Hello community, here is the log from the commit of package python-sleekxmpp for openSUSE:Factory checked in at 2017-03-24 02:08:31 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-sleekxmpp (Old) and /work/SRC/openSUSE:Factory/.python-sleekxmpp.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-sleekxmpp" Fri Mar 24 02:08:31 2017 rev:3 rq:456805 version:1.3.1 Changes: -------- --- /work/SRC/openSUSE:Factory/python-sleekxmpp/python-sleekxmpp.changes 2017-01-10 10:47:56.453655607 +0100 +++ /work/SRC/openSUSE:Factory/.python-sleekxmpp.new/python-sleekxmpp.changes 2017-03-24 02:08:32.339415154 +0100 @@ -1,0 +2,6 @@ +Sat Feb 11 23:12:47 UTC 2017 - [email protected] + +- Add sleekxmpp-fix-carbons.patch by mathieui: Fix an issue with + carbons (slixmpp commit 22664ee) (CVE-2017-5589, bsc#1024690). + +------------------------------------------------------------------- New: ---- sleekxmpp-fix-carbons.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-sleekxmpp.spec ++++++ --- /var/tmp/diff_new_pack.J0rTC7/_old 2017-03-24 02:08:33.059313243 +0100 +++ /var/tmp/diff_new_pack.J0rTC7/_new 2017-03-24 02:08:33.059313243 +0100 @@ -1,7 +1,7 @@ # # spec file for package python-sleekxmpp # -# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -27,6 +27,8 @@ Source: https://files.pythonhosted.org/packages/source/s/%{_name}/%{_name}-%{version}.tar.gz # PATCH-FIX-OPENSUSE sleekxmpp-check-roster-push-origin.patch bsc#1014976 [email protected] -- Check origin of roster pushes (slixmpp commits ffdb6ff, ffd9436). Patch0: %{_name}-check-roster-push-origin.patch +# PATCH-FIX-OPENSUSE sleekxmpp-fix-carbons.patch bsc#1024690 [email protected] -- Fix an issue with carbons (slixmpp commit 22664ee). +Patch1: %{_name}-fix-carbons.patch BuildRequires: python BuildRequires: python-dnspython BuildRequires: python-xml @@ -42,6 +44,7 @@ %prep %setup -q -n %{_name}-%{version} %patch0 -p1 +%patch1 -p1 %build python2 setup.py build ++++++ sleekxmpp-fix-carbons.patch ++++++ --- a/sleekxmpp/plugins/xep_0280/carbons.py +++ b/sleekxmpp/plugins/xep_0280/carbons.py @@ -61,10 +61,12 @@ class XEP_0280(BasePlugin): self.xmpp.plugin['xep_0030'].add_feature('urn:xmpp:carbons:2') def _handle_carbon_received(self, msg): - self.xmpp.event('carbon_received', msg) + if msg['from'].bare == self.xmpp.boundjid.bare: + self.xmpp.event('carbon_received', msg) def _handle_carbon_sent(self, msg): - self.xmpp.event('carbon_sent', msg) + if msg['from'].bare == self.xmpp.boundjid.bare: + self.xmpp.event('carbon_sent', msg) def enable(self, ifrom=None, block=True, timeout=None, callback=None): iq = self.xmpp.Iq()
