[udisks] Resolves: 1074458

[Huzaifa Sidhpurwala]

commit 1bd17e4406bdc13aea5e5dd78315797524f14a03
Author: Huzaifa Sidhpurwala <huzaifas at redhat.com>
Date:   Fri Mar 14 10:57:14 2014 +0530

    Resolves: 1074458

 .gitignore  |    1 +
 sources     |    1 +
 udisks.spec |    7 ++++++-
 3 files changed, 8 insertions(+), 1 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 9212a1b..9484f0c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,3 +8,4 @@ udisks-1.0.1.tar.gz
 /udisks-1.0.2.tar.gz
 /udisks-1.0.3.tar.gz
 /udisks-1.0.4.tar.gz
+/buffer-overflow.patch
diff --git a/sources b/sources
index 9406fae..7694cf0 100644
--- a/sources
+++ b/sources
@@ -1 +1,2 @@
 86c63b2b5484f2060499a052b5b6256b  udisks-1.0.4.tar.gz
+55a027cbee416985f9998bd8fbd016d3  buffer-overflow.patch
diff --git a/udisks.spec b/udisks.spec
index 2466ff0..32f4565 100644
--- a/udisks.spec
+++ b/udisks.spec
@@ -14,7 +14,7 @@
 Summary: Storage Management Service
 Name: udisks
 Version: 1.0.4
-Release: 12%{?dist}
+Release: 13%{?dist}
 License: GPLv2+
 Group: System Environment/Libraries
 URL: http://www.freedesktop.org/wiki/Software/udisks
@@ -72,6 +72,7 @@ Provides: DeviceKit-disks = 010
 
 Patch0: udisks-1.0.4-neuter-stdout-and-stderr.patch
 Patch1: fix_bash_completion.patch
+Patch2: buffer-overflow.patch
 
 %description
 udisks provides a daemon, D-Bus API and command line tools
@@ -94,6 +95,7 @@ D-Bus interface definitions and documentation for udisks.
 %setup -q
 %patch0 -p1
 %patch1 -p1
+%patch2 -p1 -b .buffer-overflow
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=673544#c15
 rm -f src/*-glue.h tools/*-glue.h
@@ -159,6 +161,9 @@ mv $RPM_BUILD_ROOT%{_sysconfdir}/profile.d/udisks-bash-completion.sh \
 
 # Note: please don't forget the %{?dist} in the changelog. Thanks
 %changelog
+* Fri Mar 14 2014 Huzaifa Sidhpurwala <huzaifas at redhat.com> - 1.0.4-13
+- fix CVE-2014-0004
+
 * Sun Aug 04 2013 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.0.4-12
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild