Accepting request 451848 from hardware
1 OBS-URL: https://build.opensuse.org/request/show/451848 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libimobiledevice?expand=0&rev=35
This commit is contained in:
commit
3d73dd2838
3
libimobiledevice-1.2.0+git20170122.45fda81.tar.xz
Normal file
3
libimobiledevice-1.2.0+git20170122.45fda81.tar.xz
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:bb23237ed34c0bd3a886f978622956d71a9ffd3cfaae0762add7cc8e4383bd6d
|
||||||
|
size 179092
|
@ -1,3 +0,0 @@
|
|||||||
version https://git-lfs.github.com/spec/v1
|
|
||||||
oid sha256:786b0de0875053bf61b5531a86ae8119e320edab724fc62fe2150cc931f11037
|
|
||||||
size 631495
|
|
@ -1,32 +0,0 @@
|
|||||||
From df1f5c4d70d0c19ad40072f5246ca457e7f9849e Mon Sep 17 00:00:00 2001
|
|
||||||
From: Joshua Hill <posixninja@gmail.com>
|
|
||||||
Date: Tue, 29 Dec 2015 22:27:17 +0100
|
|
||||||
Subject: [PATCH] common: [security fix] Make sure sockets only listen locally
|
|
||||||
|
|
||||||
---
|
|
||||||
common/socket.c | 4 ++--
|
|
||||||
1 file changed, 2 insertions(+), 2 deletions(-)
|
|
||||||
|
|
||||||
diff --git a/common/socket.c b/common/socket.c
|
|
||||||
index b276864..e2968a6 100644
|
|
||||||
--- a/common/socket.c
|
|
||||||
+++ b/common/socket.c
|
|
||||||
@@ -172,7 +172,7 @@ int socket_create(uint16_t port)
|
|
||||||
|
|
||||||
memset((void *) &saddr, 0, sizeof(saddr));
|
|
||||||
saddr.sin_family = AF_INET;
|
|
||||||
- saddr.sin_addr.s_addr = htonl(INADDR_ANY);
|
|
||||||
+ saddr.sin_addr.s_addr = htonl(INADDR_LOOPBACK);
|
|
||||||
saddr.sin_port = htons(port);
|
|
||||||
|
|
||||||
if (0 > bind(sfd, (struct sockaddr *) &saddr, sizeof(saddr))) {
|
|
||||||
@@ -329,7 +329,7 @@ int socket_accept(int fd, uint16_t port)
|
|
||||||
|
|
||||||
memset(&addr, 0, sizeof(addr));
|
|
||||||
addr.sin_family = AF_INET;
|
|
||||||
- addr.sin_addr.s_addr = htonl(INADDR_ANY);
|
|
||||||
+ addr.sin_addr.s_addr = htonl(INADDR_LOOPBACK);
|
|
||||||
addr.sin_port = htons(port);
|
|
||||||
|
|
||||||
addr_len = sizeof(addr);
|
|
||||||
|
|
@ -1,11 +0,0 @@
|
|||||||
--- libimobiledevice-1.2.0.orig/src/idevice.c
|
|
||||||
+++ libimobiledevice-1.2.0/src/idevice.c
|
|
||||||
@@ -678,7 +678,7 @@ LIBIMOBILEDEVICE_API idevice_error_t ide
|
|
||||||
}
|
|
||||||
BIO_set_fd(ssl_bio, (int)(long)connection->data, BIO_NOCLOSE);
|
|
||||||
|
|
||||||
- SSL_CTX *ssl_ctx = SSL_CTX_new(SSLv3_method());
|
|
||||||
+ SSL_CTX *ssl_ctx = SSL_CTX_new(SSLv23_method());
|
|
||||||
if (ssl_ctx == NULL) {
|
|
||||||
debug_info("ERROR: Could not create SSL context.");
|
|
||||||
BIO_free(ssl_bio);
|
|
@ -1,3 +1,66 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Sun Jan 22 12:33:19 UTC 2017 - i@marguerite.su
|
||||||
|
|
||||||
|
- update version 1.2.0+git20170122.45fda81
|
||||||
|
* m4: use python-config if available to fix python3 support
|
||||||
|
on newer distros
|
||||||
|
* lockdown: remove unneeded plist_free() calls since entire dict
|
||||||
|
is freed later
|
||||||
|
* lockdown: add more error codes
|
||||||
|
* add new lockdownd_pair_with_options() function
|
||||||
|
* fix installation_proxy when using GnuTLS instead of OpenSSL
|
||||||
|
* tools: fix inverted abort condition in idevicecrashreport
|
||||||
|
* tools: idevicecrashreport: propertly initialize buffer used
|
||||||
|
to check for ping message
|
||||||
|
* tools: idevicecrashreport: fix missing 0-term when creating local
|
||||||
|
filename
|
||||||
|
* make sure sockets only listen locally
|
||||||
|
* idevicebackup: fix some timestamps that are relative to the Mac
|
||||||
|
epoch instead of Unix one
|
||||||
|
* avoid potential NULL pointer dereference (leading to segfault) if
|
||||||
|
functions are called w/ null arguments
|
||||||
|
* add new functions to get the underlying file descriptor of an
|
||||||
|
idevice connection
|
||||||
|
* idevicedebug: show error if container info not found
|
||||||
|
* diagnostics_relay: plug small memory leak
|
||||||
|
* file_relay: plug small memory leak
|
||||||
|
* update GnuTLS certificate callback to new API
|
||||||
|
* fix SSL version negotiation with newer versions of OpenSSL
|
||||||
|
* lockdown: remove unnecessary check for pair record file during
|
||||||
|
pairing
|
||||||
|
* userpref: remove obsoleted function userpref_has_pair_record()
|
||||||
|
* idevice: update GnuTLS code to support iOS 10
|
||||||
|
* lockdown: return LOCKDOWN_E_INVALID_HOST_ID when missing pair record
|
||||||
|
* idevicebackup2: fix removal of snapshot dir during backup w iOS 10+
|
||||||
|
* idevicebackup2: add installed application info to Info.plist
|
||||||
|
during backup
|
||||||
|
* idevicebackup2: fix assertion occuring when copying non-present MEID
|
||||||
|
* idevicebackup2: suppress repeated printing of global status when
|
||||||
|
100% is reached
|
||||||
|
* idevicebackup2: use remove_file() wrapper instead of remove()
|
||||||
|
* idevicebackup2: don't report an error when file to remove doesn't
|
||||||
|
exist
|
||||||
|
* idevicebackup2: fix heap buffer out-of-bounds write caused by
|
||||||
|
wrong buffer size
|
||||||
|
* userpref: [GnuTLS]fix pairing record generation and improve
|
||||||
|
error handling
|
||||||
|
* idevicebackup2: plug some small memory leaks
|
||||||
|
* misagent: add new misagent_copy_all() function (introduced in iOS 9.3)
|
||||||
|
* ideviceprovision: use newer API to get list of profiles on iOS 9.3+
|
||||||
|
* ideviceprovision: check output directory parameter for 'copy'
|
||||||
|
command and return exit code on error
|
||||||
|
* ideviceprovision: allow copying single profiles instead of all
|
||||||
|
* ideviceprovision: add new remove-all command to remove all installed
|
||||||
|
profiles at once
|
||||||
|
* idevicebackup2: fix logical bug when checking for success of backup
|
||||||
|
operation
|
||||||
|
* ideviceprovision: fix ASN1 parsing for large provisioning profiles
|
||||||
|
* property_list_service: remove packet length check when receiving
|
||||||
|
plist data
|
||||||
|
- drop libimobiledevice-CVE-2016-5104.patch, upstreamed
|
||||||
|
- drop libimobiledevice-nosslv3.patch, upstream changed default
|
||||||
|
method from SSLv3_method to TLSv1_method.
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Fri May 27 13:10:37 UTC 2016 - dimstar@opensuse.org
|
Fri May 27 13:10:37 UTC 2016 - dimstar@opensuse.org
|
||||||
|
|
||||||
|
@ -18,17 +18,15 @@
|
|||||||
|
|
||||||
%define soname 6
|
%define soname 6
|
||||||
Name: libimobiledevice
|
Name: libimobiledevice
|
||||||
Version: 1.2.0
|
Version: 1.2.0+git20170122.45fda81
|
||||||
Release: 0
|
Release: 0
|
||||||
Summary: Native protocols library for iOS devices
|
Summary: Native protocols library for iOS devices
|
||||||
License: LGPL-2.1+
|
License: LGPL-2.1+
|
||||||
Group: System/Libraries
|
Group: System/Libraries
|
||||||
Url: http://www.libimobiledevice.org
|
Url: http://www.libimobiledevice.org
|
||||||
Source: http://www.libimobiledevice.org/downloads/%{name}-%{version}.tar.bz2
|
#Source: http://www.libimobiledevice.org/downloads/%{name}-%{version}.tar.bz2
|
||||||
|
Source: %{name}-%{version}.tar.xz
|
||||||
Source1: baselibs.conf
|
Source1: baselibs.conf
|
||||||
Patch0: libimobiledevice-nosslv3.patch
|
|
||||||
# PATCH-FIX-UPSTREAM libimobiledevice-CVE-2016-5104.patch CVE-2016-5104 boo#982014 dimstar@opensuse.org - Make sure sockets only listen locally
|
|
||||||
Patch1: libimobiledevice-CVE-2016-5104.patch
|
|
||||||
BuildRequires: fdupes
|
BuildRequires: fdupes
|
||||||
BuildRequires: gcc-c++
|
BuildRequires: gcc-c++
|
||||||
BuildRequires: libopenssl-devel
|
BuildRequires: libopenssl-devel
|
||||||
@ -87,14 +85,6 @@ libimobiledevice is a software library that talks the protocols to support
|
|||||||
iOS devices. Unlike other projects, it does not depend on using any existing
|
iOS devices. Unlike other projects, it does not depend on using any existing
|
||||||
`.dll` or `.so` libraries from Apple.
|
`.dll` or `.so` libraries from Apple.
|
||||||
|
|
||||||
%package doc
|
|
||||||
Summary: API Reference Documentation for %{name}
|
|
||||||
License: LGPL-2.1+
|
|
||||||
Group: Development/Libraries/C and C++
|
|
||||||
|
|
||||||
%description doc
|
|
||||||
Contains API reference documentation for developers using %{name}.
|
|
||||||
|
|
||||||
%package -n python-imobiledevice
|
%package -n python-imobiledevice
|
||||||
Summary: Python bindings for %{name}
|
Summary: Python bindings for %{name}
|
||||||
License: LGPL-2.1+
|
License: LGPL-2.1+
|
||||||
@ -107,8 +97,6 @@ Contains Python bindings for developing applications that use %{name}.
|
|||||||
|
|
||||||
%prep
|
%prep
|
||||||
%setup -q
|
%setup -q
|
||||||
%patch0 -p1
|
|
||||||
%patch1 -p1
|
|
||||||
autoreconf -fi
|
autoreconf -fi
|
||||||
sed -i -e '/Requires:/d' src/%{name}-1.0.pc.in
|
sed -i -e '/Requires:/d' src/%{name}-1.0.pc.in
|
||||||
sed -i -e 's/-L${libdir}//' src/%{name}-1.0.pc.in
|
sed -i -e 's/-L${libdir}//' src/%{name}-1.0.pc.in
|
||||||
@ -122,7 +110,6 @@ make %{?_smp_mflags}
|
|||||||
make DESTDIR=%{buildroot} install %{?_smp_mflags}
|
make DESTDIR=%{buildroot} install %{?_smp_mflags}
|
||||||
find %{buildroot} -type f -name "*.la" -delete -print
|
find %{buildroot} -type f -name "*.la" -delete -print
|
||||||
rm -rf %{buildroot}/%{_libdir}/%{name}.*a*
|
rm -rf %{buildroot}/%{_libdir}/%{name}.*a*
|
||||||
%fdupes %{buildroot}%{_docdir}/%{name}-doc/html
|
|
||||||
|
|
||||||
%post -n %{name}%{soname} -p /sbin/ldconfig
|
%post -n %{name}%{soname} -p /sbin/ldconfig
|
||||||
|
|
||||||
@ -142,6 +129,7 @@ rm -rf %{buildroot}/%{_libdir}/%{name}.*a*
|
|||||||
|
|
||||||
%files -n imobiledevice-tools
|
%files -n imobiledevice-tools
|
||||||
%defattr(-,root,root)
|
%defattr(-,root,root)
|
||||||
|
%doc AUTHORS COPYING COPYING.LESSER NEWS README
|
||||||
%{_bindir}/idevice_id
|
%{_bindir}/idevice_id
|
||||||
%{_bindir}/idevicecrashreport
|
%{_bindir}/idevicecrashreport
|
||||||
%{_bindir}/idevicepair
|
%{_bindir}/idevicepair
|
||||||
@ -177,11 +165,6 @@ rm -rf %{buildroot}/%{_libdir}/%{name}.*a*
|
|||||||
%doc %{_mandir}/man1/ideviceprovision.1%{?ext_man}
|
%doc %{_mandir}/man1/ideviceprovision.1%{?ext_man}
|
||||||
%doc %{_mandir}/man1/idevicenotificationproxy.1%{?ext_man}
|
%doc %{_mandir}/man1/idevicenotificationproxy.1%{?ext_man}
|
||||||
|
|
||||||
%files doc
|
|
||||||
%defattr(-,root,root)
|
|
||||||
%doc AUTHORS COPYING COPYING.LESSER NEWS README
|
|
||||||
%doc docs/html
|
|
||||||
|
|
||||||
%files -n python-imobiledevice
|
%files -n python-imobiledevice
|
||||||
%defattr(-,root,root)
|
%defattr(-,root,root)
|
||||||
%{python_sitearch}/imobiledevice.so
|
%{python_sitearch}/imobiledevice.so
|
||||||
|
Loading…
x
Reference in New Issue
Block a user