rpms/dia/FC-5 dia-0.95-CVE-2006-2480.patch, NONE, 1.1 dia.spec, 1.10, 1.11

Hans de Goede (jwrdegoede) fedora-extras-commits at redhat.com
Sat May 20 12:23:43 UTC 2006


Author: jwrdegoede

Update of /cvs/extras/rpms/dia/FC-5
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv13146

Modified Files:
	dia.spec 
Added Files:
	dia-0.95-CVE-2006-2480.patch 
Log Message:
* Sat May 20 2006 Hans de Goede <j.w.r.degoede at hhs.nl> 1:0.95-2
- Fix CVE-2006-2480 (bz 192535, 192538).


dia-0.95-CVE-2006-2480.patch:

--- NEW FILE dia-0.95-CVE-2006-2480.patch ---
--- lib/message.c
+++ lib/message.c
@@ -86,7 +86,7 @@
 				   0,    /* GtkDialogFlags */
 				   type,
 				   GTK_BUTTONS_CLOSE,
-				   buf);
+				   "%s", buf);
   if (title) {
     gchar *real_title;
 


Index: dia.spec
===================================================================
RCS file: /cvs/extras/rpms/dia/FC-5/dia.spec,v
retrieving revision 1.10
retrieving revision 1.11
diff -u -r1.10 -r1.11
--- dia.spec	25 Apr 2006 20:18:06 -0000	1.10
+++ dia.spec	20 May 2006 12:23:43 -0000	1.11
@@ -1,6 +1,6 @@
 Name: 		dia
 Version:	0.95
-Release:	1%{?dist}
+Release:	2%{?dist}
 Epoch:		1
 Summary:	Diagram drawing program
 Group:		Applications/Multimedia
@@ -10,6 +10,7 @@
 Patch1:         dia-0.92.2-dtd.patch
 Patch2:         dia-0.95-pre6-help.patch
 Patch3:         dia-0.94-fallbacktoxpmicons.patch
+Patch4:         dia-0.95-CVE-2006-2480.patch
 BuildRoot:	%{_tmppath}/%{name}-%{version}-root
 BuildRequires:	libgnomeui-devel python-devel pygtk2-devel desktop-file-utils
 BuildRequires:	intltool docbook-utils docbook-style-dsssl docbook-style-xsl
@@ -28,6 +29,7 @@
 %patch1 -p1 -b .dtd
 %patch2 -p1 -b .help
 %patch3 -p1 -b .fallbacktoxpmicons
+%patch4 -p0 -b .cve-2006-2480
 
 
 %build
@@ -97,6 +99,9 @@
 
 
 %changelog
+* Sat May 20 2006 Hans de Goede <j.w.r.degoede at hhs.nl> 1:0.95-2
+- Fix CVE-2006-2480 (bz 192535, 192538).
+
 * Tue Apr 25 2006 Hans de Goede <j.w.r.degoede at hhs.nl> 1:0.95-1
 - New upstream version 0.95 (final)
 - Cleanup spec even more, correctly install the desktop file and icons,




More information about the fedora-extras-commits mailing list