len && s.[i] = '/' then aux (i+1) else i in
+ aux 0 in
+ if left = 0 then s
+ else
+ String.sub s left (len - left) in
+
+ (* redefine s to remove all leading slashes *)
+ let s = remove_leading_slashes s in
+
let s = put_args s args in
let url =
let get_two init_pos =
Index: mldonkey.spec
===================================================================
RCS file: /cvs/pkgs/rpms/mldonkey/devel/mldonkey.spec,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -r1.4 -r1.5
--- mldonkey.spec 26 Feb 2009 01:42:36 -0000 1.4
+++ mldonkey.spec 26 Feb 2009 08:59:53 -0000 1.5
@@ -1,6 +1,6 @@
Name: mldonkey
Version: 2.9.7
-Release: 3%{?dist}
+Release: 4%{?dist}
Summary: Client for several P2P networks
License: GPLv2+
Source0: http://downloads.sourceforge.net/%{name}/%{name}-%{version}.tar.bz2
@@ -9,6 +9,7 @@
Source9: mldonkey_df_monitor.sh
Source11: mldonkey.logrotate
Patch0: mldonkey-initscript.patch
+Patch1: url_slashes.patch
URL: http://mldonkey.sourceforge.net
Group: Applications/Internet
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -125,6 +126,7 @@
%prep
%setup -q
%patch0 -p1 -b .fedora
+%patch1 -p0
# Let's make rpmlint happy
sed -i 's|\r||g' distrib/ed2k_submit/README.MLdonkeySubmit
sed -i 's|\r||g' docs/slavanap.txt
@@ -319,6 +321,10 @@
%changelog
+* Thu Feb 26 2009 Richard W.M. Jones <rjones(a)redhat.com> - 2.9.7-4
+- Fix remote arbitrary file disclosure via a GET request with more
+ than one leading / (slash) character in the filename (rhbz#487132).
+
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.9.7-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
15 years, 1 month
rpms/ocamldsort/devel ocamldsort.spec,1.3,1.4
by Jesse Keating
Author: jkeating
Update of /cvs/pkgs/rpms/ocamldsort/devel
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv22327
Modified Files:
ocamldsort.spec
Log Message:
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
Index: ocamldsort.spec
===================================================================
RCS file: /cvs/pkgs/rpms/ocamldsort/devel/ocamldsort.spec,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -r1.3 -r1.4
--- ocamldsort.spec 4 Dec 2008 17:23:07 -0000 1.3
+++ ocamldsort.spec 26 Feb 2009 07:41:06 -0000 1.4
@@ -3,7 +3,7 @@
Name: ocamldsort
Version: 0.14.4
-Release: 4%{?dist}
+Release: 5%{?dist}
Summary: Dependency sorter for OCaml source files
Group: Development/Libraries
@@ -72,6 +72,9 @@
%changelog
+* Wed Feb 25 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.14.4-5
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
+
* Wed Nov 26 2008 Richard W.M. Jones <rjones(a)redhat.com> - 0.14.4-4
- Rebuild for OCaml 3.11.0+rc1.
15 years, 1 month
rpms/ocaml-zip/devel ocaml-zip.spec,1.6,1.7
by Jesse Keating
Author: jkeating
Update of /cvs/pkgs/rpms/ocaml-zip/devel
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv22068
Modified Files:
ocaml-zip.spec
Log Message:
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
Index: ocaml-zip.spec
===================================================================
RCS file: /cvs/pkgs/rpms/ocaml-zip/devel/ocaml-zip.spec,v
retrieving revision 1.6
retrieving revision 1.7
diff -u -r1.6 -r1.7
--- ocaml-zip.spec 4 Dec 2008 17:30:04 -0000 1.6
+++ ocaml-zip.spec 26 Feb 2009 07:40:01 -0000 1.7
@@ -3,7 +3,7 @@
Name: ocaml-zip
Version: 1.03
-Release: 6%{?dist}
+Release: 7%{?dist}
Summary: OCaml library for reading and writing zip, jar and gzip files
Group: Development/Libraries
@@ -102,6 +102,9 @@
%changelog
+* Wed Feb 25 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.03-7
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
+
* Wed Nov 26 2008 Richard W.M. Jones <rjones(a)redhat.com> - 1.03-6
- Rebuild for OCaml 3.11.0+rc1.
15 years, 1 month
rpms/ocaml-xmlrpc-light/devel ocaml-xmlrpc-light.spec,1.4,1.5
by Jesse Keating
Author: jkeating
Update of /cvs/pkgs/rpms/ocaml-xmlrpc-light/devel
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv21819
Modified Files:
ocaml-xmlrpc-light.spec
Log Message:
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
Index: ocaml-xmlrpc-light.spec
===================================================================
RCS file: /cvs/pkgs/rpms/ocaml-xmlrpc-light/devel/ocaml-xmlrpc-light.spec,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -r1.4 -r1.5
--- ocaml-xmlrpc-light.spec 4 Dec 2008 19:46:21 -0000 1.4
+++ ocaml-xmlrpc-light.spec 26 Feb 2009 07:39:03 -0000 1.5
@@ -3,7 +3,7 @@
Name: ocaml-xmlrpc-light
Version: 0.6
-Release: 5%{?dist}
+Release: 6%{?dist}
Summary: OCaml library for writing XML-RPC clients and servers
Group: Development/Libraries
@@ -83,6 +83,9 @@
%changelog
+* Wed Feb 25 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.6-6
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
+
* Wed Nov 26 2008 Richard W.M. Jones <rjones(a)redhat.com> - 0.6-5
- Rebuild for OCaml 3.11.0+rc1.
15 years, 1 month
rpms/ocaml-xml-light/devel ocaml-xml-light.spec,1.9,1.10
by Jesse Keating
Author: jkeating
Update of /cvs/pkgs/rpms/ocaml-xml-light/devel
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv21583
Modified Files:
ocaml-xml-light.spec
Log Message:
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
Index: ocaml-xml-light.spec
===================================================================
RCS file: /cvs/pkgs/rpms/ocaml-xml-light/devel/ocaml-xml-light.spec,v
retrieving revision 1.9
retrieving revision 1.10
diff -u -r1.9 -r1.10
--- ocaml-xml-light.spec 4 Dec 2008 17:36:50 -0000 1.9
+++ ocaml-xml-light.spec 26 Feb 2009 07:38:04 -0000 1.10
@@ -3,7 +3,7 @@
Name: ocaml-xml-light
Version: 2.2.cvs20070817
-Release: 10%{?dist}
+Release: 11%{?dist}
Summary: Minimal XML parser and printer for OCaml
Group: Development/Libraries
@@ -88,6 +88,9 @@
%changelog
+* Wed Feb 25 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.2.cvs20070817-11
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
+
* Wed Nov 26 2008 Richard W.M. Jones <rjones(a)redhat.com> - 2.2.cvs20070817-10
- Rebuild for OCaml 3.11.0+rc1.
15 years, 1 month
rpms/ocaml-ulex/devel ocaml-ulex.spec,1.13,1.14
by Jesse Keating
Author: jkeating
Update of /cvs/pkgs/rpms/ocaml-ulex/devel
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv21355
Modified Files:
ocaml-ulex.spec
Log Message:
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
Index: ocaml-ulex.spec
===================================================================
RCS file: /cvs/pkgs/rpms/ocaml-ulex/devel/ocaml-ulex.spec,v
retrieving revision 1.13
retrieving revision 1.14
diff -u -r1.13 -r1.14
--- ocaml-ulex.spec 4 Dec 2008 17:44:31 -0000 1.13
+++ ocaml-ulex.spec 26 Feb 2009 07:37:07 -0000 1.14
@@ -3,7 +3,7 @@
Name: ocaml-ulex
Version: 1.1
-Release: 5%{?dist}
+Release: 6%{?dist}
Summary: OCaml lexer generator for Unicode
Group: Development/Libraries
@@ -87,6 +87,9 @@
%changelog
+* Wed Feb 25 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.1-6
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
+
* Wed Nov 26 2008 Richard W.M. Jones <rjones(a)redhat.com> - 1.1-5
- Rebuild for OCaml 3.11.0+rc1.
15 years, 1 month
rpms/ocaml-type-conv/devel ocaml-type-conv.spec,1.9,1.10
by Jesse Keating
Author: jkeating
Update of /cvs/pkgs/rpms/ocaml-type-conv/devel
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv21051
Modified Files:
ocaml-type-conv.spec
Log Message:
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
Index: ocaml-type-conv.spec
===================================================================
RCS file: /cvs/pkgs/rpms/ocaml-type-conv/devel/ocaml-type-conv.spec,v
retrieving revision 1.9
retrieving revision 1.10
diff -u -r1.9 -r1.10
--- ocaml-type-conv.spec 4 Dec 2008 17:53:36 -0000 1.9
+++ ocaml-type-conv.spec 26 Feb 2009 07:36:11 -0000 1.10
@@ -3,7 +3,7 @@
Name: ocaml-type-conv
Version: 1.6.4
-Release: 3%{?dist}
+Release: 4%{?dist}
Summary: OCaml base library for type conversion
Group: Development/Libraries
@@ -58,6 +58,9 @@
%changelog
+* Wed Feb 25 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.6.4-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
+
* Wed Nov 26 2008 Richard W.M. Jones <rjones(a)redhat.com> - 1.6.4-3
- Rebuild for OCaml 3.11.0+rc1.
15 years, 1 month
rpms/ocaml-ssl/devel ocaml-ssl.spec,1.12,1.13
by Jesse Keating
Author: jkeating
Update of /cvs/pkgs/rpms/ocaml-ssl/devel
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv20749
Modified Files:
ocaml-ssl.spec
Log Message:
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
Index: ocaml-ssl.spec
===================================================================
RCS file: /cvs/pkgs/rpms/ocaml-ssl/devel/ocaml-ssl.spec,v
retrieving revision 1.12
retrieving revision 1.13
diff -u -r1.12 -r1.13
--- ocaml-ssl.spec 15 Jan 2009 10:31:11 -0000 1.12
+++ ocaml-ssl.spec 26 Feb 2009 07:35:14 -0000 1.13
@@ -3,7 +3,7 @@
Name: ocaml-ssl
Version: 0.4.3
-Release: 1%{?dist}
+Release: 2%{?dist}
Summary: SSL bindings for OCaml
Group: Development/Libraries
@@ -87,6 +87,9 @@
%changelog
+* Wed Feb 25 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.4.3-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
+
* Thu Jan 15 2009 Richard W.M. Jones <rjones(a)redhat.com> - 0.4.3-1
- New upstream version 0.4.3.
- Force rebuild against new OpenSSL 0.9.8j.
15 years, 1 month
rpms/ocaml-sqlite/devel ocaml-sqlite.spec,1.9,1.10
by Jesse Keating
Author: jkeating
Update of /cvs/pkgs/rpms/ocaml-sqlite/devel
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv20457
Modified Files:
ocaml-sqlite.spec
Log Message:
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
Index: ocaml-sqlite.spec
===================================================================
RCS file: /cvs/pkgs/rpms/ocaml-sqlite/devel/ocaml-sqlite.spec,v
retrieving revision 1.9
retrieving revision 1.10
diff -u -r1.9 -r1.10
--- ocaml-sqlite.spec 4 Dec 2008 18:11:46 -0000 1.9
+++ ocaml-sqlite.spec 26 Feb 2009 07:34:13 -0000 1.10
@@ -3,7 +3,7 @@
Name: ocaml-sqlite
Version: 1.2.0
-Release: 4%{?dist}
+Release: 5%{?dist}
Summary: OCaml library for accessing SQLite3 databases
Group: Development/Libraries
@@ -102,6 +102,9 @@
%changelog
+* Wed Feb 25 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.2.0-5
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
+
* Thu Dec 4 2008 Richard W.M. Jones <rjones(a)redhat.com> - 1.2.0-4
- Rebuild for OCaml 3.11.0.
15 years, 1 month