Dominique Leuenberger 2017-01-25 21:35:50 +00:00 committed by Git OBS Bridge
commit 3d73dd2838
6 changed files with 70 additions and 67 deletions

View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:bb23237ed34c0bd3a886f978622956d71a9ffd3cfaae0762add7cc8e4383bd6d
size 179092

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:786b0de0875053bf61b5531a86ae8119e320edab724fc62fe2150cc931f11037
size 631495

View File

@ -1,32 +0,0 @@
From df1f5c4d70d0c19ad40072f5246ca457e7f9849e Mon Sep 17 00:00:00 2001
From: Joshua Hill <posixninja@gmail.com>
Date: Tue, 29 Dec 2015 22:27:17 +0100
Subject: [PATCH] common: [security fix] Make sure sockets only listen locally
---
common/socket.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/common/socket.c b/common/socket.c
index b276864..e2968a6 100644
--- a/common/socket.c
+++ b/common/socket.c
@@ -172,7 +172,7 @@ int socket_create(uint16_t port)
memset((void *) &saddr, 0, sizeof(saddr));
saddr.sin_family = AF_INET;
- saddr.sin_addr.s_addr = htonl(INADDR_ANY);
+ saddr.sin_addr.s_addr = htonl(INADDR_LOOPBACK);
saddr.sin_port = htons(port);
if (0 > bind(sfd, (struct sockaddr *) &saddr, sizeof(saddr))) {
@@ -329,7 +329,7 @@ int socket_accept(int fd, uint16_t port)
memset(&addr, 0, sizeof(addr));
addr.sin_family = AF_INET;
- addr.sin_addr.s_addr = htonl(INADDR_ANY);
+ addr.sin_addr.s_addr = htonl(INADDR_LOOPBACK);
addr.sin_port = htons(port);
addr_len = sizeof(addr);

View File

@ -1,11 +0,0 @@
--- libimobiledevice-1.2.0.orig/src/idevice.c
+++ libimobiledevice-1.2.0/src/idevice.c
@@ -678,7 +678,7 @@ LIBIMOBILEDEVICE_API idevice_error_t ide
}
BIO_set_fd(ssl_bio, (int)(long)connection->data, BIO_NOCLOSE);
- SSL_CTX *ssl_ctx = SSL_CTX_new(SSLv3_method());
+ SSL_CTX *ssl_ctx = SSL_CTX_new(SSLv23_method());
if (ssl_ctx == NULL) {
debug_info("ERROR: Could not create SSL context.");
BIO_free(ssl_bio);

View File

@ -1,3 +1,66 @@
-------------------------------------------------------------------
Sun Jan 22 12:33:19 UTC 2017 - i@marguerite.su
- update version 1.2.0+git20170122.45fda81
* m4: use python-config if available to fix python3 support
on newer distros
* lockdown: remove unneeded plist_free() calls since entire dict
is freed later
* lockdown: add more error codes
* add new lockdownd_pair_with_options() function
* fix installation_proxy when using GnuTLS instead of OpenSSL
* tools: fix inverted abort condition in idevicecrashreport
* tools: idevicecrashreport: propertly initialize buffer used
to check for ping message
* tools: idevicecrashreport: fix missing 0-term when creating local
filename
* make sure sockets only listen locally
* idevicebackup: fix some timestamps that are relative to the Mac
epoch instead of Unix one
* avoid potential NULL pointer dereference (leading to segfault) if
functions are called w/ null arguments
* add new functions to get the underlying file descriptor of an
idevice connection
* idevicedebug: show error if container info not found
* diagnostics_relay: plug small memory leak
* file_relay: plug small memory leak
* update GnuTLS certificate callback to new API
* fix SSL version negotiation with newer versions of OpenSSL
* lockdown: remove unnecessary check for pair record file during
pairing
* userpref: remove obsoleted function userpref_has_pair_record()
* idevice: update GnuTLS code to support iOS 10
* lockdown: return LOCKDOWN_E_INVALID_HOST_ID when missing pair record
* idevicebackup2: fix removal of snapshot dir during backup w iOS 10+
* idevicebackup2: add installed application info to Info.plist
during backup
* idevicebackup2: fix assertion occuring when copying non-present MEID
* idevicebackup2: suppress repeated printing of global status when
100% is reached
* idevicebackup2: use remove_file() wrapper instead of remove()
* idevicebackup2: don't report an error when file to remove doesn't
exist
* idevicebackup2: fix heap buffer out-of-bounds write caused by
wrong buffer size
* userpref: [GnuTLS]fix pairing record generation and improve
error handling
* idevicebackup2: plug some small memory leaks
* misagent: add new misagent_copy_all() function (introduced in iOS 9.3)
* ideviceprovision: use newer API to get list of profiles on iOS 9.3+
* ideviceprovision: check output directory parameter for 'copy'
command and return exit code on error
* ideviceprovision: allow copying single profiles instead of all
* ideviceprovision: add new remove-all command to remove all installed
profiles at once
* idevicebackup2: fix logical bug when checking for success of backup
operation
* ideviceprovision: fix ASN1 parsing for large provisioning profiles
* property_list_service: remove packet length check when receiving
plist data
- drop libimobiledevice-CVE-2016-5104.patch, upstreamed
- drop libimobiledevice-nosslv3.patch, upstream changed default
method from SSLv3_method to TLSv1_method.
------------------------------------------------------------------- -------------------------------------------------------------------
Fri May 27 13:10:37 UTC 2016 - dimstar@opensuse.org Fri May 27 13:10:37 UTC 2016 - dimstar@opensuse.org

View File

@ -18,17 +18,15 @@
%define soname 6 %define soname 6
Name: libimobiledevice Name: libimobiledevice
Version: 1.2.0 Version: 1.2.0+git20170122.45fda81
Release: 0 Release: 0
Summary: Native protocols library for iOS devices Summary: Native protocols library for iOS devices
License: LGPL-2.1+ License: LGPL-2.1+
Group: System/Libraries Group: System/Libraries
Url: http://www.libimobiledevice.org Url: http://www.libimobiledevice.org
Source: http://www.libimobiledevice.org/downloads/%{name}-%{version}.tar.bz2 #Source: http://www.libimobiledevice.org/downloads/%{name}-%{version}.tar.bz2
Source: %{name}-%{version}.tar.xz
Source1: baselibs.conf Source1: baselibs.conf
Patch0: libimobiledevice-nosslv3.patch
# PATCH-FIX-UPSTREAM libimobiledevice-CVE-2016-5104.patch CVE-2016-5104 boo#982014 dimstar@opensuse.org - Make sure sockets only listen locally
Patch1: libimobiledevice-CVE-2016-5104.patch
BuildRequires: fdupes BuildRequires: fdupes
BuildRequires: gcc-c++ BuildRequires: gcc-c++
BuildRequires: libopenssl-devel BuildRequires: libopenssl-devel
@ -87,14 +85,6 @@ libimobiledevice is a software library that talks the protocols to support
iOS devices. Unlike other projects, it does not depend on using any existing iOS devices. Unlike other projects, it does not depend on using any existing
`.dll` or `.so` libraries from Apple. `.dll` or `.so` libraries from Apple.
%package doc
Summary: API Reference Documentation for %{name}
License: LGPL-2.1+
Group: Development/Libraries/C and C++
%description doc
Contains API reference documentation for developers using %{name}.
%package -n python-imobiledevice %package -n python-imobiledevice
Summary: Python bindings for %{name} Summary: Python bindings for %{name}
License: LGPL-2.1+ License: LGPL-2.1+
@ -107,8 +97,6 @@ Contains Python bindings for developing applications that use %{name}.
%prep %prep
%setup -q %setup -q
%patch0 -p1
%patch1 -p1
autoreconf -fi autoreconf -fi
sed -i -e '/Requires:/d' src/%{name}-1.0.pc.in sed -i -e '/Requires:/d' src/%{name}-1.0.pc.in
sed -i -e 's/-L${libdir}//' src/%{name}-1.0.pc.in sed -i -e 's/-L${libdir}//' src/%{name}-1.0.pc.in
@ -122,7 +110,6 @@ make %{?_smp_mflags}
make DESTDIR=%{buildroot} install %{?_smp_mflags} make DESTDIR=%{buildroot} install %{?_smp_mflags}
find %{buildroot} -type f -name "*.la" -delete -print find %{buildroot} -type f -name "*.la" -delete -print
rm -rf %{buildroot}/%{_libdir}/%{name}.*a* rm -rf %{buildroot}/%{_libdir}/%{name}.*a*
%fdupes %{buildroot}%{_docdir}/%{name}-doc/html
%post -n %{name}%{soname} -p /sbin/ldconfig %post -n %{name}%{soname} -p /sbin/ldconfig
@ -142,6 +129,7 @@ rm -rf %{buildroot}/%{_libdir}/%{name}.*a*
%files -n imobiledevice-tools %files -n imobiledevice-tools
%defattr(-,root,root) %defattr(-,root,root)
%doc AUTHORS COPYING COPYING.LESSER NEWS README
%{_bindir}/idevice_id %{_bindir}/idevice_id
%{_bindir}/idevicecrashreport %{_bindir}/idevicecrashreport
%{_bindir}/idevicepair %{_bindir}/idevicepair
@ -177,11 +165,6 @@ rm -rf %{buildroot}/%{_libdir}/%{name}.*a*
%doc %{_mandir}/man1/ideviceprovision.1%{?ext_man} %doc %{_mandir}/man1/ideviceprovision.1%{?ext_man}
%doc %{_mandir}/man1/idevicenotificationproxy.1%{?ext_man} %doc %{_mandir}/man1/idevicenotificationproxy.1%{?ext_man}
%files doc
%defattr(-,root,root)
%doc AUTHORS COPYING COPYING.LESSER NEWS README
%doc docs/html
%files -n python-imobiledevice %files -n python-imobiledevice
%defattr(-,root,root) %defattr(-,root,root)
%{python_sitearch}/imobiledevice.so %{python_sitearch}/imobiledevice.so