Hello community,

here is the log from the commit of package LibVNCServer for openSUSE:Factory 
checked in at 2014-12-17 19:19:27
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/LibVNCServer (Old)
 and      /work/SRC/openSUSE:Factory/.LibVNCServer.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "LibVNCServer"

Changes:
--------
--- /work/SRC/openSUSE:Factory/LibVNCServer/LibVNCServer.changes        
2014-10-06 12:06:09.000000000 +0200
+++ /work/SRC/openSUSE:Factory/.LibVNCServer.new/LibVNCServer.changes   
2014-12-17 19:18:24.000000000 +0100
@@ -1,0 +2,29 @@
+Sat Dec 13 13:50:35 UTC 2014 - [email protected]
+
+- Update to version 0.9.10
+  + Moved the whole project from sourceforge to https://libvnc.github.io/.
+  + Cleaned out the autotools build system which now uses autoreconf.
+  + Updated noVNC HTML5 client to latest version.
+  + Split out x11vnc sources into separate repository at
+    https://github.com/LibVNC/x11vnc
+  + Split out vncterm sources into separate repository at
+    https://github.com/LibVNC/vncterm
+  + Split out VisualNaCro sources into separate repository at
+    https://github.com/LibVNC/VisualNaCro
+  + Merged Debian patches.
+  + Fixed some security-related buffer overflow cases.
+  + Added compatibility headers to make LibVNCServer/LibVNCClient
+    build on native Windows 8.
+  + Update LZO to version 2.07, fixing CVE-2014-4607.
+  + Merged patches from KDE/krfb.
+  + Can now do IPv6 without IPv4.
+  + Fixed a use-after-free issue in scale.c.
+- Update Url and download source to new project home
+- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
+  out of main tarball
+- Rebase libvncserver-ossl.patch to upstream changes
+  > libvncserver-0.9.10-ossl.patch
+- Remove linuxvnc subpackage; like x11vnc, it has been splited out
+  but is depreciated and unmaintained. 
+
+-------------------------------------------------------------------

Old:
----
  LibVNCServer-0.9.9-no_x11vnc.patch
  LibVNCServer-0.9.9.tar.gz
  libvncserver-ossl.patch

New:
----
  libvncserver-0.9.10-ossl.patch
  libvncserver-LibVNCServer-0.9.10.tar.gz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ LibVNCServer.spec ++++++
--- /var/tmp/diff_new_pack.nymF6C/_old  2014-12-17 19:18:26.000000000 +0100
+++ /var/tmp/diff_new_pack.nymF6C/_new  2014-12-17 19:18:26.000000000 +0100
@@ -17,23 +17,23 @@
 
 
 Name:           LibVNCServer
-Version:        0.9.9
+Version:        0.9.10
 Release:        0
 Summary:        VNC Development Library
 License:        GPL-2.0+
 Group:          Development/Libraries/X11
-Url:            http://sourceforge.net/projects/libvncserver
-Source0:        
http://downloads.sourceforge.net/project/libvncserver/libvncserver/%{version}/%{name}-%{version}.tar.gz
+Url:            https://github.com/LibVNC/libvncserver
+# Archive is renamed by github
+#Source0:        
https://github.com/LibVNC/libvncserver/archive/%{name}-%{version}.tar.gz
+Source0:        libvncserver-%{name}-%{version}.tar.gz
 Source1:        baselibs.conf
 #PATCH-FIX-OPENSUSE: multilib support
 Patch1:         libvncserver-0.9.1-multilib.patch
 #PATCH-FIX-OPENSUSE: redefine keysyms only if needed
 Patch7:         redef-keysym.patch
-#PATCH-FIX-OPENSUSE: disable x11vnc build
-Patch10:        LibVNCServer-0.9.9-no_x11vnc.patch
 #PATCH_FIX-OPENSUSE: Use system fast byteswap routines.
 Patch11:        libvncserver-byteswap.patch
-Patch12:        libvncserver-ossl.patch
+Patch12:        libvncserver-%{version}-ossl.patch
 BuildRequires:  libavahi-devel
 BuildRequires:  libgcrypt-devel
 BuildRequires:  libjpeg-devel
@@ -58,20 +58,10 @@
 real running X11 server) has been split off into its own package on
 2007-07-16.
 
-%package -n linuxvnc
-Summary:        A sample VNC server which exports /dev/vcsaN over RFB
-Group:          Productivity/Networking/Remote Desktop
-# O/P added for 12.3
-Obsoletes:      LibVNCServer < %version-%release
-Provides:       LibVNCServer = %version-%release
-
-%description -n linuxvnc
-LinuxVNC monitors a virtual console (text mode) of Linux by reading
-/dev/vcsaN, and makes it available via RFB.
-
 %package -n libvncclient0
 Summary:        Library implementing a VNC client
 Group:          System/Libraries
+Obsoletes:      linuxvnc < %{version}
 Conflicts:      LibVNCServer < %version
 
 %description -n libvncclient0
@@ -108,11 +98,10 @@
 files for LibVNCServer.
 
 %prep
-%setup -q
+%setup -q -n libvncserver-%{name}-%{version}
 %patch1 -p1 -b .multilib
 #%patch2 -p1 -b .system_minilzo
 %patch7 -p1
-%patch10 -p1 -b .no_x11vnc
 # aclocal; autoheader; automake --add-missing --copy; autoconf
 # ./configure --enable-maintainer-mode
 # sh ./autogen.sh
@@ -133,6 +122,7 @@
 
 %build
 CFLAGS="$RPM_OPT_FLAGS -D_GNU_SOURCE -D_REENTRANT" \
+NOCONFIGURE=1 ./autogen.sh
 
 # Plase note that tightvn cause a problem; need to be fix
 %configure --disable-static --with-pic --enable-shared --with-gnu-ld 
--without-tightvnc-filetransfer
@@ -154,17 +144,14 @@
 %post   -n libvncserver0 -p /sbin/ldconfig
 %postun -n libvncserver0 -p /sbin/ldconfig
 
-%files -n linuxvnc
-%defattr(-,root,root)
-%doc COPYING vncterm/README
-%{_bindir}/linuxvnc
-
 %files -n libvncserver0
 %defattr(-,root,root)
+%doc COPYING README
 %_libdir/libvncserver.so.0*
 
 %files -n libvncclient0
 %defattr(-,root,root)
+%doc COPYING README
 %_libdir/libvncclient.so.0*
 
 %files devel

++++++ libvncserver-0.9.10-ossl.patch ++++++
--- libvncclient/tls_openssl.c.orig
+++ libvncclient/tls_openssl.c
@@ -18,9 +18,11 @@
  *  USA.
  */
 
+#include "rfbconfig.h"
 #include <rfb/rfbclient.h>
 #include <errno.h>
-
+#define OPENSSL_LOAD_CONF
+#define OPENSSL_NO_SSL_INTERN
 #include <openssl/err.h>
 #include <openssl/ssl.h>
 #include <openssl/x509.h>
@@ -185,7 +187,7 @@
 
   ssl = X509_STORE_CTX_get_ex_data (ctx, SSL_get_ex_data_X509_STORE_CTX_idx 
());
 
-  client = SSL_CTX_get_app_data (ssl->ctx);
+  client = SSL_CTX_get_app_data (SSL_get_SSL_CTX(ssl));
 
   cert = X509_STORE_CTX_get_current_cert (ctx);
   err = X509_STORE_CTX_get_error (ctx);
@@ -265,6 +267,10 @@
   int n, finished = 0;
 
   ssl_ctx = SSL_CTX_new (SSLv23_client_method ());
+#ifdef SSL_MODE_RELEASE_BUFFERS
+  SSL_CTX_set_mode(ssl_ctx, SSL_MODE_RELEASE_BUFFERS);
+#endif
+  SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL | SSL_OP_NO_SSLv2);
   SSL_CTX_set_default_verify_paths (ssl_ctx);
   SSL_CTX_set_verify (ssl_ctx, SSL_VERIFY_NONE, &ssl_verify);
   ssl = SSL_new (ssl_ctx);
@@ -284,8 +290,8 @@
       if (wait_for_data(ssl, n, 1) != 1) 
       {
         finished = 1; 
-        if (ssl->ctx)
-          SSL_CTX_free (ssl->ctx);
+       if (SSL_get_SSL_CTX(ssl))
+          SSL_CTX_free (SSL_get_SSL_CTX(ssl));
         SSL_free(ssl);
         SSL_shutdown (ssl);
 
--- libvncserver/rfbssl_openssl.c.orig
+++ libvncserver/rfbssl_openssl.c
@@ -21,7 +21,10 @@
  *  USA.
  */
 
+#include "rfbconfig.h"
 #include "rfbssl.h"
+#define OPENSSL_LOAD_CONF
+#define OPENSSL_NO_SSL_INTERN
 #include <openssl/ssl.h>
 #include <openssl/err.h>
 
-- 
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to