[check-mk] Add 01-Set-Legacy-Eval-True.patch
averi
averi at fedoraproject.org
Wed Sep 17 18:38:39 UTC 2014
commit 8036622f7e3e6c5c2e20efb53bead346b87fb875
Author: Andrea Veri <av at gnome.org>
Date: Wed Sep 17 20:36:38 2014 +0200
Add 01-Set-Legacy-Eval-True.patch
Turn Wato_Legacy_Eval as True as we want to prevent breakages
between machines running different Python and/or check-mk releases.
This is necessary after the 'ast' move from 'pickle' (that was
generating a insecure API call), however the 'ast' module is still
not available for RHEL / CentOS 5 machines. The patch is there to
avoid miscommunications between different distribution releases. More
information is available at: http://mathias-kettner.com/check_mk_werks.php?werk_id=984.
.gitignore | 1 +
01-Set-Legacy-Eval-True.patch | 11 +++++++++++
check-mk.spec | 18 +++++++++++++++---
sources | 2 +-
4 files changed, 28 insertions(+), 4 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 49d8d19..e534987 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,4 @@
/check_mk-1.2.4.tar.gz
/check_mk-1.2.4p1.tar.gz
/check_mk-1.2.4p2.tar.gz
+/check_mk-1.2.4p5.tar.gz
diff --git a/01-Set-Legacy-Eval-True.patch b/01-Set-Legacy-Eval-True.patch
new file mode 100644
index 0000000..526fc7d
--- /dev/null
+++ b/01-Set-Legacy-Eval-True.patch
@@ -0,0 +1,11 @@
+--- plugins/config/wato.py 2014-09-17 16:45:20.548080345 +0200
++++ plugins/config/wato.py.patched 2014-09-17 16:45:34.604504277 +0200
+@@ -39,7 +39,7 @@
+ wato_use_git = False
+ wato_hidden_users = []
+ wato_user_attrs = []
+-wato_legacy_eval = False
++wato_legacy_eval = True
+
+ def tag_alias(tag):
+ for entry in wato_host_tags:
diff --git a/check-mk.spec b/check-mk.spec
index 0bff6f4..c04594b 100644
--- a/check-mk.spec
+++ b/check-mk.spec
@@ -15,6 +15,7 @@ Requires: mod_python
Source1: First-Installation.txt
Source2: defaults
Source3: defaults.py
+Patch0: 01-Set-Legacy-Eval-True.patch
AutoReq: 0
# Do not provide from a documentation
@@ -71,6 +72,9 @@ This package contains the check-mk's web interface aka WATO.
%prep
%setup -q -n check_mk-%{version}
tar xf agents.tar.gz
+tar xf web.tar.gz && rm -f web.tar.gz
+%patch0 -p0
+tar zcf web.tar.gz htdocs plugins
%build
rm -f waitmax
@@ -269,10 +273,18 @@ rmdir %{buildroot}%{_prefix}/lib/check_mk
%changelog
* Wed Sep 17 2014 Andrea Veri <averi at fedoraproject.org> - 1.2.4p5-1
- New upstream release. Fixes CVEs:
- - CVE-2014-5338
+ - CVE-2014-5338
- CVE-2014-5339
- - CVE-2014-5340
-- Stop shipping the j4p_performance plugin as it's deprecated.
+ - CVE-2014-5340 (BZ: #1132337, #1132339, #1132341)
+- Stop shipping the j4p_performance plugin as it's deprecated. (BZ: #1133068)
+- Turn Wato_Legacy_Eval as True as we want to prevent breakages
+ between machines running different Python and/or check-mk releases.
+ This is necessary after the 'ast' move from 'pickle' (that was
+ generating a insecure API call), however the 'ast' module is still
+ not available for RHEL / CentOS 5 machines. The patch is there to
+ avoid miscommunications between different distribution releases. More
+ information is available at:
+ http://mathias-kettner.com/check_mk_werks.php?werk_id=984.
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.2.4p2-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
diff --git a/sources b/sources
index 2153953..6d6a60d 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-1162c007d89558bc20c5655e35a0ba94 check_mk-1.2.4p2.tar.gz
+ef3055d191bd38295d1716b3f7824115 check_mk-1.2.4p5.tar.gz
More information about the scm-commits
mailing list