Hello community, here is the log from the commit of package yast2-core for openSUSE:11.4 checked in at Mon Aug 22 16:38:47 CEST 2011.
-------- --- old-versions/11.4/all/yast2-core/yast2-core.changes 2011-01-03 22:28:56.000000000 +0100 +++ 11.4/yast2-core/yast2-core.changes 2011-08-18 14:11:51.000000000 +0200 @@ -1,0 +2,7 @@ +Thu Aug 18 12:40:23 CEST 2011 - [email protected] + +- change blowfish id from 2a to 2y (bnc#700876 bnc#706705 CVE-2011-2483) + (thanks to Ludwig Nussel) +- 2.20.1 + +------------------------------------------------------------------- Package does not exist at destination yet. Using Fallback old-versions/11.4/all/yast2-core Destination is old-versions/11.4/UPDATES/all/yast2-core calling whatdependson for 11.4-i586 Old: ---- yast2-core-2.20.0.tar.bz2 New: ---- yast2-core-2.20.1.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ yast2-core.spec ++++++ --- /var/tmp/diff_new_pack.dHziCX/_old 2011-08-22 16:38:10.000000000 +0200 +++ /var/tmp/diff_new_pack.dHziCX/_new 2011-08-22 16:38:10.000000000 +0200 @@ -1,5 +1,5 @@ # -# spec file for package yast2-core (Version 2.20.0) +# spec file for package yast2-core # # Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. # @@ -19,16 +19,16 @@ Name: yast2-core -Version: 2.20.0 -Release: 1 +Version: 2.20.1 +Release: 0.<RELEASE2> BuildRoot: %{_tmppath}/%{name}-%{version}-build -Source0: yast2-core-2.20.0.tar.bz2 +Source0: yast2-core-2.20.1.tar.bz2 Prefix: /usr Group: System/YaST -License: GPLv2+ +License: GPL v2 or later # obviously BuildRequires: boost-devel gcc-c++ # we have a parser @@ -59,7 +59,7 @@ library for the YCP scripting language used in YaST2. %package devel -License: GPLv2+ + Requires: yast2-core = %version Group: Development/Libraries Summary: YaST2 - Core Libraries @@ -77,7 +77,7 @@ applications using the YaST2 YCP interpreter. %prep -%setup -n yast2-core-2.20.0 +%setup -n yast2-core-2.20.1 %build ++++++ yast2-core-2.20.0.tar.bz2 -> yast2-core-2.20.1.tar.bz2 ++++++ ++++ 2202 lines of diff (skipped) ++++ retrying with extended exclude list diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/yast2-core-2.20.0/VERSION new/yast2-core-2.20.1/VERSION --- old/yast2-core-2.20.0/VERSION 2011-01-03 21:54:03.000000000 +0100 +++ new/yast2-core-2.20.1/VERSION 2011-08-18 13:38:10.000000000 +0200 @@ -1 +1 @@ -2.20.0 +2.20.1 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/yast2-core-2.20.0/agents-perl/doc/ycp-pm-pod.html new/yast2-core-2.20.1/agents-perl/doc/ycp-pm-pod.html --- old/yast2-core-2.20.0/agents-perl/doc/ycp-pm-pod.html 2009-08-14 17:47:25.000000000 +0200 +++ new/yast2-core-2.20.1/agents-perl/doc/ycp-pm-pod.html 2011-08-18 13:39:07.000000000 +0200 @@ -4,7 +4,7 @@ <head> <title>ycp - a Perl module for parsing and writing the YaST2 Communication Protocol</title> <meta http-equiv="content-type" content="text/html; charset=utf-8" /> -<link rev="made" href="mailto:[email protected]"; /> +<link rev="made" href="mailto:none"; /> </head> <body style="background-color: white"> @@ -104,36 +104,31 @@ <p>A PerlYCPValue cannot represent a term but only a term is allowed to initialize an agent in a .scr file. Therefore <a href="#parseterm">ParseTerm</a> is provided.</p> <dl> -<dt><strong><a name="string_integer_boolean" class="item">string, integer, boolean</a></strong> +<dt><strong><a name="string_integer_boolean" class="item">string, integer, boolean</a></strong></dt> <dd> <p>Stored as a scalar.</p> </dd> -</li> -<dt><strong><a name="list" class="item">list</a></strong> +<dt><strong><a name="list" class="item">list</a></strong></dt> <dd> <p>Stored as a reference to a list of PerlYCPValues.</p> </dd> -</li> -<dt><strong><a name="map" class="item">map</a></strong> +<dt><strong><a name="map" class="item">map</a></strong></dt> <dd> <p>Stored as a reference to a map of PerlYCPValues.</p> </dd> -</li> -<dt><strong><a name="path" class="item">path</a></strong> +<dt><strong><a name="path" class="item">path</a></strong></dt> <dd> <p>Stored as a reference to a string (starting with a "." as expected).</p> </dd> -</li> -<dt><strong><a name="nil" class="item">nil (void)</a></strong> +<dt><strong><a name="nil" class="item">nil (void)</a></strong></dt> <dd> <p>Stored as an undef.</p> </dd> -</li> </dl> <p> </p> diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/yast2-core-2.20.0/config.h.in new/yast2-core-2.20.1/config.h.in --- old/yast2-core-2.20.0/config.h.in 2011-01-03 22:17:05.000000000 +0100 +++ new/yast2-core-2.20.1/config.h.in 2011-08-18 13:38:25.000000000 +0200 @@ -93,3 +93,6 @@ /* Define for large files, on AIX-style hosts. */ #undef _LARGE_FILES + +/* Define to `unsigned int' if <sys/types.h> does not define. */ +#undef size_t diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/yast2-core-2.20.0/configure.in new/yast2-core-2.20.1/configure.in --- old/yast2-core-2.20.0/configure.in 2011-01-03 22:16:49.000000000 +0100 +++ new/yast2-core-2.20.1/configure.in 2011-08-18 13:38:11.000000000 +0200 @@ -3,7 +3,7 @@ dnl -- This file is generated by y2autoconf 2.18.11 - DO NOT EDIT! -- dnl (edit configure.in.in instead) -AC_INIT(yast2-core, 2.20.0, http://bugs.opensuse.org/, yast2-core) +AC_INIT(yast2-core, 2.20.1, http://bugs.opensuse.org/, yast2-core) dnl Check for presence of file 'RPMNAME' AC_CONFIG_SRCDIR([RPMNAME]) @@ -18,7 +18,7 @@ AM_INIT_AUTOMAKE(tar-ustar -Wno-portability) dnl Important YaST2 variables -VERSION="2.20.0" +VERSION="2.20.1" RPMNAME="yast2-core" MAINTAINER="Martin Vidner <[email protected]>" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/yast2-core-2.20.0/libtool.m4 new/yast2-core-2.20.1/libtool.m4 --- old/yast2-core-2.20.0/libtool.m4 2011-01-03 22:16:56.000000000 +0100 +++ new/yast2-core-2.20.1/libtool.m4 2011-08-18 13:38:18.000000000 +0200 @@ -1020,7 +1020,7 @@ # to the aix ld manual. m4_defun([_LT_SYS_MODULE_PATH_AIX], [m4_require([_LT_DECL_SED])dnl -AC_LINK_IFELSE(AC_LANG_PROGRAM,[ +AC_LINK_IFELSE([AC_LANG_PROGRAM],[ lt_aix_libpath_sed=' /Import File Strings/,/^$/ { /^0/ { @@ -4825,9 +4825,18 @@ # implicitly export all symbols. save_LDFLAGS="$LDFLAGS" LDFLAGS="$LDFLAGS -shared ${wl}-exported_symbol ${wl}foo ${wl}-update_registry ${wl}/dev/null" - AC_LINK_IFELSE(int foo(void) {}, + AC_LINK_IFELSE( + [AC_LANG_SOURCE( + [AC_LANG_CASE([C], [[int foo (void) { return 0; }]], + [C++], [[int foo (void) { return 0; }]], + [Fortran 77], [[ + subroutine foo + end]], + [Fortran], [[ + subroutine foo + end]])])], [ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags ${wl}-soname ${wl}$soname `test -n "$verstring" && $ECHO "X${wl}-set_version ${wl}$verstring" | $Xsed` ${wl}-update_registry ${wl}${output_objdir}/so_locations ${wl}-exports_file ${wl}$export_symbols -o $lib' - ) + ]) LDFLAGS="$save_LDFLAGS" else _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && $ECHO "X-set_version $verstring" | $Xsed` -update_registry ${output_objdir}/so_locations -o $lib' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/yast2-core-2.20.0/libycp/src/y2crypt.cc new/yast2-core-2.20.1/libycp/src/y2crypt.cc --- old/yast2-core-2.20.0/libycp/src/y2crypt.cc 2009-04-10 09:49:52.000000000 +0200 +++ new/yast2-core-2.20.1/libycp/src/y2crypt.cc 2011-08-18 13:38:06.000000000 +0200 @@ -141,7 +141,7 @@ break; case BLOWFISH: - salt = make_crypt_salt ("$2a$", 0); + salt = make_crypt_salt ("$2y$", 0); if (!salt) { y2error ("Cannot create salt for blowfish crypt"); @@ -156,7 +156,9 @@ return false; } - if (!newencrypted) + if (!newencrypted + /* catch retval magic by ow-crypt/libxcrypt */ + || !strcmp(newencrypted, "*0") || !strcmp(newencrypted, "*1")) { y2error ("crypt_r () returns 0 pointer"); return false; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/yast2-core-2.20.0/ltversion.m4 new/yast2-core-2.20.1/ltversion.m4 --- old/yast2-core-2.20.0/ltversion.m4 2011-01-03 22:16:57.000000000 +0100 +++ new/yast2-core-2.20.1/ltversion.m4 2011-08-18 13:38:18.000000000 +0200 @@ -9,15 +9,15 @@ # Generated from ltversion.in. -# serial 3017 ltversion.m4 +# serial 3018 ltversion.m4 # This file is part of GNU Libtool m4_define([LT_PACKAGE_VERSION], [2.2.6b]) -m4_define([LT_PACKAGE_REVISION], [1.3017]) +m4_define([LT_PACKAGE_REVISION], [1.3018]) AC_DEFUN([LTVERSION_VERSION], [macro_version='2.2.6b' -macro_revision='1.3017' +macro_revision='1.3018' _LT_DECL(, macro_version, 0, [Which release of libtool.m4 was used?]) _LT_DECL(, macro_revision, 0) ]) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
