[sssd/f14] New upstream release 1.5.9
by Stephen Gallagher
commit d75e73e916aeaa5ce7876aecf3887cea3376354f
Author: Stephen Gallagher <sgallagh(a)redhat.com>
Date: Thu Jun 30 14:57:29 2011 -0400
New upstream release 1.5.9
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
Support for overriding home directory, shell and primary GID locally
Properly honor TTL values from SRV record lookups
Support non-POSIX groups in nested group chains (for RFC2307bis LDAP servers)
Properly escape IPv6 addresses in the failover code
Do not crash if inotify fails (e.g. resource exhaustion)
Don't add multiple TGT renewal callbacks (too many log messages)
.gitignore | 1 +
sources | 2 +-
sssd.spec | 13 ++++++++++++-
3 files changed, 14 insertions(+), 2 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index b91508c..0c87cd5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -12,3 +12,4 @@ sssd-1.2.91.tar.gz
/sssd-1.5.6.1.tar.gz
/sssd-1.5.7.tar.gz
/sssd-1.5.8.tar.gz
+/sssd-1.5.9.tar.gz
diff --git a/sources b/sources
index bcf4eb9..8f8ba36 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-19d19d2ee01521485337cbf9b006985a sssd-1.5.8.tar.gz
+a1e1fb7b55aa050d4b94069cfe763400 sssd-1.5.9.tar.gz
diff --git a/sssd.spec b/sssd.spec
index 16075d0..8170c7b 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -8,7 +8,7 @@
%global ldb_version 0.9.10
Name: sssd
-Version: 1.5.8
+Version: 1.5.9
Release: 1%{?dist}
Group: Applications/System
Summary: System Security Services Daemon
@@ -270,6 +270,17 @@ fi
%postun client -p /sbin/ldconfig
%changelog
+* Thu Jun 30 2011 Stephen Gallagher <sgallagh(a)redhat.com> - 1.5.9-1
+- New upstream release 1.5.9
+- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
+- Support for overriding home directory, shell and primary GID locally
+- Properly honor TTL values from SRV record lookups
+- Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
+- servers)
+- Properly escape IPv6 addresses in the failover code
+- Do not crash if inotify fails (e.g. resource exhaustion)
+- Don't add multiple TGT renewal callbacks (too many log messages)
+
* Fri May 27 2011 Stephen Gallagher <sgallagh(a)redhat.com> - 1.5.8-1
- New upstream release 1.5.8
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
10Â years, 10Â months
[python-modjkapi/f15] Lets make an f15 release
by Timothy Bielawa
commit a342c4de2945aa898826edc09050d6165542ae6a
Author: Tim Bielawa <tbielawa(a)redhat.com>
Date: Thu Jun 30 15:11:24 2011 -0400
Lets make an f15 release
.gitignore | 1 +
python-modjkapi.spec | 89 ++++++++++++++++++++++++++++++++++++++++++++++++++
sources | 1 +
3 files changed, 91 insertions(+), 0 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index e69de29..adf3865 100644
--- a/.gitignore
+++ b/.gitignore
@@ -0,0 +1 @@
+/modjkapi-0.1.2.28.tar.gz
diff --git a/python-modjkapi.spec b/python-modjkapi.spec
new file mode 100644
index 0000000..591f8f0
--- /dev/null
+++ b/python-modjkapi.spec
@@ -0,0 +1,89 @@
+# sitelib for noarch packages
+%{!?python_sitelib: %define python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")}
+
+Name: python-modjkapi
+Version: 0.1.2.28
+Release: 7%{?dist}
+Summary: API for modjk management
+
+Group: Development/Languages
+License: GPLv3+
+URL: https://fedorahosted.org/Taboot/
+Source0: http://people.redhat.com/~tbielawa/modjkapi/releases/modjkapi-latest/modj...
+BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+
+BuildArch: noarch
+BuildRequires: python-devel
+
+
+%description
+Simple API for managing mod_jk via it's xml web api.
+
+
+%prep
+%setup -q -n modjkapi-%{version}
+
+
+%build
+%{__python} setup.py build
+
+
+%install
+rm -rf $RPM_BUILD_ROOT
+%{__python} setup.py install --skip-build --root $RPM_BUILD_ROOT
+mkdir -p $RPM_BUILD_ROOT%{_bindir}/
+cp contrib/jk-rotate/jk-rotate $RPM_BUILD_ROOT%{_bindir}/
+mkdir -p $RPM_BUILD_ROOT%{_mandir}/man1/
+%{__gzip} -c docs/man/man1/jk-rotate.1 > $RPM_BUILD_ROOT%{_mandir}/man1/jk-rotate.1.gz
+
+
+%clean
+rm -rf $RPM_BUILD_ROOT
+
+
+%files
+%defattr(-,root,root,-)
+%{_bindir}/jk-rotate
+%doc AUTHORS LICENSE docs/rst/*
+# For noarch packages: sitelib
+%{python_sitelib}/modjkapi*
+%{_mandir}/man1/jk-rotate.1.gz
+
+
+%changelog
+* Wed May 11 2011 Tim Bielawa <tbielawa(a)redhat.com> - 0.1.2.28-7
+- Renaming bleeder to something more descriptive (jk-rotate)
+- Make a jk-rotate manpage
+
+* Sun May 8 2011 Tim Bielawa <tbielawa(a)redhat.com> - 0.1.2.28-6
+- Update copyright/license headers in preparation for a public release
+- Update URL to Taboots page because it will be distributed from there.
+- Source updated to an actual HTTP address.
+- Remove COPYING file. It was just a copy of the LICENSE file.
+- General package maintenance.
+
+* Fri May 22 2009 Greg Blomquist <gblomqui(a)redhat.com> - 0.1.2.28-5
+- Auth only worked with one proxy before...
+- Now it works with multiple proxies per environment.
+
+* Thu May 21 2009 Greg Blomquist <gblomqui(a)redhat.com> - 0.1.2.28-4
+- Auth only worked to get status before...now it works to change status too
+
+* Fri May 15 2009 Greg Blomquist <gblomqui(a)redhat.com> - 0.1.2.28-3
+- Now auth credentials work with urllib and urllib2 (i.e., python2.4 and python2.5)
+
+* Mon May 11 2009 Greg Blomquist <gblomqui(a)redhat.com> - 0.1.2.28-2
+- Allow modjkapi to send auth credentials to modjk
+
+* Wed Apr 22 2009 John Eckersberg <jeckersb(a)redhat.com> - 0.1.2.28-1
+- Update query string to work with versions prior to 1.2.28 as well
+
+* Thu Apr 16 2009 Greg Blomquist <gblomqui(a)redhat.com> - 0.1.2.28-0
+- Updated versioning scheme to match the mod_jk version supported
+- Updated to mod_jk version 1.2.28
+
+* Thu Feb 26 2009 Greg Blomquist <gblomqui(a)redhat.com> - 0.0.2-0
+- Updated modjkapi to allow callers to "stop", "activate", and "disable" workers
+
+* Tue Oct 28 2008 Steve 'Ashcrow' Milner <smilner(a)redhat.com> - 0.0.1-1
+- Initial spec
diff --git a/sources b/sources
index e69de29..ac61318 100644
--- a/sources
+++ b/sources
@@ -0,0 +1 @@
+09f81a7ca4ab248f09e5a20dcaadd063 modjkapi-0.1.2.28.tar.gz
10Â years, 10Â months
[tomcat6] resolves cve-2011-2204. Resolves missing commons-pool from tomcat6/lib
by Dave Knox
commit c7a789ba480f7b92232ed4248faf4f0570de05c5
Author: David Knox <dknox(a)dknox.(none)>
Date: Thu Jun 30 13:08:20 2011 -0600
resolves cve-2011-2204. Resolves missing commons-pool from tomcat6/lib
tomcat6-6.0.32-CVE-2011-2204-rhbz-717016.patch | 157 ++++++++++++++++++++++++
tomcat6.spec | 15 ++-
2 files changed, 170 insertions(+), 2 deletions(-)
---
diff --git a/tomcat6-6.0.32-CVE-2011-2204-rhbz-717016.patch b/tomcat6-6.0.32-CVE-2011-2204-rhbz-717016.patch
new file mode 100644
index 0000000..f6ba43b
--- /dev/null
+++ b/tomcat6-6.0.32-CVE-2011-2204-rhbz-717016.patch
@@ -0,0 +1,157 @@
+--- java/org/apache/catalina/mbeans/MemoryUserDatabaseMBean.java.orig 2011-06-28 09:28:45.429760363 -0600
++++ java/org/apache/catalina/mbeans/MemoryUserDatabaseMBean.java 2011-06-28 10:12:42.771759755 -0600
+@@ -180,7 +180,7 @@
+ MBeanUtils.createMBean(group);
+ } catch (Exception e) {
+ IllegalArgumentException iae = new IllegalArgumentException
+- ("Exception creating group " + group + " MBean");
++ ("Exception creating group " + groupname + " MBean");
+ iae.initCause(e);
+ throw iae;
+ }
+@@ -203,7 +203,7 @@
+ MBeanUtils.createMBean(role);
+ } catch (Exception e) {
+ IllegalArgumentException iae = new IllegalArgumentException
+- ("Exception creating role " + role + " MBean");
++ ("Exception creating role " + rolename + " MBean");
+ iae.initCause(e);
+ throw iae;
+ }
+@@ -228,7 +228,7 @@
+ MBeanUtils.createMBean(user);
+ } catch (Exception e) {
+ IllegalArgumentException iae = new IllegalArgumentException
+- ("Exception creating user " + user + " MBean");
++ ("Exception creating user " + username + " MBean");
+ iae.initCause(e);
+ throw iae;
+ }
+@@ -256,7 +256,7 @@
+ return (oname.toString());
+ } catch (MalformedObjectNameException e) {
+ IllegalArgumentException iae = new IllegalArgumentException
+- ("Cannot create object name for group " + group);
++ ("Cannot create object name for group [" + groupname + "]");
+ iae.initCause(e);
+ throw iae;
+ }
+@@ -283,7 +283,7 @@
+ return (oname.toString());
+ } catch (MalformedObjectNameException e) {
+ IllegalArgumentException iae = new IllegalArgumentException
+- ("Cannot create object name for role " + role);
++ ("Cannot create object name for role [" + rolename + "]");
+ iae.initCause(e);
+ throw iae;
+ }
+@@ -310,7 +310,7 @@
+ return (oname.toString());
+ } catch (MalformedObjectNameException e) {
+ IllegalArgumentException iae = new IllegalArgumentException
+- ("Cannot create object name for user " + user);
++ ("Cannot create object name for user [" + username + "]");
+ iae.initCause(e);
+ throw iae;
+ }
+@@ -335,7 +335,7 @@
+ database.removeGroup(group);
+ } catch (Exception e) {
+ IllegalArgumentException iae = new IllegalArgumentException
+- ("Exception destroying group " + group + " MBean");
++ ("Exception destroying group [" + groupname + "] MBean");
+ iae.initCause(e);
+ throw iae;
+ }
+@@ -360,7 +360,7 @@
+ database.removeRole(role);
+ } catch (Exception e) {
+ IllegalArgumentException iae = new IllegalArgumentException
+- ("Exception destroying role " + role + " MBean");
++ ("Exception destroying role [" + role + "] MBean");
+ iae.initCause(e);
+ throw iae;
+ }
+@@ -385,7 +385,7 @@
+ database.removeUser(user);
+ } catch (Exception e) {
+ IllegalArgumentException iae = new IllegalArgumentException
+- ("Exception destroying user " + user + " MBean");
++ ("Exception destroying user [" + username + "] MBean");
+ iae.initCause(e);
+ throw iae;
+ }
+--- java/org/apache/catalina/users/MemoryUser.java.orig 2011-06-28 09:28:55.576760342 -0600
++++ java/org/apache/catalina/users/MemoryUser.java 2011-06-28 10:00:15.373759897 -0600
+@@ -246,7 +246,7 @@
+ * <code>username</code> or </code>name</code> for the username
+ * property.</p>
+ */
+- public String toString() {
++ public String toXml() {
+
+ StringBuffer sb = new StringBuffer("<user username=\"");
+ sb.append(RequestUtil.filter(username));
+@@ -293,5 +293,51 @@
+
+ }
+
++ /**
++ * <p>Return a String representation of this user.</p>
++ */
++ @Override
++ public String toString() {
++
++ StringBuilder sb = new StringBuilder("User username=\"");
++ sb.append(RequestUtil.filter(username));
++ sb.append("\"");
++ if ( fullName != null) {
++ sb.append(", fullName=\"");
++ sb.append(RequestUtil.filter(fullName));
++ sb.append("\"");
++ }
++ synchronized (groups) {
++ if (groups.size() > 0) {
++ sb.append(", groups=\"");
++ int n = 0;
++ Iterator<Group> values = groups.iterator();
++ while (values.hasNext()) {
++ if (n > 0) {
++ sb.append(',');
++ }
++ n++;
++ sb.append(RequestUtil.filter(values.next().getGroupname()));
++ }
++ sb.append("\"");
++ }
++ }
++ synchronized (roles) {
++ if (roles.size() > 0) {
++ sb.append(", roles=\"");
++ int n = 0;
++ Iterator<Role> values = roles.iterator();
++ while (values.hasNext()) {
++ if (n > 0) {
++ sb.append(',');
++ }
++ n++;
++ sb.append(RequestUtil.filter(values.next().getRolename()));
++ }
++ sb.append("\"");
++ }
++ }
++ return (sb.toString());
++ }
+
+ }
+--- java/org/apache/catalina/users/MemoryUserDatabase.java.orig 2011-06-28 09:29:08.873760339 -0600
++++ java/org/apache/catalina/users/MemoryUserDatabase.java 2011-06-28 09:30:30.370760318 -0600
+@@ -549,7 +549,7 @@
+ values = getUsers();
+ while (values.hasNext()) {
+ writer.print(" ");
+- writer.println(values.next());
++ writer.println(((MemoryUser) values.next()).toXml());
+ }
+
+ // Print the file epilog
diff --git a/tomcat6.spec b/tomcat6.spec
index fdd4b01..f84cd3e 100644
--- a/tomcat6.spec
+++ b/tomcat6.spec
@@ -53,7 +53,7 @@
Name: tomcat6
Epoch: 0
Version: %{major_version}.%{minor_version}.%{micro_version}
-Release: 8%{?dist}
+Release: 9%{?dist}
Summary: Apache Servlet/JSP Engine, RI for Servlet %{servletspec}/JSP %{jspspec} API
Group: Networking/Daemons
@@ -74,6 +74,8 @@ Patch0: %{name}-%{major_version}.%{minor_version}-bootstrap-MANIFEST.MF.p
Patch1: %{name}-%{major_version}.%{minor_version}-tomcat-users-webapp.patch
# In 6.0.32 source
#Patch2: %{name}-%{major_version}.%{minor_version}-rhbz-674601.patch
+Patch3: %{name}-6.0.32-CVE-2011-2204-rhbz-717016.patch
+
BuildArch: noarch
BuildRequires: ant
@@ -211,6 +213,8 @@ find . -type f \( -name "*.bat" -o -name "*.class" -o -name Thumbs.db -o -name "
%patch0 -p0
%patch1 -p0
# %patch2 -p0
+%patch3 -p0
+
%{__ln_s} $(build-classpath jakarta-taglibs-core) webapps/examples/WEB-INF/lib/jstl.jar
%{__ln_s} $(build-classpath jakarta-taglibs-standard) webapps/examples/WEB-INF/lib/standard.jar
@@ -322,9 +326,11 @@ pushd ${RPM_BUILD_ROOT}%{_javadir}
%{__ln_s} %{name}-el-%{elspec}-api.jar %{name}-el-api.jar
popd
+# apache-commons-dbcp
pushd output/build
%{_bindir}/build-jar-repository lib apache-commons-collections \
- apache-commons-dbcp apache-commons-pool ecj 2>&1
+ apache-commons-dbcp apache-commons-pool ecj 2>&1
+
# need to use -p here with b-j-r otherwise the examples webapp fails to
# load with a java.io.IOException
%{_bindir}/build-jar-repository -p webapps/examples/WEB-INF/lib \
@@ -338,6 +344,7 @@ pushd ${RPM_BUILD_ROOT}%{libdir}
%{__ln_s} ../%{name}-el-%{elspec}-api.jar .
%{__ln_s} $(build-classpath apache-commons-collections) commons-collections.jar
%{__ln_s} $(build-classpath apache-commons-dbcp) commons-dbcp.jar
+ %{__ln_s} $(build-classpath apache-commons-pool) commons-pool.jar
%{__ln_s} $(build-classpath log4j) log4j.jar
%{__ln_s} $(build-classpath ecj) jasper-jdt.jar
@@ -566,6 +573,10 @@ fi
%{appdir}/sample
%changelog
+* Wed Jun 29 2011 Dave Knox <dknox(a)redhat.com> 0:6.0.32-9
+- Resolves: CVE-2011-2204
+- Added missing commons-pool to tomcat6/lib
+
* Mon May 16 2011 Alexander Kurtakov <akurtako(a)redhat.com> 0:6.0.32-8
- Update servlet and jsp osgi manifests.
10Â years, 10Â months
[sssd/f15: 2/2] Merge branch 'master' into f15
by Stephen Gallagher
commit 9a26a80fc0fd3495ebc9bc214cb4c6cd4ce1dfc6
Merge: 0a8d336 4ef0c7f
Author: Stephen Gallagher <sgallagh(a)redhat.com>
Date: Thu Jun 30 15:05:12 2011 -0400
Merge branch 'master' into f15
.gitignore | 1 +
sources | 2 +-
sssd.spec | 13 ++++++++++++-
3 files changed, 14 insertions(+), 2 deletions(-)
---
diff --cc sssd.spec
index 727e556,e1a8b1e..4c7bb77
--- a/sssd.spec
+++ b/sssd.spec
@@@ -5,10 -5,10 +5,10 @@@
# Determine the location of the LDB modules directory
%global ldb_modulesdir %(pkg-config --variable=modulesdir ldb)
-%global ldb_version 1.0.2
+%global ldb_version 1.0.0
Name: sssd
- Version: 1.5.8
+ Version: 1.5.9
Release: 1%{?dist}
Group: Applications/System
Summary: System Security Services Daemon
10Â years, 10Â months
[sssd] New upstream release 1.5.9 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 Support for overr
by Stephen Gallagher
commit 4ef0c7f5e6d54a2531532396351cc924363f44d5
Author: Stephen Gallagher <sgallagh(a)redhat.com>
Date: Thu Jun 30 14:57:29 2011 -0400
New upstream release 1.5.9
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
Support for overriding home directory, shell and primary GID locally
Properly honor TTL values from SRV record lookups
Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
servers)
Properly escape IPv6 addresses in the failover code
Do not crash if inotify fails (e.g. resource exhaustion)
Don't add multiple TGT renewal callbacks (too many log messages)
.gitignore | 1 +
sources | 2 +-
sssd.spec | 13 ++++++++++++-
3 files changed, 14 insertions(+), 2 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index b91508c..0c87cd5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -12,3 +12,4 @@ sssd-1.2.91.tar.gz
/sssd-1.5.6.1.tar.gz
/sssd-1.5.7.tar.gz
/sssd-1.5.8.tar.gz
+/sssd-1.5.9.tar.gz
diff --git a/sources b/sources
index bcf4eb9..8f8ba36 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-19d19d2ee01521485337cbf9b006985a sssd-1.5.8.tar.gz
+a1e1fb7b55aa050d4b94069cfe763400 sssd-1.5.9.tar.gz
diff --git a/sssd.spec b/sssd.spec
index 763cf88..e1a8b1e 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -8,7 +8,7 @@
%global ldb_version 1.0.2
Name: sssd
-Version: 1.5.8
+Version: 1.5.9
Release: 1%{?dist}
Group: Applications/System
Summary: System Security Services Daemon
@@ -297,6 +297,17 @@ fi
%postun client -p /sbin/ldconfig
%changelog
+* Thu Jun 30 2011 Stephen Gallagher <sgallagh(a)redhat.com> - 1.5.9-1
+- New upstream release 1.5.9
+- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
+- Support for overriding home directory, shell and primary GID locally
+- Properly honor TTL values from SRV record lookups
+- Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
+- servers)
+- Properly escape IPv6 addresses in the failover code
+- Do not crash if inotify fails (e.g. resource exhaustion)
+- Don't add multiple TGT renewal callbacks (too many log messages)
+
* Fri May 27 2011 Stephen Gallagher <sgallagh(a)redhat.com> - 1.5.8-1
- New upstream release 1.5.8
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
10Â years, 10Â months