Hello community, here is the log from the commit of package screen for openSUSE:Factory checked in at 2017-03-15 01:05:49 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/screen (Old) and /work/SRC/openSUSE:Factory/.screen.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "screen" Wed Mar 15 01:05:49 2017 rev:50 rq:460505 version:4.5.1 Changes: -------- --- /work/SRC/openSUSE:Factory/screen/screen.changes 2017-02-08 12:11:23.196771957 +0100 +++ /work/SRC/openSUSE:Factory/.screen.new/screen.changes 2017-03-15 01:59:57.583177321 +0100 @@ -1,0 +2,10 @@ +Sat Feb 25 20:34:40 UTC 2017 - [email protected] + +- GNU Screen 4.5.1: + * logfile permissions problem (CVE-2017-5618) bsc#1021743 + This issues does not affect the SUSE package as setuid/setid + is not used. +- drop upstreamed fix_enable_logfile.patch +- add 0001-Follow-up-to-bc5ea98-fix-texinfo-syntax-errors.patch + +------------------------------------------------------------------- Old: ---- fix_enable_logfile.patch screen-4.5.0.tar.gz screen-4.5.0.tar.gz.sig New: ---- 0001-Follow-up-to-bc5ea98-fix-texinfo-syntax-errors.patch screen-4.5.1.tar.gz screen-4.5.1.tar.gz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ screen.spec ++++++ --- /var/tmp/diff_new_pack.W0dGSs/_old 2017-03-15 01:59:58.243084026 +0100 +++ /var/tmp/diff_new_pack.W0dGSs/_new 2017-03-15 01:59:58.247083460 +0100 @@ -19,39 +19,40 @@ %if 0%{?suse_version} > 1310 %define rundir /run %else -%define rundir /var/run +%define rundir %{_localstatedir}/run %endif - -Url: http://www.gnu.org/software/screen/ - Name: screen -%if 0%{?suse_version} > 1140 -BuildRequires: makeinfo -%endif -BuildRequires: ncurses-devel -%if 0%{?suse_version} > 1130 -BuildRequires: utempter-devel -%else -BuildRequires: utempter -%endif -BuildRequires: autoconf -BuildRequires: automake -BuildRequires: pam-devel -PreReq: %install_info_prereq -PreReq: coreutils -Version: 4.5.0 +Version: 4.5.1 Release: 0 Summary: A program to allow multiple screens on a VT100/ANSI Terminal License: GPL-3.0+ Group: System/Console +Url: http://www.gnu.org/software/screen/ Source: http://ftp.gnu.org/gnu/screen/%{name}-%{version}.tar.gz Source1: screen.conf Source2: http://ftp.gnu.org/gnu/screen/%{name}-%{version}.tar.gz.sig Source3: https://savannah.gnu.org/project/memberlist-gpgkeys.php?group=screen&download=1#/%{name}.keyring Patch0: global_screenrc.patch -Patch1: fix_enable_logfile.patch Patch6: libtinfo.diff +Patch7: 0001-Follow-up-to-bc5ea98-fix-texinfo-syntax-errors.patch +BuildRequires: autoconf +BuildRequires: automake +BuildRequires: ncurses-devel +BuildRequires: pam-devel +# FIXME: use proper Requires(pre/post/preun/...) +PreReq: %{install_info_prereq} +PreReq: coreutils +Requires(post): %{install_info_prereq} +Requires(preun): %{install_info_prereq} BuildRoot: %{_tmppath}/%{name}-%{version}-build +%if 0%{?suse_version} > 1140 +BuildRequires: makeinfo +%endif +%if 0%{?suse_version} > 1130 +BuildRequires: utempter-devel +%else +BuildRequires: utempter +%endif %description With this program you can take advantage of the multitasking abilities @@ -61,21 +62,20 @@ Documentation: man page %prep -%setup +%setup -q # global_screenrc.patch %patch0 -# PATCH-FEATURE-UPSTREAM fix_enable_logfile.patch -%patch1 # libtinfo.diff %patch6 +%patch7 -p2 %build sh ./autogen.sh -CFLAGS="-DMAXWIN=1000 $RPM_OPT_FLAGS" %configure --prefix=/usr --infodir=%{_infodir} \ +CFLAGS="-DMAXWIN=1000 %{optflags}" %configure --prefix=%{_prefix} --infodir=%{_infodir} \ --mandir=%{_mandir} \ - --with-socket-dir='(eff_uid ? "%rundir/uscreens" : "%rundir/screens")' \ - --with-sys-screenrc=/etc/screenrc \ + --with-socket-dir='(eff_uid ? "%{rundir}/uscreens" : "%{rundir}/screens")' \ + --with-sys-screenrc=%{_sysconfdir}/screenrc \ --with-pty-group=5 \ --enable-use-locale \ --enable-telnet \ @@ -86,48 +86,51 @@ # update Makefile so that make -j becomes reliable :> osdef.h # so that make depend has a chance :> comm.h # so that make depend has a chance -make depend # FIXME: this should be self sufficient. +make %{?_smp_mflags} depend # FIXME: this should be self sufficient. rm osdef.h # so that make will use osdef.sh rm comm.h # so that make will use comm.sh make %{?_smp_mflags} %install -make install DESTDIR=$RPM_BUILD_ROOT -rm -f $RPM_BUILD_ROOT/usr/bin/screen -mv $RPM_BUILD_ROOT/usr/bin/screen-%version $RPM_BUILD_ROOT/usr/bin/screen -chmod 755 $RPM_BUILD_ROOT/usr/bin/screen -mkdir -p $RPM_BUILD_ROOT/etc -mkdir -p $RPM_BUILD_ROOT/usr/lib -mkdir -p $RPM_BUILD_ROOT/usr/lib/tmpfiles.d -mkdir -p $RPM_BUILD_ROOT%rundir/screens -chmod 755 $RPM_BUILD_ROOT%rundir/screens -mkdir -p $RPM_BUILD_ROOT%rundir/uscreens -chmod 1777 $RPM_BUILD_ROOT%rundir/uscreens -install -m 644 screenrc $RPM_BUILD_ROOT/etc/screenrc -install -m 644 %SOURCE1 $RPM_BUILD_ROOT/usr/lib/tmpfiles.d +%make_install +rm -f %{buildroot}%{_bindir}/screen +mv %{buildroot}%{_bindir}/screen-%{version} %{buildroot}%{_bindir}/screen +chmod 755 %{buildroot}%{_bindir}/screen +mkdir -p %{buildroot}/etc +mkdir -p %{buildroot}%{_prefix}/lib +mkdir -p %{buildroot}%{_prefix}/lib/tmpfiles.d +mkdir -p %{buildroot}%{rundir}/screens +chmod 755 %{buildroot}%{rundir}/screens +mkdir -p %{buildroot}%{rundir}/uscreens +chmod 1777 %{buildroot}%{rundir}/uscreens +install -m 644 screenrc %{buildroot}%{_sysconfdir}/screenrc +install -m 644 %{SOURCE1} %{buildroot}%{_prefix}/lib/tmpfiles.d %files %defattr(-,root,root) -%config /etc/screenrc -%attr(555,root,root) /usr/bin/screen -%dir /usr/share/screen -%dir /usr/lib/tmpfiles.d -/usr/lib/tmpfiles.d/screen.conf -/usr/share/screen/utf8encodings +%config %{_sysconfdir}/screenrc +%attr(555,root,root) %{_bindir}/screen +%dir %{_datadir}/screen +%dir %{_prefix}/lib/tmpfiles.d +%{_prefix}/lib/tmpfiles.d/screen.conf +%{_datadir}/screen/utf8encodings # Created via aaa_base or systemd on system boot -%ghost %dir %rundir/screens -%ghost %dir %rundir/uscreens -%doc %{_infodir}/screen.info*.gz -%doc %{_mandir}/man1/screen.1.gz +%ghost %dir %{rundir}/screens +%ghost %dir %{rundir}/uscreens +%{_infodir}/screen.info*%{ext_info} +%{_mandir}/man1/screen.1%{ext_man} %doc COPYING %post %install_info --info-dir=%{_infodir} %{_infodir}/%{name}.info.gz +%preun +%install_info_delete --info-dir=%{_infodir} %{_infodir}/%{name}.info.gz + # Create our dirs immediatly, after a manual package install. # After a reboot systemd/aaa_base will take care. -test -d %rundir/screens || mkdir -m 755 %rundir/screens -test -d %rundir/uscreens || mkdir -m 1777 %rundir/uscreens +test -d %{rundir}/screens || mkdir -m 755 %{rundir}/screens +test -d %{rundir}/uscreens || mkdir -m 1777 %{rundir}/uscreens %changelog ++++++ 0001-Follow-up-to-bc5ea98-fix-texinfo-syntax-errors.patch ++++++ >From 675b877d4f21a8ff3bcb91afb19277bf6c2c0cda Mon Sep 17 00:00:00 2001 From: Andreas Stieger <[email protected]> Date: Sat, 25 Feb 2017 21:30:59 +0100 Subject: [PATCH] Follow-up to bc5ea98, fix texinfo syntax errors --- src/doc/screen.texinfo | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/doc/screen.texinfo b/src/doc/screen.texinfo index bc4cbae..aadad33 100644 --- a/src/doc/screen.texinfo +++ b/src/doc/screen.texinfo @@ -5795,7 +5795,7 @@ and Alexander Naumov <alexander_naumov@@opensuse.org>. Contributors @* ============ -@example +@verbatim Thomas Renninger <[email protected]>, Axel Beckert <[email protected]>, Ken Beal <kbeal@@amber.ssd.csd.harris.com>, @@ -5826,7 +5826,7 @@ Contributors @* Jason Merrill <jason@@jarthur.Claremont.EDU>, Johannes Zellner <johannes@@zellner.org>, Pablo Averbuj <pablo@@averbuj.com>. -@end example +@end verbatim @noindent Version @* -- 2.12.0 ++++++ screen-4.5.0.tar.gz -> screen-4.5.1.tar.gz ++++++ ++++ 2596 lines of diff (skipped) ++++++ screen.keyring ++++++ Binary files /var/tmp/diff_new_pack.W0dGSs/_old and /var/tmp/diff_new_pack.W0dGSs/_new differ
