Hello community, here is the log from the commit of package python3-sleekxmpp for openSUSE:Factory checked in at 2017-03-12 20:02:44 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python3-sleekxmpp (Old) and /work/SRC/openSUSE:Factory/.python3-sleekxmpp.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python3-sleekxmpp" Sun Mar 12 20:02:44 2017 rev:3 rq:477501 version:1.3.1 Changes: -------- --- /work/SRC/openSUSE:Factory/python3-sleekxmpp/python3-sleekxmpp.changes 2017-01-25 23:24:18.306004417 +0100 +++ /work/SRC/openSUSE:Factory/.python3-sleekxmpp.new/python3-sleekxmpp.changes 2017-03-12 20:02:45.536293688 +0100 @@ -1,0 +2,6 @@ +Sat Feb 11 23:12:47 UTC 2017 - [email protected] + +- Add sleekxmpp-fix-carbons.patch by mathieui: Fix an issue with + carbons (slixmpp commit 22664ee) (CVE-2017-5589, bsc#1024690). + +------------------------------------------------------------------- New: ---- sleekxmpp-fix-carbons.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python3-sleekxmpp.spec ++++++ --- /var/tmp/diff_new_pack.NaEpxo/_old 2017-03-12 20:02:46.136208799 +0100 +++ /var/tmp/diff_new_pack.NaEpxo/_new 2017-03-12 20:02:46.136208799 +0100 @@ -1,7 +1,7 @@ # # spec file for package python3-sleekxmpp # -# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -31,6 +31,8 @@ Patch1: %{_name}-fix-legacyauth.patch # PATCH-FIX-OPENSUSE sleekxmpp-check-roster-push-origin.patch bsc#1014976 [email protected] -- Check origin of roster pushes (slixmpp commits ffdb6ff, ffd9436). Patch2: %{_name}-check-roster-push-origin.patch +# PATCH-FIX-OPENSUSE sleekxmpp-fix-carbons.patch bsc#1024690 [email protected] -- Fix an issue with carbons (slixmpp commit 22664ee). +Patch3: %{_name}-fix-carbons.patch BuildRequires: python3 BuildRequires: python3-dnspython BuildRequires: python3-xml @@ -48,6 +50,7 @@ %patch0 -p1 %patch1 -p1 %patch2 -p1 +%patch3 -p1 %build python3 setup.py build ++++++ sleekxmpp-fix-carbons.patch ++++++ --- a/sleekxmpp/plugins/xep_0280/carbons.py +++ b/sleekxmpp/plugins/xep_0280/carbons.py @@ -61,10 +61,12 @@ class XEP_0280(BasePlugin): self.xmpp.plugin['xep_0030'].add_feature('urn:xmpp:carbons:2') def _handle_carbon_received(self, msg): - self.xmpp.event('carbon_received', msg) + if msg['from'].bare == self.xmpp.boundjid.bare: + self.xmpp.event('carbon_received', msg) def _handle_carbon_sent(self, msg): - self.xmpp.event('carbon_sent', msg) + if msg['from'].bare == self.xmpp.boundjid.bare: + self.xmpp.event('carbon_sent', msg) def enable(self, ifrom=None, block=True, timeout=None, callback=None): iq = self.xmpp.Iq()
