From 24dc41f1836e77791eab8d759e99825ad01f3a492b9180e5fc5ad82a493b8309 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Adrian=20Schr=C3=B6ter?= Date: Sat, 4 May 2024 00:38:49 +0200 Subject: [PATCH] Sync from SUSE:SLFO:Main sharutils revision 3d8a140c683169c2f6247b0f9d6949b0 --- .gitattributes | 23 + gnulib-libio.patch | 119 +++++ ...pilation-with-Werror-format-security.patch | 87 ++++ sharutils-4.15.2.tar.xz | 3 + sharutils-4.15.2.tar.xz.sig | 7 + ...CVE-2018-1000097-fix_buffer_overflow.patch | 27 ++ sharutils-testsuite.diff | 13 + sharutils.changes | 432 ++++++++++++++++++ sharutils.keyring | 29 ++ sharutils.spec | 93 ++++ 10 files changed, 833 insertions(+) create mode 100644 .gitattributes create mode 100644 gnulib-libio.patch create mode 100644 sharutils-4.14.2-Pass-compilation-with-Werror-format-security.patch create mode 100644 sharutils-4.15.2.tar.xz create mode 100644 sharutils-4.15.2.tar.xz.sig create mode 100644 sharutils-CVE-2018-1000097-fix_buffer_overflow.patch create mode 100644 sharutils-testsuite.diff create mode 100644 sharutils.changes create mode 100644 sharutils.keyring create mode 100644 sharutils.spec diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..9b03811 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,23 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text diff --git a/gnulib-libio.patch b/gnulib-libio.patch new file mode 100644 index 0000000..b4a8f5c --- /dev/null +++ b/gnulib-libio.patch @@ -0,0 +1,119 @@ +2018-03-05 Paul Eggert + + fflush: adjust to glibc 2.28 libio.h removal + Problem reported by Daniel P. Berrangé in: + https://lists.gnu.org/r/bug-gnulib/2018-03/msg00000.html + * lib/fbufmode.c (fbufmode): + * lib/fflush.c (clear_ungetc_buffer_preserving_position) + (disable_seek_optimization, rpl_fflush): + * lib/fpending.c (__fpending): + * lib/fpurge.c (fpurge): + * lib/freadable.c (freadable): + * lib/freadahead.c (freadahead): + * lib/freading.c (freading): + * lib/freadptr.c (freadptr): + * lib/freadseek.c (freadptrinc): + * lib/fseeko.c (fseeko): + * lib/fseterr.c (fseterr): + * lib/fwritable.c (fwritable): + * lib/fwriting.c (fwriting): + Check _IO_EOF_SEEN instead of _IO_ftrylockfile. + * lib/stdio-impl.h (_IO_IN_BACKUP) [_IO_EOF_SEEN]: + Define if not already defined. + +Index: sharutils-4.15.2/lib/fflush.c +=================================================================== +--- sharutils-4.15.2.orig/lib/fflush.c ++++ sharutils-4.15.2/lib/fflush.c +@@ -33,7 +33,7 @@ + #undef fflush + + +-#if defined _IO_ftrylockfile || __GNU_LIBRARY__ == 1 /* GNU libc, BeOS, Haiku, Linux libc5 */ ++#if defined _IO_EOF_SEEN || __GNU_LIBRARY__ == 1 /* GNU libc, BeOS, Haiku, Linux libc5 */ + + /* Clear the stream's ungetc buffer, preserving the value of ftello (fp). */ + static void +@@ -72,7 +72,7 @@ clear_ungetc_buffer (FILE *fp) + + #endif + +-#if ! (defined _IO_ftrylockfile || __GNU_LIBRARY__ == 1 /* GNU libc, BeOS, Haiku, Linux libc5 */) ++#if ! (defined _IO_EOF_SEEN || __GNU_LIBRARY__ == 1 /* GNU libc, BeOS, Haiku, Linux libc5 */) + + # if (defined __sferror || defined __DragonFly__ || defined __ANDROID__) && defined __SNPT + /* FreeBSD, NetBSD, OpenBSD, DragonFly, Mac OS X, Cygwin, Android */ +@@ -148,7 +148,7 @@ rpl_fflush (FILE *stream) + if (stream == NULL || ! freading (stream)) + return fflush (stream); + +-#if defined _IO_ftrylockfile || __GNU_LIBRARY__ == 1 /* GNU libc, BeOS, Haiku, Linux libc5 */ ++#if defined _IO_EOF_SEEN || __GNU_LIBRARY__ == 1 /* GNU libc, BeOS, Haiku, Linux libc5 */ + + clear_ungetc_buffer_preserving_position (stream); + +Index: sharutils-4.15.2/lib/fpurge.c +=================================================================== +--- sharutils-4.15.2.orig/lib/fpurge.c ++++ sharutils-4.15.2/lib/fpurge.c +@@ -62,7 +62,7 @@ fpurge (FILE *fp) + /* Most systems provide FILE as a struct and the necessary bitmask in + , because they need it for implementing getc() and putc() as + fast macros. */ +-# if defined _IO_ftrylockfile || __GNU_LIBRARY__ == 1 /* GNU libc, BeOS, Haiku, Linux libc5 */ ++# if defined _IO_EOF_SEEN || __GNU_LIBRARY__ == 1 /* GNU libc, BeOS, Haiku, Linux libc5 */ + fp->_IO_read_end = fp->_IO_read_ptr; + fp->_IO_write_ptr = fp->_IO_write_base; + /* Avoid memory leak when there is an active ungetc buffer. */ +Index: sharutils-4.15.2/lib/freading.c +=================================================================== +--- sharutils-4.15.2.orig/lib/freading.c ++++ sharutils-4.15.2/lib/freading.c +@@ -31,7 +31,7 @@ freading (FILE *fp) + /* Most systems provide FILE as a struct and the necessary bitmask in + , because they need it for implementing getc() and putc() as + fast macros. */ +-# if defined _IO_ftrylockfile || __GNU_LIBRARY__ == 1 /* GNU libc, BeOS, Haiku, Linux libc5 */ ++# if defined _IO_EOF_SEEN || __GNU_LIBRARY__ == 1 /* GNU libc, BeOS, Haiku, Linux libc5 */ + return ((fp->_flags & _IO_NO_WRITES) != 0 + || ((fp->_flags & (_IO_NO_READS | _IO_CURRENTLY_PUTTING)) == 0 + && fp->_IO_read_base != NULL)); +Index: sharutils-4.15.2/lib/fseeko.c +=================================================================== +--- sharutils-4.15.2.orig/lib/fseeko.c ++++ sharutils-4.15.2/lib/fseeko.c +@@ -47,7 +47,7 @@ fseeko (FILE *fp, off_t offset, int when + #endif + + /* These tests are based on fpurge.c. */ +-#if defined _IO_ftrylockfile || __GNU_LIBRARY__ == 1 /* GNU libc, BeOS, Haiku, Linux libc5 */ ++#if defined _IO_EOF_SEEN || __GNU_LIBRARY__ == 1 /* GNU libc, BeOS, Haiku, Linux libc5 */ + if (fp->_IO_read_end == fp->_IO_read_ptr + && fp->_IO_write_ptr == fp->_IO_write_base + && fp->_IO_save_base == NULL) +@@ -123,7 +123,7 @@ fseeko (FILE *fp, off_t offset, int when + return -1; + } + +-#if defined _IO_ftrylockfile || __GNU_LIBRARY__ == 1 /* GNU libc, BeOS, Haiku, Linux libc5 */ ++#if defined _IO_EOF_SEEN || __GNU_LIBRARY__ == 1 /* GNU libc, BeOS, Haiku, Linux libc5 */ + fp->_flags &= ~_IO_EOF_SEEN; + fp->_offset = pos; + #elif defined __sferror || defined __DragonFly__ || defined __ANDROID__ +Index: sharutils-4.15.2/lib/stdio-impl.h +=================================================================== +--- sharutils-4.15.2.orig/lib/stdio-impl.h ++++ sharutils-4.15.2/lib/stdio-impl.h +@@ -18,6 +18,12 @@ + the same implementation of stdio extension API, except that some fields + have different naming conventions, or their access requires some casts. */ + ++/* Glibc 2.28 made _IO_IN_BACKUP private. For now, work around this ++ problem by defining it ourselves. FIXME: Do not rely on glibc ++ internals. */ ++#if !defined _IO_IN_BACKUP && defined _IO_EOF_SEEN ++# define _IO_IN_BACKUP 0x100 ++#endif + + /* BSD stdio derived implementations. */ + diff --git a/sharutils-4.14.2-Pass-compilation-with-Werror-format-security.patch b/sharutils-4.14.2-Pass-compilation-with-Werror-format-security.patch new file mode 100644 index 0000000..a5e678f --- /dev/null +++ b/sharutils-4.14.2-Pass-compilation-with-Werror-format-security.patch @@ -0,0 +1,87 @@ +From 851a240296ad2ec2a5f67e84d284d3bf7882745e Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Petr=20P=C3=ADsa=C5=99?= +Date: Mon, 15 Dec 2014 11:20:32 +0100 +Subject: [PATCH] Pass compilation with -Werror=format-security +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + + + +Signed-off-by: Petr Písař +--- + libopts/genshell.h | 2 +- + src/shar-opts.h | 2 +- + src/unshar-opts.h | 2 +- + src/uudecode-opts.h | 2 +- + src/uuencode-opts.h | 2 +- + 5 files changed, 5 insertions(+), 5 deletions(-) + +diff --git a/libopts/genshell.h b/libopts/genshell.h +index 1c18735..0a69bc2 100644 +--- a/libopts/genshell.h ++++ b/libopts/genshell.h +@@ -168,7 +168,7 @@ extern tOptions genshelloptOptions; + # endif + + # ifndef ATTRIBUTE_FORMAT_ARG +-# define ATTRIBUTE_FORMAT_ARG(_a) ++# define ATTRIBUTE_FORMAT_ARG(_a) __attribute__ ((format_arg(_a))) + # endif + + static inline char* aoGetsText(char const* pz) ATTRIBUTE_FORMAT_ARG(1); +diff --git a/src/shar-opts.h b/src/shar-opts.h +index 64f2f12..a32b69d 100644 +--- a/src/shar-opts.h ++++ b/src/shar-opts.h +@@ -374,7 +374,7 @@ extern tOptions sharOptions; + # endif + + # ifndef ATTRIBUTE_FORMAT_ARG +-# define ATTRIBUTE_FORMAT_ARG(_a) ++# define ATTRIBUTE_FORMAT_ARG(_a) __attribute__ ((format_arg(_a))) + # endif + + static inline char* aoGetsText(char const* pz) ATTRIBUTE_FORMAT_ARG(1); +diff --git a/src/unshar-opts.h b/src/unshar-opts.h +index ae697af..19e8be7 100644 +--- a/src/unshar-opts.h ++++ b/src/unshar-opts.h +@@ -211,7 +211,7 @@ extern tOptions unsharOptions; + # endif + + # ifndef ATTRIBUTE_FORMAT_ARG +-# define ATTRIBUTE_FORMAT_ARG(_a) ++# define ATTRIBUTE_FORMAT_ARG(_a) __attribute__ ((format_arg(_a))) + # endif + + static inline char* aoGetsText(char const* pz) ATTRIBUTE_FORMAT_ARG(1); +diff --git a/src/uudecode-opts.h b/src/uudecode-opts.h +index d457488..fd11a20 100644 +--- a/src/uudecode-opts.h ++++ b/src/uudecode-opts.h +@@ -189,7 +189,7 @@ extern tOptions uudecodeOptions; + # endif + + # ifndef ATTRIBUTE_FORMAT_ARG +-# define ATTRIBUTE_FORMAT_ARG(_a) ++# define ATTRIBUTE_FORMAT_ARG(_a) __attribute__ ((format_arg(_a))) + # endif + + static inline char* aoGetsText(char const* pz) ATTRIBUTE_FORMAT_ARG(1); +diff --git a/src/uuencode-opts.h b/src/uuencode-opts.h +index 7c7ed78..41352ea 100644 +--- a/src/uuencode-opts.h ++++ b/src/uuencode-opts.h +@@ -185,7 +185,7 @@ extern tOptions uuencodeOptions; + # endif + + # ifndef ATTRIBUTE_FORMAT_ARG +-# define ATTRIBUTE_FORMAT_ARG(_a) ++# define ATTRIBUTE_FORMAT_ARG(_a) __attribute__ ((format_arg(_a))) + # endif + + static inline char* aoGetsText(char const* pz) ATTRIBUTE_FORMAT_ARG(1); +-- +1.9.3 + diff --git a/sharutils-4.15.2.tar.xz b/sharutils-4.15.2.tar.xz new file mode 100644 index 0000000..d705d26 --- /dev/null +++ b/sharutils-4.15.2.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:2b05cff7de5d7b646dc1669bc36c35fdac02ac6ae4b6c19cb3340d87ec553a9a +size 1122476 diff --git a/sharutils-4.15.2.tar.xz.sig b/sharutils-4.15.2.tar.xz.sig new file mode 100644 index 0000000..278ec2c --- /dev/null +++ b/sharutils-4.15.2.tar.xz.sig @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.0.22 (GNU/Linux) + +iEYEABECAAYFAlVp2Z4ACgkQ2SBMtb+/AiGylgCfS15DRF+g0pqYttJRUpc8AK0Q +quQAoPJUJAEG9hU2WMjcU7yXf772wGkJ +=r8az +-----END PGP SIGNATURE----- diff --git a/sharutils-CVE-2018-1000097-fix_buffer_overflow.patch b/sharutils-CVE-2018-1000097-fix_buffer_overflow.patch new file mode 100644 index 0000000..fe4f199 --- /dev/null +++ b/sharutils-CVE-2018-1000097-fix_buffer_overflow.patch @@ -0,0 +1,27 @@ +--- + src/unshar.c | 5 +++-- + 1 file changed, 3 insertions(+), 2 deletions(-) + +Index: src/unshar.c +=================================================================== +--- src/unshar.c.orig 2015-01-07 03:14:10.000000000 +0100 ++++ src/unshar.c 2018-03-13 10:21:47.491268510 +0100 +@@ -107,7 +107,8 @@ looks_like_c_code (char const * buf) + static bool + looks_like_shell_code (char const * buf) + { +- while (isspace ((int) *buf)) buf++; ++ intptr_t buf_end = buf + rw_base_size; ++ while (isspace ((int) *buf) && buf < buf_end) buf++; + switch (*buf) + { + case '#': case ':': +@@ -240,7 +241,7 @@ find_archive (char const * name, FILE * + off_t position = ftello (file); + + /* Read next line, fail if no more and no previous process. */ +- if (!fgets (rw_buffer, BUFSIZ, file)) ++ if (!fgets (rw_buffer, GET_PAGE_SIZE, file)) + { + if (!start) + error (0, 0, _("Found no shell commands in %s"), name); diff --git a/sharutils-testsuite.diff b/sharutils-testsuite.diff new file mode 100644 index 0000000..b15c6f6 --- /dev/null +++ b/sharutils-testsuite.diff @@ -0,0 +1,13 @@ +Index: tests/shar-2 +=================================================================== +--- tests/shar-2.orig ++++ tests/shar-2 +@@ -25,6 +25,8 @@ do + } > ${dir}/second + done + ++PATH=`cd ../src; pwd`:$PATH ++export PATH + : ${SHAR=`cd ../src ; pwd`/shar} + : ${UNSHAR=`cd ../src ; pwd`/unshar} + ( cd ${tmppfx}.d diff --git a/sharutils.changes b/sharutils.changes new file mode 100644 index 0000000..4d6b30f --- /dev/null +++ b/sharutils.changes @@ -0,0 +1,432 @@ +------------------------------------------------------------------- +Wed Apr 20 20:54:04 UTC 2022 - Dirk Müller + +- add sharutils-4.14.2-Pass-compilation-with-Werror-format-security.patch + +------------------------------------------------------------------- +Fri Jan 31 23:48:25 UTC 2020 - Bjørn Lie + +- No longer recommend -lang: supplements are in use. + +------------------------------------------------------------------- +Tue Jan 21 11:28:05 UTC 2020 - Christian Vögl + +- Add -fcommon to optflags. This fixes (boo#1160292), and can be + removed if upstream releases a version which compiles with + -fno-common + + +------------------------------------------------------------------- +Thu Aug 29 19:01:18 UTC 2019 - Stefan Brüns + +- Drop mailx BuildRequires. The "sync directories over mail" feature + has been removed in 4.11.1. + +------------------------------------------------------------------- +Mon Aug 6 08:54:30 UTC 2018 - schwab@suse.de + +- gnulib-libio.patch: Update gnulib for libio.h removal +- Use %license for COPYING + +------------------------------------------------------------------- +Tue Mar 13 09:41:21 CET 2018 - pth@suse.de + +- Add sharutils-CVE-2018-1000097-fix_buffer_overflow.patch to fix + a possibility to overflow the stack (bsc#1085004, CVE-2018-1000097). + +------------------------------------------------------------------- +Fri Jun 19 19:31:52 UTC 2015 - astieger@suse.com + +- update to 4.15.2: + * updates to fix cross platform build issues + * fixed problem where contrived uuencoded file caused seg fault + +------------------------------------------------------------------- +Sun May 3 09:15:05 UTC 2015 - astieger@suse.com + +- update to sharutils 4.15.1 + * gnulib updates to fix rare platform build issues + +------------------------------------------------------------------- +Thu Feb 26 20:03:07 UTC 2015 - mpluskal@suse.com + +- Cleanup spec file with spec-cleaner +- Add gpg key +- Remove obsolete patches + * sharutils-set_file_mode.diff + * sharutils-mandir.patch + * sharutils-stdio.in.patch +- Enable openssl support +- Remove bcond and allways build with mailx +- Update lang package macros +- Update to Version 4.15 + * shar will no longer choke on 64 bit windows + * unshar has a compiler warning fix + * Happy 2015 copyright + * PO file updates + +- Version 4.14.2 + * translation updates + * use ftello, fseeko and fflush + * augment copyright marks in shar.c and shar-std.def + * Happy 2014 copyright dates + * fix up man pages (use newer doc generation code) + +- Version 4.14 + * documentation, obscure usage, FSF address + +- Version 4.13.5 + * primarily, configuration cleanups. Mostly for MinGW, + but some others, too. + +- Version 4.13.4 + * output file names may be encoded in the uuencoded file. + By specifying '--encode' on the command line, the output + file name will be base64 encoded in the uuencode file. + +------------------------------------------------------------------- +Fri Apr 5 11:27:25 UTC 2013 - idonmez@suse.com + +- Add Source URL, see https://en.opensuse.org/SourceUrls + +------------------------------------------------------------------- +Thu May 31 20:44:33 UTC 2012 - sweet_f_a@gmx.de + +- remove useless automake dependency + +------------------------------------------------------------------- +Thu Dec 1 15:58:51 UTC 2011 - coolo@suse.com + +- add automake as buildrequire to avoid implicit dependency + +------------------------------------------------------------------- +Fri Jul 29 10:54:31 UTC 2011 - aj@suse.de + +- Recommends instead of require lang package. + +------------------------------------------------------------------- +Thu Jul 28 23:26:45 UTC 2011 - giecrilj@stegny.2a.pl + +- create sharutils-lang + +------------------------------------------------------------------- +Tue Jul 26 11:44:58 CEST 2011 - pth@suse.de + +- Update to 4.11.1. Changes since 2.6.3: + + 4.11.1: + * mail-files was completely broken and cannot be in use. Removed. + mailshar (its wrapper script) also remvoed. + + 4.10: + * test and handle clobber option correctly in generated scripts. + + 4.9: + * Fix up quoting some more in the shar script messages. + Translators will not have to worry over shell quoting any more. + + 4.7.1: + * uudecode will not create output file names with trailing white space + + 4.7: + * fix a grammatical typo in doc/uuencode.1 + * relicense the product under GPL version 3. + +- Remove unneeded dummy.diff. +- Prefix all patches with pacckage name. + +------------------------------------------------------------------- +Tue Nov 3 19:09:45 UTC 2009 - coolo@novell.com + +- updated patches to apply with fuzz=0 + +------------------------------------------------------------------- +Mon Nov 19 11:03:44 CET 2007 - schwab@suse.de + +- Fix packaging bug. + +------------------------------------------------------------------- +Thu Nov 15 17:30:02 CET 2007 - schwab@suse.de + +- Update to sharutils 4.6.3. + * Recognize "end\r\n" as "end" as well as "end\n". + * Avoid duplicate declarations of "readdir". + * generate compress-dummy.1 from the dummy script at bootstrap time + +------------------------------------------------------------------- +Mon May 15 15:39:09 CEST 2006 - schwab@suse.de + +- Update to sharutils 4.6.2. + * uudecode.c(decode): make clear the name of the file causing problems + * uudecode.c (O_BINARY): Define for all platforms. + (decode): Always open with binary, where it matters. + * uuencode.c [__CYGWIN__]: Include io.h for setmode. + (O_BINARY): Define for all platforms. + (main): Always open with binary, where it matters. + (main) [__CYGWIN__]: Use setmode to make stdin binary. + * src/shar.c(echo_status): new - report status in consistent fashion. + (throughout): remove many strings to scripts.def file. + * src/scripts.def: add many new entries and alphabetize + * tests/shar-1.ok: adjust to changes + * tests/Makefile.am: add 'shar-3' test and a clean rule + * tests/shar-3: new - test large multi part archive + * tests/shar-1: delete varying text, not arbitrary lines from sample + * tests/shar-2: remove unnecessary line removal + +------------------------------------------------------------------- +Wed Jan 25 21:30:58 CET 2006 - mls@suse.de + +- converted neededforbuild to BuildRequires + +------------------------------------------------------------------- +Wed Oct 5 10:12:31 CEST 2005 - schwab@suse.de + +- Update to sharutils 4.6. + +------------------------------------------------------------------- +Thu Aug 4 13:20:03 CEST 2005 - schwab@suse.de + +- Update to sharutils 4.5. + +------------------------------------------------------------------- +Mon Jul 25 10:19:48 CEST 2005 - schwab@suse.de + +- Update to sharutils 4.4. + +------------------------------------------------------------------- +Mon Jun 27 10:00:44 CEST 2005 - schwab@suse.de + +- Update to sharutils 4.3.81. + +------------------------------------------------------------------- +Sun May 1 12:51:45 CEST 2005 - schwab@suse.de + +- Update to sharutils 4.3.80. + +------------------------------------------------------------------- +Wed Apr 27 15:47:39 CEST 2005 - schwab@suse.de + +- Update to sharutils 4.3.79. + +------------------------------------------------------------------- +Tue Apr 19 15:11:44 CEST 2005 - kukuk@suse.de + +- Remove compress symlink [#78331] + +------------------------------------------------------------------- +Mon Jan 24 14:26:28 CET 2005 - schwab@suse.de + +- Update to sharutils 4.3.78. + +------------------------------------------------------------------- +Wed Nov 3 15:57:25 CET 2004 - schwab@suse.de + +- Fix buffer underrun [#46557]. + +------------------------------------------------------------------- +Mon Oct 25 17:04:25 CEST 2004 - schwab@suse.de + +- Fix another quoting bug. + +------------------------------------------------------------------- +Fri Oct 8 14:53:29 CEST 2004 - schwab@suse.de + +- Update to sharutils 4.3.77. + +------------------------------------------------------------------- +Thu Sep 30 15:56:08 CEST 2004 - schwab@suse.de + +- Properly quote filenames in generated shar output. +- Fix buffer overruns [#46557]. + +------------------------------------------------------------------- +Fri Aug 13 15:41:06 CEST 2004 - schwab@suse.de + +- Rename ja_JP.EUC.po to ja.po and fix encoding header [#43607]. + +------------------------------------------------------------------- +Mon May 3 17:08:29 CEST 2004 - schwab@suse.de + +- Better fix for last change. + +------------------------------------------------------------------- +Tue Apr 20 14:44:08 CEST 2004 - schwab@suse.de + +- Fix arbitrary file name limit [#39122]. + +------------------------------------------------------------------- +Fri Mar 5 17:55:23 CET 2004 - schwab@suse.de + +- Add /usr/bin/compress as %ghost. + +------------------------------------------------------------------- +Fri Dec 12 21:16:38 CET 2003 - schwab@suse.de + +- Remove extra AC_LINK_FILES. + +------------------------------------------------------------------- +Thu Apr 24 12:20:23 CEST 2003 - ro@suse.de + +- fix install_info --delete call and move from preun to postun + +------------------------------------------------------------------- +Mon Apr 7 13:12:06 CEST 2003 - schwab@suse.de + +- Only delete info entries when removing last version. + +------------------------------------------------------------------- +Thu Feb 6 17:49:27 CET 2003 - schwab@suse.de + +- Use %install_info. + +------------------------------------------------------------------- +Mon Nov 18 16:16:54 CET 2002 - schwab@suse.de + +- Add AM_GNU_GETTEXT_VERSION. + +------------------------------------------------------------------- +Tue Aug 20 11:05:04 CEST 2002 - mmj@suse.de + +- Correct PreReq + +------------------------------------------------------------------- +Wed Jul 10 12:54:11 CEST 2002 - schwab@suse.de + +- Remove last change, breaks POSIX conformance. + +------------------------------------------------------------------- +Mon Jul 8 09:23:50 CEST 2002 - ke@suse.de + +- Fix uudecode file handling (FIFO, symlink, and pipe output): + CAN-2002-0178; make use of RHSA-2002:065-13. + +------------------------------------------------------------------- +Tue Jul 2 18:01:00 MEST 2002 - mls@suse.de + +- removed mininews from neededforbuild, was only needed for uudeview + +------------------------------------------------------------------- +Tue Jul 2 13:49:48 CEST 2002 - max@suse.de + +- Split off uudeview into a separate package. + +------------------------------------------------------------------- +Mon Jun 24 13:16:46 CEST 2002 - schwab@suse.de + +- Fix last change. + +------------------------------------------------------------------- +Mon Jun 24 08:23:20 CEST 2002 - ke@suse.de + +- compress-dummy.sh.in: Add this script and install a link 'compress' + pointing to it; thus legacy shar files calling 'compress -d < ...' + can succeed; cf. [# 16299]. +- sharutils-compress.diff: Patch to install compress-dummy.sh. +- sharutils-printf.diff: Avoid embedded newlines in strings (xgettext + warns about those strings). + +------------------------------------------------------------------- +Fri Dec 7 12:11:21 CET 2001 - schwab@suse.de + +- Run autoconf in uudeview. +- Fix provides. + +------------------------------------------------------------------- +Mon Dec 4 10:46:58 CET 2000 - schwab@suse.de + +- Use BuildRoot. +- Avoid `install -s' on non-binaries. + +------------------------------------------------------------------- +Wed Nov 29 17:26:54 CET 2000 - ro@suse.de + +- changed neededforbuild to + +------------------------------------------------------------------- +Tue Oct 24 14:09:10 CEST 2000 - schwab@suse.de + +- Renamed from sharutil. + +------------------------------------------------------------------- +Tue May 30 16:47:33 CEST 2000 - schwab@suse.de + +- mailshar: recognize `*.tgz' as compressed file + +------------------------------------------------------------------- +Mon May 29 13:21:10 CEST 2000 - max@suse.de + +- changed use of Tk_Main to Tk_MainEx for compatibility with + Tcl/Tk 8.3. + +------------------------------------------------------------------- +Tue Jan 18 13:54:59 CET 2000 - schwab@suse.de + +- /usr/{info,man} -> /usr/share/{info,man} + +------------------------------------------------------------------- +Tue Jan 4 12:00:42 CET 2000 - schwab@suse.de + +- Enable NLS + +------------------------------------------------------------------- +Tue Jan 4 11:13:57 CET 2000 - schwab@suse.de + +- Y2K fixes from sharutils 4.2.1 +- Fix mktemp usage and quoting in mailshar + +------------------------------------------------------------------- +Tue Oct 12 12:34:40 CEST 1999 - ro@suse.de + +- added tcld to neededforbuild + +------------------------------------------------------------------- +Mon Sep 13 17:23:57 CEST 1999 - bs@suse.de + +- ran old prepare_spec on spec file to switch to new prepare_spec. + +------------------------------------------------------------------- +Wed Sep 8 12:50:47 CEST 1999 - schwab@suse.de + +- run "make check" + +------------------------------------------------------------------- +Fri Aug 27 18:26:47 CEST 1999 - schwab@suse.de + +- specfile cleanup +- add mininews as neededforbuild +- fix shell expansion bug in uudeview configure script + +------------------------------------------------------------------- +Fri Jul 17 14:31:45 MEST 1998 - werner@suse.de + +- Use mktemp + +------------------------------------------------------------------- +Thu Jul 16 23:03:09 MEST 1998 - werner@suse.de + +- mailshar fix to remove already existing temp files + +------------------------------------------------------------------- +Thu Feb 5 10:24:18 MET 1998 - florian@suse.de + +- fix setting of mail program for mailshar + +------------------------------------------------------------------- +Fri Oct 17 12:47:51 MEST 1997 - ro@suse.de + +- ready for autobuild + +---------------------------------------------------------------------------- +Sun Jun 22 18:57:49 MEST 1997 - florian@suse.de + + +- update to sharutil 4.2c + +- update to uudeview 0.5.13 + + +---------------------------------------------------------------------- +Sun Aug 25 19:28:50 MET DST 1996 - florian@suse.de + + +added additional source package uudeview diff --git a/sharutils.keyring b/sharutils.keyring new file mode 100644 index 0000000..55322b2 --- /dev/null +++ b/sharutils.keyring @@ -0,0 +1,29 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v2 + +mQGiBEp90uARBACJ5Cegm9cH/boJ9Mknwa3g7IqXRN+ZCNfPfii/iFTfeD83eMJY +7VZqoV7Nvfzaabm0ZEtYC0lv+Bf8Mt5ZSSOL/d9ezxo1BCS85q4Ge6wUBK3hopaA +SYkxzR36BeOBnP5lmvTt5XYa6C/bgUDMgCMKFD/SQtS7xH7cpP/strcGpwCg9V5i +kybrutX5e171uW6wvLRvynEEAIjSDFqgpc/Ck0LES+rm0UBGa+SvLYg2XX1vuTQY +jX45VK/0rAhw6xt1rB/zbCEipzDlfe38BwRE2oQYKUGSd2U0XvokWOlfYPbM7jDK +B6gpLUCb4N/HTrTkHC8s/fgzxjXwREdIVKxCDso5BERIZjYkNBDz/5JjlHHRfvNw +66paBACHT18nLu+2+k0M4Zu2ttVDKvPTLF1pSoxZbHqrdZOiFSEsFN/xONB8DAkH +mSib2m5AVg9v0nPby7J86RPATlRfnFdweh9XF/jVZiV73b4UqTRTDRlb4vJDMi2o +sa2u+oy4OEcXrgwuiG1MFpI27ICVNSJku8VdMMTOX31nZxwCi7QaQnJ1Y2UgS29y +YiA8YmtvcmJAZ251Lm9yZz6IYAQTEQIAIAUCSn3S4AIbAwYLCQgHAwIEFQIIAwQW +AgMBAh4BAheAAAoJENkgTLW/vwIh+CMAnAqhni9fdxgMdku6daaTCmtQ8TotAKC8 +wcDXHz8C7lC3BBokh0pH24MPbLkCDQRKfdLgEAgA2DC8De+04mpiTaZGGmdLI+6m +azmfZfU8sBSlVRZl4DUGpj4mN27jeRJYwIzAGoywO+MtZbQkRD/VfkdmngV7DIHu +sPwg/NuIYIM9Or2UeJ6vd4ouMZXTYTxtSxmG5TisYeAu9yTMkuA3OWK3egLT9yeq +DDXJ/2r+IaSHyZLNVRYUtLBX7ZW/J4iDY6vqzO+fEP1hpsxcqIU0D08lfXioMIRX +Pxd9/XqzVj+bbcTdPrtyKlTDz5yUvCdGHlTrECeYE6tZ3wZMiGLJK4vKuha56qDD +cKI+2kuksXuqNszq74jm2Ui9BcDSPrMFxQSiEKNuYzaW8tmdDd/c+0WlcFsJIwAD +BQf+KdC+CTv7lBaoG06S4G1KnLwzFgCjiRT23cREl9T6RO9m6/rJWH6CZd+BaRAJ +DtdHGfrx57Lnq70E8H5vuXYXL0L/WEZtmO3XOPqoaPU16jOsGlKo9iqQK7teT4Rq +RNeAFWy2nNTfRfoQ/0FnBRpZ9g/A82jSJwECyCxMs4qzxYPamixrrh9H5GxZYiHf +6vlYc9jwPIJ1Hm8iW1eSPvVHBSsw6Qxf+78YVrO9ZhQshKYBzA0iPGkeaYEbaSmd +MMjGf5rcQJLJZDuwSZ2HNQySM/pjij/lGpmqKns3+KkfcTFc3QJw9lGlyADIbwIO +n81H232bEZjbA26Y0TUoxe4tXYhJBBgRAgAJBQJKfdLgAhsMAAoJENkgTLW/vwIh +ZZsAmgO2P7NTfgrqE8TCiOCn4rIBxvpsAJ9C2rP48aExYYPkuNr/C16xOKP1Rw== +=TSVX +-----END PGP PUBLIC KEY BLOCK----- diff --git a/sharutils.spec b/sharutils.spec new file mode 100644 index 0000000..7706a8c --- /dev/null +++ b/sharutils.spec @@ -0,0 +1,93 @@ +# +# spec file for package sharutils +# +# Copyright (c) 2022 SUSE LLC +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +Name: sharutils +Version: 4.15.2 +Release: 0 +Summary: GNU shar utilities +License: GPL-3.0-or-later +Group: Productivity/Archiving/Compression +URL: https://www.gnu.org/software/sharutils/ +Source0: https://ftp.gnu.org/gnu/sharutils/sharutils-%{version}.tar.xz +Source1: https://ftp.gnu.org/gnu/sharutils/sharutils-%{version}.tar.xz.sig +Source2: %{name}.keyring +Patch0: sharutils-testsuite.diff +Patch1: sharutils-CVE-2018-1000097-fix_buffer_overflow.patch +Patch2: gnulib-libio.patch +Patch3: sharutils-4.14.2-Pass-compilation-with-Werror-format-security.patch +BuildRequires: libopenssl-devel +BuildRequires: xz +Requires(pre): %{install_info_prereq} +Requires(pre): coreutils +Provides: sharutil = %{version} +Obsoletes: sharutil < %{version} + +%description +This is the set of GNU shar utilities. + +shar makes shell archives out of many files, preparing them for +transmission by electronic mail services. Use unshar to unpack shell +archives after reception. + +uuencode prepares a file for transmission over an electronic channel +which ignores or otherwise mangles the eight bit (high order bit) of +bytes. uudecode does the converse transformation. + +%{?lang_package} + +%prep +%setup -q +%patch0 +%patch1 +%patch2 -p1 +%patch3 -p1 +chmod +w src/scripts.x + +%build +mkdir -p ../bin +ln -snf /bin/true ../bin/compress +PATH=$PWD/../bin:$PATH +%global optflags %{optflags} -fcommon +%configure \ + --with-openssl + +%make_build + +%check +%make_build check + +%install +%make_install +%find_lang %{name} + +%post +%install_info --info-dir=%{_infodir} %{_infodir}/%{name}.info.gz + +%postun +%install_info_delete --info-dir=%{_infodir} %{_infodir}/%{name}.info.gz + +%files lang -f %{name}.lang + +%files +%doc README NEWS THANKS +%license COPYING +%{_bindir}/* +%{_infodir}/*.gz +%{_mandir}/*/*.gz + +%changelog