SHA256
1
0
forked from pool/rsync

Accepting request 283799 from home:vitezslav_cizek:branches:network

- fix for CVE-2014-9512 (bnc#915410)
  * path spoofing attack vulnerability
  * added rsync-CVE-2014-9512.patch

OBS-URL: https://build.opensuse.org/request/show/283799
OBS-URL: https://build.opensuse.org/package/show/network/rsync?expand=0&rev=41
This commit is contained in:
Ismail Dönmez
2015-02-03 07:22:35 +00:00
committed by Git OBS Bridge
parent 38b865b3b6
commit 814aea5ad4
3 changed files with 114 additions and 1 deletions

View File

@@ -1,7 +1,7 @@
#
# spec file for package rsync
#
# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -42,6 +42,7 @@ Source10: http://rsync.samba.org/ftp/rsync/src/rsync-%{version}.tar.gz.asc
Source11: http://rsync.samba.org/ftp/rsync/src/rsync-patches-%{version}.tar.gz.asc
Source12: %{name}.keyring
Patch3: system-zlib.diff
Patch4: rsync-CVE-2014-9512.patch
BuildRequires: autoconf
BuildRequires: libacl-devel
BuildRequires: openslp-devel
@@ -79,6 +80,7 @@ for backups and mirroring and as an improved copy command for everyday use.
rm -f zlib/*.h
%patch3
%endif
%patch4 -p1
patch -p1 < patches/acls.diff
patch -p1 < patches/xattrs.diff
patch -p1 < patches/slp.diff