[libgadu] update to 1.12.0-rc3

Dominik Mierzejewski rathann at fedoraproject.org
Fri May 23 10:28:10 UTC 2014


commit 5f8acac43a2fbb0f89578e77c3297170b61dd31d
Author: Dominik Mierzejewski <rpm at greysector.net>
Date:   Fri May 23 12:27:56 2014 +0200

    update to 1.12.0-rc3
    
    - close CVE-2014-3775
    - fix hash testcase compilation

 .gitignore         |    1 +
 libgadu-open.patch |   12 ++++++++++++
 libgadu.spec       |   10 ++++++++--
 sources            |    2 +-
 4 files changed, 22 insertions(+), 3 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 2b14be1..e3e3ec6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,3 +7,4 @@ libgadu-1.9.0.tar.gz
 /libgadu-1.12.0-3f1b8ce.tar.gz
 /libgadu-1.12.0-rc1.tar.gz
 /libgadu-1.12.0-rc2.tar.gz
+/libgadu-1.12.0-rc3.tar.gz
diff --git a/libgadu-open.patch b/libgadu-open.patch
new file mode 100644
index 0000000..6ec364d
--- /dev/null
+++ b/libgadu-open.patch
@@ -0,0 +1,12 @@
+diff -up libgadu-1.12.0-rc3/test/automatic/hash.c.open libgadu-1.12.0-rc3/test/automatic/hash.c
+--- libgadu-1.12.0-rc3/test/automatic/hash.c.open	2014-05-06 21:15:17.000000000 +0200
++++ libgadu-1.12.0-rc3/test/automatic/hash.c	2014-05-23 11:58:04.167842634 +0200
+@@ -38,7 +38,7 @@ gg_mkstemp(char *path)
+ 	if (strcmp(mktemp(path), "") == 0)
+ 		ret = -1;
+ 	else /* XXX: O_CREAT shouldn't be necessary */
+-		ret = open(path, O_EXCL | O_RDWR | O_CREAT);
++		ret = open(path, O_EXCL | O_RDWR | O_CREAT, S_IRUSR | S_IWUSR);
+ #endif
+ 	umask(old_umask);
+ 
diff --git a/libgadu.spec b/libgadu.spec
index 85e1412..8a975fb 100644
--- a/libgadu.spec
+++ b/libgadu.spec
@@ -1,11 +1,12 @@
-%global rcver -rc2
+%global rcver -rc3
 
 Name:		libgadu
 Version:	1.12.0
-Release:	0.3.rc2%{?dist}
+Release:	0.4.rc3%{?dist}
 Summary:	A Gadu-gadu protocol compatible communications library
 License:	LGPLv2
 Source0:	https://github.com/wojtekka/libgadu/releases/download/%{version}%{?rcver}/libgadu-%{version}%{?rcver}.tar.gz
+Patch0:		libgadu-open.patch
 URL:		http://libgadu.net/
 BuildRequires:	doxygen
 BuildRequires:	gnutls-devel
@@ -55,6 +56,7 @@ Pakiet libgadu-doc zawiera dokumentacjÄ™ biblioteki libgadu.
 
 %prep
 %setup -q -n %{name}-%{version}%{?rcver}
+%patch0 -p1 -b .open
 
 %build
 %configure \
@@ -89,6 +91,10 @@ make check
 %doc docs/protocol.html docs/html
 
 %changelog
+* Thu May 22 2014 Dominik Mierzejewski <rpm at greysector.net> - 1.12.0-0.4.rc3
+- update to 1.12.0-rc3 (fixes CVE-2014-3775)
+- fix hash testcase compilation
+
 * Tue Feb 11 2014 Dominik Mierzejewski <rpm at greysector.net> - 1.12.0-0.3.rc2
 - update to 1.12.0-rc2 (fixes CVE-2013-6487)
 
diff --git a/sources b/sources
index 3b5c675..c0f3785 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-a2c98270b5dd750e64ad9bc64ed40800  libgadu-1.12.0-rc2.tar.gz
+e47811d90144f9a5818962a60c8bc40f  libgadu-1.12.0-rc3.tar.gz


More information about the scm-commits mailing list