Accepting request 451848 from hardware
1 OBS-URL: https://build.opensuse.org/request/show/451848 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libimobiledevice?expand=0&rev=35
This commit is contained in:
Dominique Leuenberger
Git OBS Bridge
commit
3d73dd2838
3
libimobiledevice-1.2.0+git20170122.45fda81.tar.xz
Normal file
3
libimobiledevice-1.2.0+git20170122.45fda81.tar.xz
Normal file
@ -0,0 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:bb23237ed34c0bd3a886f978622956d71a9ffd3cfaae0762add7cc8e4383bd6d
|
||||
size 179092
|
||||
@ -1,3 +0,0 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:786b0de0875053bf61b5531a86ae8119e320edab724fc62fe2150cc931f11037
|
||||
size 631495
|
||||
@ -1,32 +0,0 @@
|
||||
From df1f5c4d70d0c19ad40072f5246ca457e7f9849e Mon Sep 17 00:00:00 2001
|
||||
From: Joshua Hill <posixninja@gmail.com>
|
||||
Date: Tue, 29 Dec 2015 22:27:17 +0100
|
||||
Subject: [PATCH] common: [security fix] Make sure sockets only listen locally
|
||||
|
||||
---
|
||||
common/socket.c | 4 ++--
|
||||
1 file changed, 2 insertions(+), 2 deletions(-)
|
||||
|
||||
diff --git a/common/socket.c b/common/socket.c
|
||||
index b276864..e2968a6 100644
|
||||
--- a/common/socket.c
|
||||
+++ b/common/socket.c
|
||||
@@ -172,7 +172,7 @@ int socket_create(uint16_t port)
|
||||
|
||||
memset((void *) &saddr, 0, sizeof(saddr));
|
||||
saddr.sin_family = AF_INET;
|
||||
- saddr.sin_addr.s_addr = htonl(INADDR_ANY);
|
||||
+ saddr.sin_addr.s_addr = htonl(INADDR_LOOPBACK);
|
||||
saddr.sin_port = htons(port);
|
||||
|
||||
if (0 > bind(sfd, (struct sockaddr *) &saddr, sizeof(saddr))) {
|
||||
@@ -329,7 +329,7 @@ int socket_accept(int fd, uint16_t port)
|
||||
|
||||
memset(&addr, 0, sizeof(addr));
|
||||
addr.sin_family = AF_INET;
|
||||
- addr.sin_addr.s_addr = htonl(INADDR_ANY);
|
||||
+ addr.sin_addr.s_addr = htonl(INADDR_LOOPBACK);
|
||||
addr.sin_port = htons(port);
|
||||
|
||||
addr_len = sizeof(addr);
|
||||
|
||||
@ -1,11 +0,0 @@
|
||||
--- libimobiledevice-1.2.0.orig/src/idevice.c
|
||||
+++ libimobiledevice-1.2.0/src/idevice.c
|
||||
@@ -678,7 +678,7 @@ LIBIMOBILEDEVICE_API idevice_error_t ide
|
||||
}
|
||||
BIO_set_fd(ssl_bio, (int)(long)connection->data, BIO_NOCLOSE);
|
||||
|
||||
- SSL_CTX *ssl_ctx = SSL_CTX_new(SSLv3_method());
|
||||
+ SSL_CTX *ssl_ctx = SSL_CTX_new(SSLv23_method());
|
||||
if (ssl_ctx == NULL) {
|
||||
debug_info("ERROR: Could not create SSL context.");
|
||||
BIO_free(ssl_bio);
|
||||
@ -1,3 +1,66 @@
|
||||
-------------------------------------------------------------------
|
||||
Sun Jan 22 12:33:19 UTC 2017 - i@marguerite.su
|
||||
|
||||
- update version 1.2.0+git20170122.45fda81
|
||||
* m4: use python-config if available to fix python3 support
|
||||
on newer distros
|
||||
* lockdown: remove unneeded plist_free() calls since entire dict
|
||||
is freed later
|
||||
* lockdown: add more error codes
|
||||
* add new lockdownd_pair_with_options() function
|
||||
* fix installation_proxy when using GnuTLS instead of OpenSSL
|
||||
* tools: fix inverted abort condition in idevicecrashreport
|
||||
* tools: idevicecrashreport: propertly initialize buffer used
|
||||
to check for ping message
|
||||
* tools: idevicecrashreport: fix missing 0-term when creating local
|
||||
filename
|
||||
* make sure sockets only listen locally
|
||||
* idevicebackup: fix some timestamps that are relative to the Mac
|
||||
epoch instead of Unix one
|
||||
* avoid potential NULL pointer dereference (leading to segfault) if
|
||||
functions are called w/ null arguments
|
||||
* add new functions to get the underlying file descriptor of an
|
||||
idevice connection
|
||||
* idevicedebug: show error if container info not found
|
||||
* diagnostics_relay: plug small memory leak
|
||||
* file_relay: plug small memory leak
|
||||
* update GnuTLS certificate callback to new API
|
||||
* fix SSL version negotiation with newer versions of OpenSSL
|
||||
* lockdown: remove unnecessary check for pair record file during
|
||||
pairing
|
||||
* userpref: remove obsoleted function userpref_has_pair_record()
|
||||
* idevice: update GnuTLS code to support iOS 10
|
||||
* lockdown: return LOCKDOWN_E_INVALID_HOST_ID when missing pair record
|
||||
* idevicebackup2: fix removal of snapshot dir during backup w iOS 10+
|
||||
* idevicebackup2: add installed application info to Info.plist
|
||||
during backup
|
||||
* idevicebackup2: fix assertion occuring when copying non-present MEID
|
||||
* idevicebackup2: suppress repeated printing of global status when
|
||||
100% is reached
|
||||
* idevicebackup2: use remove_file() wrapper instead of remove()
|
||||
* idevicebackup2: don't report an error when file to remove doesn't
|
||||
exist
|
||||
* idevicebackup2: fix heap buffer out-of-bounds write caused by
|
||||
wrong buffer size
|
||||
* userpref: [GnuTLS]fix pairing record generation and improve
|
||||
error handling
|
||||
* idevicebackup2: plug some small memory leaks
|
||||
* misagent: add new misagent_copy_all() function (introduced in iOS 9.3)
|
||||
* ideviceprovision: use newer API to get list of profiles on iOS 9.3+
|
||||
* ideviceprovision: check output directory parameter for 'copy'
|
||||
command and return exit code on error
|
||||
* ideviceprovision: allow copying single profiles instead of all
|
||||
* ideviceprovision: add new remove-all command to remove all installed
|
||||
profiles at once
|
||||
* idevicebackup2: fix logical bug when checking for success of backup
|
||||
operation
|
||||
* ideviceprovision: fix ASN1 parsing for large provisioning profiles
|
||||
* property_list_service: remove packet length check when receiving
|
||||
plist data
|
||||
- drop libimobiledevice-CVE-2016-5104.patch, upstreamed
|
||||
- drop libimobiledevice-nosslv3.patch, upstream changed default
|
||||
method from SSLv3_method to TLSv1_method.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri May 27 13:10:37 UTC 2016 - dimstar@opensuse.org
|
||||
|
||||
|
||||
@ -18,17 +18,15 @@
|
||||
|
||||
%define soname 6
|
||||
Name: libimobiledevice
|
||||
Version: 1.2.0
|
||||
Version: 1.2.0+git20170122.45fda81
|
||||
Release: 0
|
||||
Summary: Native protocols library for iOS devices
|
||||
License: LGPL-2.1+
|
||||
Group: System/Libraries
|
||||
Url: http://www.libimobiledevice.org
|
||||
Source: http://www.libimobiledevice.org/downloads/%{name}-%{version}.tar.bz2
|
||||
#Source: http://www.libimobiledevice.org/downloads/%{name}-%{version}.tar.bz2
|
||||
Source: %{name}-%{version}.tar.xz
|
||||
Source1: baselibs.conf
|
||||
Patch0: libimobiledevice-nosslv3.patch
|
||||
# PATCH-FIX-UPSTREAM libimobiledevice-CVE-2016-5104.patch CVE-2016-5104 boo#982014 dimstar@opensuse.org - Make sure sockets only listen locally
|
||||
Patch1: libimobiledevice-CVE-2016-5104.patch
|
||||
BuildRequires: fdupes
|
||||
BuildRequires: gcc-c++
|
||||
BuildRequires: libopenssl-devel
|
||||
@ -87,14 +85,6 @@ libimobiledevice is a software library that talks the protocols to support
|
||||
iOS devices. Unlike other projects, it does not depend on using any existing
|
||||
`.dll` or `.so` libraries from Apple.
|
||||
|
||||
%package doc
|
||||
Summary: API Reference Documentation for %{name}
|
||||
License: LGPL-2.1+
|
||||
Group: Development/Libraries/C and C++
|
||||
|
||||
%description doc
|
||||
Contains API reference documentation for developers using %{name}.
|
||||
|
||||
%package -n python-imobiledevice
|
||||
Summary: Python bindings for %{name}
|
||||
License: LGPL-2.1+
|
||||
@ -107,8 +97,6 @@ Contains Python bindings for developing applications that use %{name}.
|
||||
|
||||
%prep
|
||||
%setup -q
|
||||
%patch0 -p1
|
||||
%patch1 -p1
|
||||
autoreconf -fi
|
||||
sed -i -e '/Requires:/d' src/%{name}-1.0.pc.in
|
||||
sed -i -e 's/-L${libdir}//' src/%{name}-1.0.pc.in
|
||||
@ -122,7 +110,6 @@ make %{?_smp_mflags}
|
||||
make DESTDIR=%{buildroot} install %{?_smp_mflags}
|
||||
find %{buildroot} -type f -name "*.la" -delete -print
|
||||
rm -rf %{buildroot}/%{_libdir}/%{name}.*a*
|
||||
%fdupes %{buildroot}%{_docdir}/%{name}-doc/html
|
||||
|
||||
%post -n %{name}%{soname} -p /sbin/ldconfig
|
||||
|
||||
@ -142,6 +129,7 @@ rm -rf %{buildroot}/%{_libdir}/%{name}.*a*
|
||||
|
||||
%files -n imobiledevice-tools
|
||||
%defattr(-,root,root)
|
||||
%doc AUTHORS COPYING COPYING.LESSER NEWS README
|
||||
%{_bindir}/idevice_id
|
||||
%{_bindir}/idevicecrashreport
|
||||
%{_bindir}/idevicepair
|
||||
@ -177,11 +165,6 @@ rm -rf %{buildroot}/%{_libdir}/%{name}.*a*
|
||||
%doc %{_mandir}/man1/ideviceprovision.1%{?ext_man}
|
||||
%doc %{_mandir}/man1/idevicenotificationproxy.1%{?ext_man}
|
||||
|
||||
%files doc
|
||||
%defattr(-,root,root)
|
||||
%doc AUTHORS COPYING COPYING.LESSER NEWS README
|
||||
%doc docs/html
|
||||
|
||||
%files -n python-imobiledevice
|
||||
%defattr(-,root,root)
|
||||
%{python_sitearch}/imobiledevice.so
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user