[arpwatch/f16] fix supplementary group list (#825328) (CVE-2012-2653)
by aledvinkï¼ fedoraproject.org
commit 3c2b488ea1ca387e954b6f98f4445431022396f1
Author: Ales Ledvinka <aledvink(a)redhat.com>
Date: Thu May 31 17:57:54 2012 +0200
fix supplementary group list (#825328) (CVE-2012-2653)
arpwatch-2.1a15-dropgroup.patch | 12 ++++++++++++
1 files changed, 12 insertions(+), 0 deletions(-)
---
diff --git a/arpwatch-2.1a15-dropgroup.patch b/arpwatch-2.1a15-dropgroup.patch
new file mode 100644
index 0000000..b6a25f8
--- /dev/null
+++ b/arpwatch-2.1a15-dropgroup.patch
@@ -0,0 +1,12 @@
+diff -up arpwatch-2.1a15/arpwatch.c.dropgroup arpwatch-2.1a15/arpwatch.c
+--- arpwatch-2.1a15/arpwatch.c.dropgroup 2012-05-31 11:47:13.327901902 +0200
++++ arpwatch-2.1a15/arpwatch.c 2012-05-31 11:48:04.859900061 +0200
+@@ -147,7 +147,7 @@ void dropprivileges(const char* user)
+ struct passwd* pw;
+ pw = getpwnam( user );
+ if ( pw ) {
+- if ( initgroups(pw->pw_name, NULL) != 0 || setgid(pw->pw_gid) != 0 ||
++ if ( setgid(pw->pw_gid) != 0 || setgroups(0, NULL) != 0 ||
+ setuid(pw->pw_uid) != 0 ) {
+ syslog(LOG_ERR, "Couldn't change to '%.32s' uid=%d gid=%d", user,
+ pw->pw_uid, pw->pw_gid);
10Â years, 8Â months
[arpwatch/f15] 2.1a15-16
by aledvinkï¼ fedoraproject.org
commit 4a6c801948c3dc258cc3ab7c8b29482b9ac6f4f9
Author: Ales Ledvinka <aledvink(a)redhat.com>
Date: Fri Jun 1 00:26:44 2012 +0200
2.1a15-16
arpwatch.spec | 7 ++++++-
1 files changed, 6 insertions(+), 1 deletions(-)
---
diff --git a/arpwatch.spec b/arpwatch.spec
index f722bc8..07548d0 100644
--- a/arpwatch.spec
+++ b/arpwatch.spec
@@ -3,7 +3,7 @@
Name: arpwatch
Epoch: 14
Version: 2.1a15
-Release: 15%{?dist}
+Release: 16%{?dist}
Summary: Network monitoring tools for tracking IP addresses on a network
Group: Applications/System
License: BSD with advertising
@@ -33,6 +33,7 @@ Patch7: arpwatch-scripts.patch
Patch8: arpwatch-2.1a15-nolocalpcap.patch
Patch9: arpwatch-2.1a15-bogon.patch
Patch10: arpwatch-2.1a15-extraman.patch
+Patch11: arpwatch-2.1a15-dropgroup.patch
%description
The arpwatch package contains arpwatch and arpsnmp. Arpwatch and
@@ -57,6 +58,7 @@ network.
%patch8 -p1 -b .nolocalpcap
%patch9 -p1 -b .bogon
%patch10 -p1 -b .extraman
+%patch11 -p1 -b .dropgroup
%build
%configure
@@ -147,6 +149,9 @@ fi
%verify(not md5 size mtime) %config(noreplace) %{_vararpwatch}/ethercodes.dat
%changelog
+* Thu May 31 2012 Ale<C5><A1> Ledvinka <aledvink(a)redhat.com> 14:2.1a15-18
+- fix supplementary group list (#825328) (CVE-2012-2653)
+
* Mon Mar 28 2011 Miroslav Lichvar <mlichvar(a)redhat.com> 14:2.1a15-15
- update ethercodes.dat (#690948)
10Â years, 8Â months
[arpwatch/f15] fix supplementary group list (#825328) (CVE-2012-2653)
by aledvinkï¼ fedoraproject.org
commit 5afa448b034ed603123583e19037b2d0693e26d9
Author: Ales Ledvinka <aledvink(a)redhat.com>
Date: Thu May 31 17:57:54 2012 +0200
fix supplementary group list (#825328) (CVE-2012-2653)
arpwatch-2.1a15-dropgroup.patch | 12 ++++++++++++
1 files changed, 12 insertions(+), 0 deletions(-)
---
diff --git a/arpwatch-2.1a15-dropgroup.patch b/arpwatch-2.1a15-dropgroup.patch
new file mode 100644
index 0000000..b6a25f8
--- /dev/null
+++ b/arpwatch-2.1a15-dropgroup.patch
@@ -0,0 +1,12 @@
+diff -up arpwatch-2.1a15/arpwatch.c.dropgroup arpwatch-2.1a15/arpwatch.c
+--- arpwatch-2.1a15/arpwatch.c.dropgroup 2012-05-31 11:47:13.327901902 +0200
++++ arpwatch-2.1a15/arpwatch.c 2012-05-31 11:48:04.859900061 +0200
+@@ -147,7 +147,7 @@ void dropprivileges(const char* user)
+ struct passwd* pw;
+ pw = getpwnam( user );
+ if ( pw ) {
+- if ( initgroups(pw->pw_name, NULL) != 0 || setgid(pw->pw_gid) != 0 ||
++ if ( setgid(pw->pw_gid) != 0 || setgroups(0, NULL) != 0 ||
+ setuid(pw->pw_uid) != 0 ) {
+ syslog(LOG_ERR, "Couldn't change to '%.32s' uid=%d gid=%d", user,
+ pw->pw_uid, pw->pw_gid);
10Â years, 8Â months
[gridengine/f15] Avoid %preun failures (Bug 826668)
by Orion Poplawski
commit 00f82032d344d90b37de5553bda30b18499f48b5
Author: Orion Poplawski <orion(a)cora.nwra.com>
Date: Thu May 31 15:58:52 2012 -0600
Avoid %preun failures (Bug 826668)
gridengine.spec | 5 ++++-
1 files changed, 4 insertions(+), 1 deletions(-)
---
diff --git a/gridengine.spec b/gridengine.spec
index 6226e7f..87bfef2 100644
--- a/gridengine.spec
+++ b/gridengine.spec
@@ -7,7 +7,7 @@
Name: gridengine
Version: 6.2u5
-Release: 10%{?dist}.4
+Release: 10%{?dist}.5
Summary: Grid Engine - Distributed Computing Management software
Group: Applications/System
@@ -597,6 +597,9 @@ fi
%changelog
+* Thu May 31 2012 Orion Poplawski <orion(a)cora.nwra.com> 6.2u5-10.5
+- Avoid %%preun failures (Bug 826668)
+
* Tue Apr 17 2012 Orion Poplawski <orion(a)cora.nwra.com> 6.2u5-10.4
- Set _hardened_build
- Add two more upstream security patches
10Â years, 8Â months
[gridengine/f16] Avoid %preun failures (Bug 826668)
by Orion Poplawski
commit 453d50c91978b10e8dc7f7f7c776935444eae2c3
Author: Orion Poplawski <orion(a)cora.nwra.com>
Date: Thu May 31 15:58:52 2012 -0600
Avoid %preun failures (Bug 826668)
gridengine.spec | 5 ++++-
1 files changed, 4 insertions(+), 1 deletions(-)
---
diff --git a/gridengine.spec b/gridengine.spec
index 70b9eb9..a4606ab 100644
--- a/gridengine.spec
+++ b/gridengine.spec
@@ -7,7 +7,7 @@
Name: gridengine
Version: 6.2u5p2
-Release: 7%{?dist}.3
+Release: 7%{?dist}.4
Summary: Grid Engine - Distributed Computing Management software
Group: Applications/System
@@ -620,6 +620,9 @@ fi
%changelog
+* Thu May 31 2012 Orion Poplawski <orion(a)cora.nwra.com> 6.2u5p2-7.4
+- Avoid %%preun failures (Bug 826668)
+
* Tue Apr 17 2012 Orion Poplawski <orion(a)cora.nwra.com> 6.2u5p2-7.3
- Set _hardened_build
- Add two more upstream security patches
10Â years, 8Â months
[trafficserver] New release candidate of v3.0.5.
by Jan-Frode Myklebust
commit 15c202b4da3b2d57968ce811af4687502eccec6a
Author: Jan-Frode Myklebust <janfrode(a)tanso.net>
Date: Thu May 31 23:48:34 2012 +0200
New release candidate of v3.0.5.
.gitignore | 1 +
sources | 2 +-
2 files changed, 2 insertions(+), 1 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 56d5a66..be7d885 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,3 @@
/trafficserver-3.0.3.tar.bz2
/trafficserver-3.0.4.tar.bz2
+/trafficserver-3.0.5.tar.bz2
diff --git a/sources b/sources
index fa36a97..fe91768 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-90e259fb09cb7439c6908f1f5344c40f trafficserver-3.0.4.tar.bz2
+c81e71a636d225e7ff8140a1d412b17a trafficserver-3.0.5.tar.bz2
10Â years, 8Â months
[merkaartor] new upstream release
by Sven Lankes
commit 48bd549c2b006636ac09a02ce69ddbae5663d8f7
Author: Sven Lankes <sven(a)lank.es>
Date: Thu May 31 23:33:27 2012 +0200
new upstream release
merkaartor.spec | 5 ++++-
1 files changed, 4 insertions(+), 1 deletions(-)
---
diff --git a/merkaartor.spec b/merkaartor.spec
index e22cbd6..2774ac4 100644
--- a/merkaartor.spec
+++ b/merkaartor.spec
@@ -1,6 +1,6 @@
Name: merkaartor
Version: 0.18.0
-Release: 1%{?dist}
+Release: 2%{?dist}
Summary: Qt-Based OpenStreetMap editor
Group: Applications/Productivity
@@ -63,6 +63,9 @@ rm -rf $RPM_BUILD_ROOT
%doc AUTHORS CHANGELOG HACKING LICENSE
%changelog
+* Thu May 31 2012 Sven Lankes <sven(a)lank.es> - 0.18.0-2
+- new upstream release
+
* Wed May 02 2012 Rex Dieter <rdieter(a)fedoraproject.org> - 0.18.0-0.4.git654e49ba
- rebuild (exiv2)
10Â years, 8Â months
[merkaartor] rebuild (exiv2)
by Sven Lankes
commit 68fdc0aee3037f878cd598c5f317b8c0aa7edb6b
Author: Sven Lankes <sven(a)lank.es>
Date: Thu May 31 23:29:14 2012 +0200
rebuild (exiv2)
.gitignore | 1 +
merkaartor.spec | 6 +++---
sources | 2 +-
3 files changed, 5 insertions(+), 4 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 86edc10..ccd4868 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,3 +7,4 @@ merkaartor-0.16.1.tar.bz2
/merkaartor-0.17.0.tar.bz2
/merkaartor-0.17.2.tar.bz2
/merkaartor-0.18-git654e49ba.tar.bz2
+/merkaartor-0.18.0.tar.bz2
diff --git a/merkaartor.spec b/merkaartor.spec
index 25f982c..e22cbd6 100644
--- a/merkaartor.spec
+++ b/merkaartor.spec
@@ -1,12 +1,12 @@
Name: merkaartor
Version: 0.18.0
-Release: 0.4.git654e49ba%{?dist}
+Release: 1%{?dist}
Summary: Qt-Based OpenStreetMap editor
Group: Applications/Productivity
License: GPLv2
URL: http://www.merkaartor.be
-Source0: %{name}-0.18-git654e49ba.tar.bz2
+Source0: %{name}-0.18.0.tar.bz2
BuildRequires: qt4-devel >= 4.4, qt4-webkit-devel
BuildRequires: desktop-file-utils
@@ -26,7 +26,7 @@ It has some unique features like anti-aliased displaying,
transparent display of map features like roads and curved roads.
%prep
-%setup -q -n %{name}-0.18-git654e49ba
+%setup -q -n %{name}-0.18.0
%build
# Use packaged qtsingleappicaton instead of bundled version
diff --git a/sources b/sources
index 8bc33c5..c4361fb 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-af43265748f138ee8595659682ca6574 merkaartor-0.18-git654e49ba.tar.bz2
+cbaf865598ed0cf27fd74b74940e3230 merkaartor-0.18.0.tar.bz2
10Â years, 8Â months