Hello community,
here is the log from the commit of package moonlight for openSUSE:11.4
checked in at Thu Apr 7 00:19:48 CEST 2011.
--------
--- old-versions/11.4/all/moonlight/moonlight.changes 2011-02-22
23:26:40.000000000 +0100
+++ 11.4/moonlight/moonlight.changes 2011-04-06 20:21:58.000000000 +0200
@@ -1,0 +2,9 @@
+Wed Apr 6 17:53:28 UTC 2011 - ajorgen...@novell.com
+
+- Update to Moonlight 2.4.1 for bnc#667077
+ CVE-2011-0989: modification of read-only values via
RuntimeHelpers.InitializeArray
+ CVE-2011-0990: buffer overflow due to race condition in in Array.FastCopy
+ CVE-2011-0991: use-after-free due to DynamicMethod resurrection
+ CVE-2011-0992: information leak due to improper thread finalization
+
+-------------------------------------------------------------------
Package does not exist at destination yet. Using Fallback
old-versions/11.4/all/moonlight
Destination is old-versions/11.4/UPDATES/all/moonlight
calling whatdependson for 11.4-i586
Old:
----
moonlight-2.4.tar.bz2
New:
----
moonlight-2.4.1.tar.bz2
non-desktop.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ moonlight.spec ++++++
--- /var/tmp/diff_new_pack.UhMp96/_old 2011-04-07 00:19:19.000000000 +0200
+++ /var/tmp/diff_new_pack.UhMp96/_new 2011-04-07 00:19:19.000000000 +0200
@@ -30,17 +30,17 @@
%endif
# The version we must have on the system to build the plugin
-%define required_mono 2.6
+%define required_mono 2.0
# If the system mono is older we must disable the desktop parts
# because there will be problems with libmono.so
%define with_desktop yes
%define desktop_support --enable-desktop-support --enable-sdk
# Comment this section out if you know you have mono >= required_mono
-#if 0%{?suse_version} < 1120
-#define with_desktop no
-#define desktop_support --disable-desktop-support --disable-sdk
-#endif
+%if 0%{?suse_version} < 1120
+%define with_desktop no
+%define desktop_support --disable-desktop-support --disable-sdk
+%endif
# The version included with the sources (for the plugin assemblies)
%define included_mono 2.6.1
@@ -55,13 +55,14 @@
Group: Productivity/Multimedia/Other
Summary: Novell Moonlight
Url: http://go-mono.com/moonlight/
-Version: 2.4
-Release: 1.<RELEASE2>
+Version: 2.4.1
+Release: 0.<RELEASE2>
BuildRoot: %{_tmppath}/%{name}-%{version}-build
Source0: %{name}-%{version}.tar.bz2
Source1: mono-%{included_mono}.tar.bz2
Source2: mono-basic-%{included_basic}.tar.bz2
-Patch0: %{name}-2.4-underlinking.patch
+Patch0: moonlight-2.4-underlinking.patch
+Patch1: non-desktop.patch
# Required to build the included mono
BuildRequires: bison
# Always required
@@ -322,6 +323,7 @@
%setup -q -T -D -b 1 -n %{name}-%{version}
%setup -q -T -D -b 2 -n %{name}-%{version}
%patch0
+%patch1 -p1
%build
# The plugin requires a complete build of it's own mono
++++++ mono-2.6.1.tar.bz2 ++++++
old-versions/11.4/all/moonlight/mono-2.6.1.tar.bz2
11.4/moonlight/mono-2.6.1.tar.bz2 differ: char 11, line 1
++++++ moonlight-2.4.tar.bz2 -> moonlight-2.4.1.tar.bz2 ++++++
old-versions/11.4/all/moonlight/moonlight-2.4.tar.bz2
11.4/moonlight/moonlight-2.4.1.tar.bz2 differ: char 11, line 1
++++++ non-desktop.patch ++++++
Index: moonlight-2.4.1/tools/Makefile.am
===================================================================
--- moonlight-2.4.1.orig/tools/Makefile.am
+++ moonlight-2.4.1/tools/Makefile.am
@@ -1,7 +1,11 @@
SUBDIRS = mopen generators
if INCLUDE_MANAGED_CODE
#don't include respack because the toplevel includes that already
-SUBDIRS += xamlg xaml2html mxap munxap unsign sockpol
+SUBDIRS += xamlg xaml2html mxap unsign sockpol
+endif
+
+if INCLUDE_DESKTOP_MANAGED_CODE
+SUBDIRS += munxap
endif
DIST_SUBDIRS = $(SUBDIRS) moonvisi respack # added as dist_subdir so as not
to break make dist
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Remember to have fun...
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
