rpms/perl-CGI-Application-Dispatch/devel .cvsignore, 1.2, 1.3 perl-CGI-Application-Dispatch.spec, 1.3, 1.4 sources, 1.2, 1.3
by Emmanuel Seyman
Author: eseyman
Update of /cvs/pkgs/rpms/perl-CGI-Application-Dispatch/devel
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv19216
Modified Files:
.cvsignore perl-CGI-Application-Dispatch.spec sources
Log Message:
Update to 2.17
Index: .cvsignore
===================================================================
RCS file: /cvs/pkgs/rpms/perl-CGI-Application-Dispatch/devel/.cvsignore,v
retrieving revision 1.2
retrieving revision 1.3
diff -u -p -r1.2 -r1.3
--- .cvsignore 2 Jul 2009 23:01:09 -0000 1.2
+++ .cvsignore 1 Jan 2010 16:57:18 -0000 1.3
@@ -1 +1 @@
-CGI-Application-Dispatch-2.16.tar.gz
+CGI-Application-Dispatch-2.17.tar.gz
Index: perl-CGI-Application-Dispatch.spec
===================================================================
RCS file: /cvs/pkgs/rpms/perl-CGI-Application-Dispatch/devel/perl-CGI-Application-Dispatch.spec,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -p -r1.3 -r1.4
--- perl-CGI-Application-Dispatch.spec 7 Dec 2009 04:53:03 -0000 1.3
+++ perl-CGI-Application-Dispatch.spec 1 Jan 2010 16:57:19 -0000 1.4
@@ -1,6 +1,6 @@
Name: perl-CGI-Application-Dispatch
-Version: 2.16
-Release: 3%{?dist}
+Version: 2.17
+Release: 1%{?dist}
Summary: Dispatch requests to CGI::Application based objects
License: GPL+ or Artistic
Group: Development/Libraries
@@ -52,6 +52,9 @@ rm -rf $RPM_BUILD_ROOT
%{_mandir}/man3/*
%changelog
+* Fri Jan 1 2010 Emmanuel Seyman <emmanuel.seyman(a)club-internet.fr> - 2.17-1
+- Update to 2.17.
+
* Mon Dec 7 2009 Stepan Kasal <skasal(a)redhat.com> - 2.16-3
- rebuild against perl 5.10.1
Index: sources
===================================================================
RCS file: /cvs/pkgs/rpms/perl-CGI-Application-Dispatch/devel/sources,v
retrieving revision 1.2
retrieving revision 1.3
diff -u -p -r1.2 -r1.3
--- sources 2 Jul 2009 23:01:09 -0000 1.2
+++ sources 1 Jan 2010 16:57:19 -0000 1.3
@@ -1 +1 @@
-365b4b887dc8b60703b97dcbe874fa76 CGI-Application-Dispatch-2.16.tar.gz
+88d23450667d6a4948c41e10ec0e0ba0 CGI-Application-Dispatch-2.17.tar.gz
12Â years, 4Â months
rpms/alsa-utils/devel .cvsignore, 1.29, 1.30 alsa-utils.spec, 1.88, 1.89 sources, 1.34, 1.35
by perex
Author: perex
Update of /cvs/pkgs/rpms/alsa-utils/devel
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv17612
Modified Files:
.cvsignore alsa-utils.spec sources
Log Message:
updated to 1.0.22
Index: .cvsignore
===================================================================
RCS file: /cvs/pkgs/rpms/alsa-utils/devel/.cvsignore,v
retrieving revision 1.29
retrieving revision 1.30
diff -u -p -r1.29 -r1.30
--- .cvsignore 3 Sep 2009 10:57:30 -0000 1.29
+++ .cvsignore 1 Jan 2010 16:48:24 -0000 1.30
@@ -22,3 +22,4 @@ alsa-utils-1.0.18.tar.bz2
alsa-utils-1.0.19.tar.bz2
alsa-utils-1.0.20.tar.bz2
alsa-utils-1.0.21.tar.bz2
+alsa-utils-1.0.22.tar.bz2
Index: alsa-utils.spec
===================================================================
RCS file: /cvs/pkgs/rpms/alsa-utils/devel/alsa-utils.spec,v
retrieving revision 1.88
retrieving revision 1.89
diff -u -p -r1.88 -r1.89
--- alsa-utils.spec 3 Sep 2009 11:00:49 -0000 1.88
+++ alsa-utils.spec 1 Jan 2010 16:48:25 -0000 1.89
@@ -3,8 +3,8 @@
Summary: Advanced Linux Sound Architecture (ALSA) utilities
Name: alsa-utils
-Version: 1.0.21
-Release: 2%{?prever_dot}%{?dist}
+Version: 1.0.22
+Release: 1%{?prever_dot}%{?dist}
License: GPLv2+
Group: Applications/Multimedia
URL: http://www.alsa-project.org/
@@ -13,7 +13,6 @@ Source4: alsaunmute
Source6: alsa-info.sh
Source10: alsa.rules
Source11: alsactl.conf
-Patch1: alsactl-init-fix-headphone2.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
BuildRequires: alsa-lib-devel >= %{version}
BuildRequires: ncurses-devel
@@ -27,7 +26,6 @@ Architecture (ALSA).
%prep
%setup -q -n %{name}-%{version}%{?prever}
-%patch1 -p1 -b .headphone
%build
%configure CFLAGS="$RPM_OPT_FLAGS -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64" --sbindir=/sbin --disable-alsaconf
@@ -94,6 +92,9 @@ if [ -s /etc/alsa/asound.state -a ! -s /
fi
%changelog
+* Fri Jan 1 2010 Jaroslav Kysela <jkysela(a)redhat.com> 1.0.22-1
+- updated to 1.0.22 final
+
* Thu Sep 3 2009 Jaroslav Kysela <jkysela(a)redhat.com> 1.0.21-2
- added missing patch file
Index: sources
===================================================================
RCS file: /cvs/pkgs/rpms/alsa-utils/devel/sources,v
retrieving revision 1.34
retrieving revision 1.35
diff -u -p -r1.34 -r1.35
--- sources 3 Sep 2009 10:57:30 -0000 1.34
+++ sources 1 Jan 2010 16:48:25 -0000 1.35
@@ -1 +1 @@
-3672287c2608040d111ce45495ba7602 alsa-utils-1.0.21.tar.bz2
+f7180316188552ee1e6759a03f1fe98d alsa-utils-1.0.22.tar.bz2
12Â years, 4Â months
rpms/gif2png/F-11 gif2png-overflow.patch, NONE, 1.1 gif2png.spec, 1.8, 1.9
by ensc
Author: ensc
Update of /cvs/extras/rpms/gif2png/F-11
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv15342/F-11
Modified Files:
gif2png.spec
Added Files:
gif2png-overflow.patch
Log Message:
fixed command line buffer overflow (#547515)
gif2png-overflow.patch:
gif2png.c | 8 ++++++--
1 file changed, 6 insertions(+), 2 deletions(-)
--- NEW FILE gif2png-overflow.patch ---
Fixes cmdline buffer overflow described in
http://lists.grok.org.uk/pipermail/full-disclosure/2009-December/072002.html
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550978
Index: gif2png-2.5.2/gif2png.c
===================================================================
--- gif2png-2.5.2.orig/gif2png.c
+++ gif2png-2.5.2/gif2png.c
@@ -682,7 +682,10 @@ int processfile(char *fname, FILE *fp)
strcpy(outname, fname);
- file_ext = outname+strlen(outname)-4;
+ file_ext = outname+strlen(outname);
+ if (file_ext >= outname + 4)
+ file_ext -= 4;
+
if (strcmp(file_ext, ".gif") != 0 && strcmp(file_ext, ".GIF") != 0 &&
strcmp(file_ext, "_gif") != 0 && strcmp(file_ext, "_GIF") != 0) {
/* try to derive basename */
@@ -874,7 +877,8 @@ int main(int argc, char *argv[])
}
} else {
for (i = ac;i<argc; i++) {
- strcpy(name, argv[i]);
+ strncpy(name, argv[i], sizeof name - sizeof ".gif");
+ name[sizeof name - sizeof ".gif"] = '\0';
if ((fp = fopen(name, "rb")) == NULL) {
/* retry with .gif appended */
strcat(name, ".gif");
Index: gif2png.spec
===================================================================
RCS file: /cvs/extras/rpms/gif2png/F-11/gif2png.spec,v
retrieving revision 1.8
retrieving revision 1.9
diff -u -p -r1.8 -r1.9
--- gif2png.spec 1 Mar 2009 14:18:44 -0000 1.8
+++ gif2png.spec 1 Jan 2010 16:36:27 -0000 1.9
@@ -3,7 +3,7 @@
Summary: A GIF to PNG converter
Name: gif2png
Version: 2.5.1
-Release: %release_func 6
+Release: %release_func 1100
License: BSD
Group: Applications/Multimedia
URL: http://www.catb.org/~esr/gif2png/
@@ -75,6 +75,9 @@ rm -rf $RPM_BUILD_ROOT
%changelog
+* Fri Jan 1 2010 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 2.5.1-1100
+- fixed command line buffer overflow (#547515)
+
* Sun Mar 1 2009 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 2.5.1-6
- made web2png noarch
12Â years, 4Â months
rpms/gif2png/F-12 gif2png-overflow.patch, NONE, 1.1 gif2png.spec, 1.9, 1.10
by ensc
Author: ensc
Update of /cvs/extras/rpms/gif2png/F-12
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv15342/F-12
Modified Files:
gif2png.spec
Added Files:
gif2png-overflow.patch
Log Message:
fixed command line buffer overflow (#547515)
gif2png-overflow.patch:
gif2png.c | 8 ++++++--
1 file changed, 6 insertions(+), 2 deletions(-)
--- NEW FILE gif2png-overflow.patch ---
Fixes cmdline buffer overflow described in
http://lists.grok.org.uk/pipermail/full-disclosure/2009-December/072002.html
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550978
Index: gif2png-2.5.2/gif2png.c
===================================================================
--- gif2png-2.5.2.orig/gif2png.c
+++ gif2png-2.5.2/gif2png.c
@@ -682,7 +682,10 @@ int processfile(char *fname, FILE *fp)
strcpy(outname, fname);
- file_ext = outname+strlen(outname)-4;
+ file_ext = outname+strlen(outname);
+ if (file_ext >= outname + 4)
+ file_ext -= 4;
+
if (strcmp(file_ext, ".gif") != 0 && strcmp(file_ext, ".GIF") != 0 &&
strcmp(file_ext, "_gif") != 0 && strcmp(file_ext, "_GIF") != 0) {
/* try to derive basename */
@@ -874,7 +877,8 @@ int main(int argc, char *argv[])
}
} else {
for (i = ac;i<argc; i++) {
- strcpy(name, argv[i]);
+ strncpy(name, argv[i], sizeof name - sizeof ".gif");
+ name[sizeof name - sizeof ".gif"] = '\0';
if ((fp = fopen(name, "rb")) == NULL) {
/* retry with .gif appended */
strcat(name, ".gif");
Index: gif2png.spec
===================================================================
RCS file: /cvs/extras/rpms/gif2png/F-12/gif2png.spec,v
retrieving revision 1.9
retrieving revision 1.10
diff -u -p -r1.9 -r1.10
--- gif2png.spec 25 Jul 2009 00:07:54 -0000 1.9
+++ gif2png.spec 1 Jan 2010 16:36:26 -0000 1.10
@@ -3,12 +3,13 @@
Summary: A GIF to PNG converter
Name: gif2png
Version: 2.5.1
-Release: %release_func 7
+Release: %release_func 1200
License: BSD
Group: Applications/Multimedia
URL: http://www.catb.org/~esr/gif2png/
Source0: http://www.catb.org/~esr/gif2png/%name-%version.tar.gz
Patch0: ftp://ftp.debian.org/debian/pool/main/g/gif2png/gif2png_2.5.1-3.diff.gz
+Patch1: gif2png-overflow.patch
BuildRoot: %_tmppath/%name-%version-%release-root
BuildRequires: libpng-devel
@@ -43,8 +44,9 @@ convert entire web hierarchies (images a
%prep
%setup -q
%patch0 -p1
+%patch1 -p1
-cat debian/patches/* | patch -p1
+cat debian/patches/* | patch -p1
%build
@@ -75,6 +77,9 @@ rm -rf $RPM_BUILD_ROOT
%changelog
+* Fri Jan 1 2010 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 2.5.1-1200
+- fixed command line buffer overflow (#547515)
+
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.5.1-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
12Â years, 4Â months
rpms/gif2png/devel gif2png.spec,1.11,1.12
by ensc
Author: ensc
Update of /cvs/extras/rpms/gif2png/devel
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv14452
Modified Files:
gif2png.spec
Log Message:
fixed %apply call
fixed typo in %changelog
Index: gif2png.spec
===================================================================
RCS file: /cvs/extras/rpms/gif2png/devel/gif2png.spec,v
retrieving revision 1.11
retrieving revision 1.12
diff -u -p -r1.11 -r1.12
--- gif2png.spec 1 Jan 2010 16:02:03 -0000 1.11
+++ gif2png.spec 1 Jan 2010 16:32:35 -0000 1.12
@@ -5,7 +5,7 @@
Summary: A GIF to PNG converter
Name: gif2png
Version: 2.5.2
-Release: %release_func 1301
+Release: %release_func 1302
License: BSD
Group: Applications/Multimedia
URL: http://www.catb.org/~esr/gif2png/
@@ -44,7 +44,7 @@ convert entire web hierarchies (images a
%prep
%setup -q
-%apply -n0
+%apply -n0 -p1
%build
@@ -75,8 +75,8 @@ rm -rf $RPM_BUILD_ROOT
%changelog
-* Fri Jan 1 2010 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 2.5.2-1301
-- fixed command line buffer overlow (#547515, CVE-2009-XXXX)
+* Fri Jan 1 2010 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 2.5.2-1302
+- fixed command line buffer overflow (#547515, CVE-2009-XXXX)
* Sat Nov 14 2009 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 2.5.2-1300
- updated to 2.5.2
12Â years, 4Â months
rpms/gif2png/devel gif2png-overflow.patch, NONE, 1.1 gif2png.spec, 1.10, 1.11
by ensc
Author: ensc
Update of /cvs/extras/rpms/gif2png/devel
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv9522
Modified Files:
gif2png.spec
Added Files:
gif2png-overflow.patch
Log Message:
fixed command line buffer overlow (#547515, CVE-2009-XXXX)
gif2png-overflow.patch:
gif2png.c | 8 ++++++--
1 file changed, 6 insertions(+), 2 deletions(-)
--- NEW FILE gif2png-overflow.patch ---
Fixes cmdline buffer overflow described in
http://lists.grok.org.uk/pipermail/full-disclosure/2009-December/072002.html
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550978
Index: gif2png-2.5.2/gif2png.c
===================================================================
--- gif2png-2.5.2.orig/gif2png.c
+++ gif2png-2.5.2/gif2png.c
@@ -682,7 +682,10 @@ int processfile(char *fname, FILE *fp)
strcpy(outname, fname);
- file_ext = outname+strlen(outname)-4;
+ file_ext = outname+strlen(outname);
+ if (file_ext >= outname + 4)
+ file_ext -= 4;
+
if (strcmp(file_ext, ".gif") != 0 && strcmp(file_ext, ".GIF") != 0 &&
strcmp(file_ext, "_gif") != 0 && strcmp(file_ext, "_GIF") != 0) {
/* try to derive basename */
@@ -874,7 +877,8 @@ int main(int argc, char *argv[])
}
} else {
for (i = ac;i<argc; i++) {
- strcpy(name, argv[i]);
+ strncpy(name, argv[i], sizeof name - sizeof ".gif");
+ name[sizeof name - sizeof ".gif"] = '\0';
if ((fp = fopen(name, "rb")) == NULL) {
/* retry with .gif appended */
strcat(name, ".gif");
Index: gif2png.spec
===================================================================
RCS file: /cvs/extras/rpms/gif2png/devel/gif2png.spec,v
retrieving revision 1.10
retrieving revision 1.11
diff -u -p -r1.10 -r1.11
--- gif2png.spec 14 Nov 2009 17:32:45 -0000 1.10
+++ gif2png.spec 1 Jan 2010 16:02:03 -0000 1.11
@@ -1,13 +1,16 @@
%{!?release_func:%global release_func() %1%{?dist}}
+%{!?apply:%global apply(p:n:b:) %patch%%{-n:%%{-n*}} %%{-p:-p %%{-p*}} %%{-b:-b %%{-b*}} \
+%nil}
Summary: A GIF to PNG converter
Name: gif2png
Version: 2.5.2
-Release: %release_func 1300
+Release: %release_func 1301
License: BSD
Group: Applications/Multimedia
URL: http://www.catb.org/~esr/gif2png/
Source0: http://www.catb.org/~esr/gif2png/%name-%version.tar.gz
+Patch0: gif2png-overflow.patch
BuildRoot: %_tmppath/%name-%version-%release-root
BuildRequires: libpng-devel
@@ -41,6 +44,7 @@ convert entire web hierarchies (images a
%prep
%setup -q
+%apply -n0
%build
@@ -71,6 +75,9 @@ rm -rf $RPM_BUILD_ROOT
%changelog
+* Fri Jan 1 2010 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 2.5.2-1301
+- fixed command line buffer overlow (#547515, CVE-2009-XXXX)
+
* Sat Nov 14 2009 Enrico Scholz <enrico.scholz(a)informatik.tu-chemnitz.de> - 2.5.2-1300
- updated to 2.5.2
- removed Debian patches; issues are addressed by new upstream release
12Â years, 4Â months