rpms/xterm/devel xterm-238-windowfontops.patch, NONE, 1.1 .cvsignore, 1.31, 1.32 sources, 1.31, 1.32 xterm.spec, 1.69, 1.70

[Miroslav Lichvar]

Author: mlichvar

Update of /cvs/pkgs/rpms/xterm/devel
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv17905

Modified Files:
	.cvsignore sources xterm.spec 
Added Files:
	xterm-238-windowfontops.patch 
Log Message:
- update to 238 (#479000, CVE-2008-2383)
- set default values of allowWindowOps and allowFontOps resources to false


xterm-238-windowfontops.patch:

--- NEW FILE xterm-238-windowfontops.patch ---
diff -up xterm-238/charproc.c.windowfontops xterm-238/charproc.c
--- xterm-238/charproc.c.windowfontops	2009-01-06 12:10:30.000000000 +0100
+++ xterm-238/charproc.c	2009-01-06 12:15:57.000000000 +0100
@@ -389,10 +389,10 @@ static XtActionsRec actionsList[] = {
 static XtResource resources[] =
 {
     Bres(XtNallowSendEvents, XtCAllowSendEvents, screen.allowSendEvent0, False),
-    Bres(XtNallowFontOps, XtCAllowFontOps, screen.allowFontOp0, True),
+    Bres(XtNallowFontOps, XtCAllowFontOps, screen.allowFontOp0, False),
     Bres(XtNallowTcapOps, XtCAllowTcapOps, screen.allowTcapOp0, True),
     Bres(XtNallowTitleOps, XtCAllowTitleOps, screen.allowTitleOp0, True),
-    Bres(XtNallowWindowOps, XtCAllowWindowOps, screen.allowWindowOp0, True),
+    Bres(XtNallowWindowOps, XtCAllowWindowOps, screen.allowWindowOp0, False),
     Bres(XtNaltIsNotMeta, XtCAltIsNotMeta, screen.alt_is_not_meta, False),
     Bres(XtNaltSendsEscape, XtCAltSendsEscape, screen.alt_sends_esc, False),
     Bres(XtNalwaysBoldMode, XtCAlwaysBoldMode, screen.always_bold_mode, False),
diff -up xterm-238/xterm.man.windowfontops xterm-238/xterm.man
--- xterm-238/xterm.man.windowfontops	2009-01-06 12:10:30.000000000 +0100
+++ xterm-238/xterm.man	2009-01-06 12:11:39.000000000 +0100
@@ -1448,7 +1448,7 @@ The default is ``false.''
 .TP
 .B "allowFontOps (\fPclass\fB AllowFontOps)"
 Specifies whether control sequences that set/query the font should be allowed.
-The default is ``true.''
+The default is ``false.''
 .TP 8
 .B "allowSendEvents (\fPclass\fB AllowSendEvents)"
 Specifies whether or not synthetic key and button events (generated using
@@ -1472,7 +1472,7 @@ The default is ``true.''
 .B "allowWindowOps (\fPclass\fB AllowWindowOps)"
 Specifies whether extended window control sequences (as used in dtterm)
 should be allowed.
-The default is ``true.''
+The default is ``false.''
 .TP 8
 .B "altIsNotMeta (\fPclass\fB AltIsNotMeta\fP)"
 If ``true'', treat the Alt-key as if it were the Meta-key.


Index: .cvsignore
===================================================================
RCS file: /cvs/pkgs/rpms/xterm/devel/.cvsignore,v
retrieving revision 1.31
retrieving revision 1.32
diff -u -r1.31 -r1.32
--- .cvsignore	16 Sep 2008 16:53:13 -0000	1.31
+++ .cvsignore	6 Jan 2009 14:17:46 -0000	1.32
@@ -1,2 +1,2 @@
 16colors.txt
-xterm-237.tgz
+xterm-238.tgz


Index: sources
===================================================================
RCS file: /cvs/pkgs/rpms/xterm/devel/sources,v
retrieving revision 1.31
retrieving revision 1.32
diff -u -r1.31 -r1.32
--- sources	16 Sep 2008 16:53:13 -0000	1.31
+++ sources	6 Jan 2009 14:17:46 -0000	1.32
@@ -1,2 +1,2 @@
 6093439b8d79089f4ff1cdfed358b401  16colors.txt
-6d5f9e124fd3e09487f47c66da8c7345  xterm-237.tgz
+754f670723eb9a20f9f90d7c5f4a5bad  xterm-238.tgz


Index: xterm.spec
===================================================================
RCS file: /cvs/pkgs/rpms/xterm/devel/xterm.spec,v
retrieving revision 1.69
retrieving revision 1.70
diff -u -r1.69 -r1.70
--- xterm.spec	16 Sep 2008 16:53:13 -0000	1.69
+++ xterm.spec	6 Jan 2009 14:17:46 -0000	1.70
@@ -1,6 +1,6 @@
 Summary: Terminal emulator for the X Window System
 Name: xterm
-Version: 237
+Version: 238
 Release: 1%{?dist}
 URL: http://dickey.his.com/xterm
 License: MIT
@@ -16,6 +16,7 @@
 Patch1: xterm-223-resources.patch
 Patch2: xterm-222-can-2003-0063.patch
 Patch3: xterm-226-man-page_paths.patch
+Patch4: xterm-238-windowfontops.patch
 
 %bcond_with trace
 
@@ -32,6 +33,7 @@
 %patch1 -p1 -b .redhat-resources
 %patch2 -p1 -b .can-2003-0063
 %patch3 -p1 -b .man-page_paths
+%patch4 -p1 -b .windowfontops
 
 %build
 %configure \
@@ -82,6 +84,10 @@
 %{x11_app_defaults_dir}/XTerm-color
 
 %changelog
+* Tue Jan 06 2009 Miroslav Lichvar <mlichvar at redhat.com> 238-1
+- update to 238 (#479000, CVE-2008-2383)
+- set default values of allowWindowOps and allowFontOps resources to false
+
 * Tue Sep 16 2008 Miroslav Lichvar <mlichvar at redhat.com> 237-1
 - update to 237