RPM Package Manager, CVS Repository
  http://rpm5.org/cvs/
  ____________________________________________________________________________

  Server: rpm5.org                         Name:   Pinto Elia
  Root:   /v/rpm/cvs                       Email:  [email protected]
  Module: rpm                              Date:   20-May-2011 15:07:55
  Branch: rpm-5_4                          Handle: 2011052013075500

  Modified files:           (Branch: rpm-5_4)
    rpm                     CHANGES configure.ac

  Log:
    Resurrect openwall (owl) vendor detection
    
(http://cvsweb.openwall.com/cgi/cvsweb.cgi/~checkout~/Owl/packages/rpm/rpm-4.2-owl-vendor-setup.diff?rev=1.3;content-type=text%2Fplain)
    
    They are using rpm 4.2 with, apparently, the missing CVE-2010-2059 patch. 
This is strange enough
    i think http://www.openwall.com/lists/oss-security/2010/06/02/2.
    
    Submitted by: Elia Pinto

  Summary:
    Revision    Changes     Path
    1.3501.2.128+4  -0      rpm/CHANGES
    2.472.2.17  +1  -0      rpm/configure.ac
  ____________________________________________________________________________

  patch -p0 <<'@@ .'
  Index: rpm/CHANGES
  ============================================================================
  $ cvs diff -u -r1.3501.2.127 -r1.3501.2.128 CHANGES
  --- rpm/CHANGES       18 May 2011 13:34:34 -0000      1.3501.2.127
  +++ rpm/CHANGES       20 May 2011 13:07:55 -0000      1.3501.2.128
  @@ -1,4 +1,8 @@
   5.4.0 -> 5.4.1:
  +    - devzero2000: resurrect openwall (owl) vendor detection
  +      
(http://cvsweb.openwall.com/cgi/cvsweb.cgi/~checkout~/Owl/packages/rpm/rpm-4.2-owl-vendor-setup.diff?rev=1.3;content-type=text%2Fplain)
  +      They are using rpm 4.2 with, apparently, the missing CVE-2010-2059 
patch. This is strange enough
  +      i think http://www.openwall.com/lists/oss-security/2010/06/02/2.
       - devzero2000: Sort file list for debuginfo extraction. 
         (inspired by Robert Schiele 
http://lists.rpm.org/pipermail/rpm-list/2011-May/000894.html)
       - proyvind: update doxygen input filename paths.
  @@ .
  patch -p0 <<'@@ .'
  Index: rpm/configure.ac
  ============================================================================
  $ cvs diff -u -r2.472.2.16 -r2.472.2.17 configure.ac
  --- rpm/configure.ac  7 May 2011 23:29:11 -0000       2.472.2.16
  +++ rpm/configure.ac  20 May 2011 13:07:55 -0000      2.472.2.17
  @@ -1979,6 +1979,7 @@
   case "${target_vendor}" in
   
unknown|pc|ibm|redhat|pld|mandriva|conectiva|lvr|yellowdog|caos|crux|ark|momonga|openmamba)
        test -f /etc/momonga-release &&         RPMCANONVENDOR=momonga
  +        test -f /etc/owl-release -o -f /etc/owl-setup.conf -o -d /etc/mtree 
&& RPMCANONVENDOR=openwall
        test -f /etc/fedora-release &&          RPMCANONVENDOR=fedora
        test -f /etc/redhat-release &&          RPMCANONVENDOR=redhat
        test -f /etc/pld-release &&             RPMCANONVENDOR=pld
  @@ .
______________________________________________________________________
RPM Package Manager                                    http://rpm5.org
CVS Sources Repository                                [email protected]

Reply via email to