scm-commits May 2014

scm-commits@lists.fedoraproject.org

428 participants
25020 discussions

[pkgdb] nrpe: skottler has given up watchbugzilla
by Fedora PackageDB 01 May '14

01 May '14

skottler has given up the watchbugzilla acl on nrpe (Fedora 19) To make changes to this package see: https://admin.fedoraproject.org/pkgdb/acls/name/nrpe

1 0

[pkgdb] nrpe: skottler has requested approveacls
by Fedora PackageDB 01 May '14

01 May '14

skottler has requested the approveacls acl on nrpe (Fedora 19) To make changes to this package see: https://admin.fedoraproject.org/pkgdb/acls/name/nrpe

1 0

[pkgdb] nrpe: skottler has requested commit
by Fedora PackageDB 01 May '14

01 May '14

skottler has requested the commit acl on nrpe (Fedora 19) To make changes to this package see: https://admin.fedoraproject.org/pkgdb/acls/name/nrpe

1 0

[pkgdb] nrpe: skottler has been granted watchbugzilla
by Fedora PackageDB 01 May '14

01 May '14

skottler has been granted the watchbugzilla acl on nrpe (Fedora 19) To make changes to this package see: https://admin.fedoraproject.org/pkgdb/acls/name/nrpe

1 0

[pkgdb] nrpe: skottler has requested commit
by Fedora PackageDB 01 May '14

01 May '14

skottler has requested the commit acl on nrpe (Fedora 20) To make changes to this package see: https://admin.fedoraproject.org/pkgdb/acls/name/nrpe

1 0

[pkgdb] nrpe: skottler has been granted watchbugzilla
by Fedora PackageDB 01 May '14

01 May '14

skottler has been granted the watchbugzilla acl on nrpe (Fedora 20) To make changes to this package see: https://admin.fedoraproject.org/pkgdb/acls/name/nrpe

1 0

[pkgdb] nrpe: skottler has requested approveacls
by Fedora PackageDB 01 May '14

01 May '14

skottler has requested the approveacls acl on nrpe (Fedora 20) To make changes to this package see: https://admin.fedoraproject.org/pkgdb/acls/name/nrpe

1 0

[pkgdb] nrpe: skottler has been granted watchcommits
by Fedora PackageDB 01 May '14

01 May '14

skottler has been granted the watchcommits acl on nrpe (Fedora 20) To make changes to this package see: https://admin.fedoraproject.org/pkgdb/acls/name/nrpe

1 0

[redhat-rpm-config] move macros.ghc-srpm to ghc-srpm-macros and require it (#1089102)
by Jens Petersen 01 May '14

01 May '14

commit 121c2fa88990f7d8faa0ab3e3e9b24565d26467b Author: Jens Petersen <petersen(a)redhat.com> Date: Thu May 1 10:10:45 2014 +0900 move macros.ghc-srpm to ghc-srpm-macros and require it (#1089102) macros.ghc-srpm | 3 --- redhat-rpm-config.spec | 8 ++++++-- 2 files changed, 6 insertions(+), 5 deletions(-) --- diff --git a/redhat-rpm-config.spec b/redhat-rpm-config.spec index 4c7ac12..14c7b64 100644 --- a/redhat-rpm-config.spec +++ b/redhat-rpm-config.spec @@ -6,7 +6,7 @@ Summary: Red Hat specific rpm configuration files Name: redhat-rpm-config -Version: 20 +Version: 21 Release: 1%{?dist} # No version specified. License: GPL+ @@ -26,7 +26,6 @@ Source51: redhat-hardened-ld # that would otherwise be providing the macros. other language/arch specific # macros should not be defined here but instead in the base packages that can # be pulled in at rpm build time, this is specific for srpm creation. -Source100: macros.ghc-srpm Source101: macros.gnat-srpm Source102: macros.mono-srpm Source103: macros.nodejs-srpm @@ -66,6 +65,7 @@ BuildArch: noarch Requires: coreutils Requires: perl-srpm-macros Requires: ocaml-srpm-macros +Requires: ghc-srpm-macros Requires: rpm >= 4.11.0 Requires: dwz >= 0.4 Requires: zip @@ -135,6 +135,10 @@ install -p -m 755 -t %{buildroot}%{_rpmconfigdir} kmod.prov %{_rpmconfigdir}/macros.d/macros.kmp %changelog +* Wed Apr 30 2014 Jens Petersen <petersen(a)redhat.com> - 21-1 +- macros.ghc-srpm moved to ghc-rpm-macros package (#1089102) +- add requires ghc-srpm-macros + * Tue Apr 29 2014 Peter Robinson <pbrobinson(a)fedoraproject.org> 20-1 - With gcc 4.9 aarch64 now supports stack-protector

1 0

[nrpe] Add patch for CVE-2014-2913 (BZ#1089879)
by Sam Kottler 01 May '14

01 May '14

commit 94085419d84e7bfb74c950be3debb4f8890dd9b5 Author: Sam Kottler <shk(a)linux.com> Date: Wed Apr 30 21:04:19 2014 -0400 Add patch for CVE-2014-2913 (BZ#1089879) nrpe-0009-CVE-2014-2913-nasty-metacharacters.patch | 13 +++++++++++++ nrpe.spec | 12 +++++++++++- 2 files changed, 24 insertions(+), 1 deletions(-) --- diff --git a/nrpe-0009-CVE-2014-2913-nasty-metacharacters.patch b/nrpe-0009-CVE-2014-2913-nasty-metacharacters.patch new file mode 100644 index 0000000..556f449 --- /dev/null +++ b/nrpe-0009-CVE-2014-2913-nasty-metacharacters.patch @@ -0,0 +1,13 @@ +diff --git b/src/nrpe.c a/src/nrpe.c +index 381f0ac..ad1e05d 100644 +--- b/src/nrpe.c ++++ a/src/nrpe.c +@@ -53,7 +53,7 @@ int use_ssl=FALSE; + + #define DEFAULT_COMMAND_TIMEOUT 60 /* default timeout for execution of plugins */ + #define MAXFD 64 +-#define NASTY_METACHARS "|`&><'\"\\[]{};" ++#define NASTY_METACHARS "|`&><'\"\\[]{};\n" + #define howmany(x,y) (((x)+((y)-1))/(y)) + #define MAX_LISTEN_SOCKS 16 + diff --git a/nrpe.spec b/nrpe.spec index 4db58d1..a0f82f0 100644 --- a/nrpe.spec +++ b/nrpe.spec @@ -5,7 +5,7 @@ Name: nrpe Version: 2.15 -Release: 1%{?dist} +Release: 2%{?dist} Summary: Host/service/network monitoring agent for Nagios Group: Applications/System @@ -23,6 +23,11 @@ Patch5: nrpe-0005-Do-not-start-by-default.patch Patch6: nrpe-0006-Relocate-pid-file.patch Patch7: nrpe-0007-Add-condrestart-try-restart-target-to-initscript.patch Patch8: nrpe-0008-Allow-user-to-override-all-defaults-even-command-def.patch +# This should get removed whenever 2.16 is released, assuming it has the fix +# included. http://seclists.org/oss-sec/2014/q2/129. There's not upstream +# concensus that quoting arguments in a mode which is widely agreed upon to be +# risky so track upstream discussions here, too. +Patch9: nrpe-0009-CVE-2014-2913-nasty-metacharacters.patch BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) @@ -94,6 +99,8 @@ This package provides the nrpe plugin for Nagios-related applications. %patch6 -p1 -b .relocate_pid %patch7 -p1 -b .condrestart %patch8 -p1 -b .allow_override +%patch9 -p1 + # Allow building for aarch64 # https://bugzilla.redhat.com/926244 %if 0%{?fedora} > 17 || 0%{?rhel} > 6 @@ -192,6 +199,9 @@ fi %doc Changelog LEGAL README %changelog +* Thu May 1 2014 Sam Kottler <skottler(a)fedoraproject.org> - 2.15.2 +- Add patch to mitigate CVE-2014-2913 + * Mon Jan 27 2014 Sam Kottler <skottler(a)fedoraproject.org> - 2.15.1 - Update to 2.15

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

scm-commits May 2014