commit icecast for openSUSE:Factory
Hello community,
here is the log from the commit of package icecast for openSUSE:Factory checked
in at 2018-11-10 16:59:06
Comparing /work/SRC/openSUSE:Factory/icecast (Old)
and /work/SRC/openSUSE:Factory/.icecast.new (New)
Package is "icecast"
Sat Nov 10 16:59:06 2018 rev:33 rq:646072 version:2.4.4
Changes:
--- /work/SRC/openSUSE:Factory/icecast/icecast.changes 2017-12-19
10:58:09.114322347 +0100
+++ /work/SRC/openSUSE:Factory/.icecast.new/icecast.changes 2018-11-10
17:01:17.555613183 +0100
@@ -1,0 +2,15 @@
+Fri Nov 2 11:55:28 CET 2018 - ti...@suse.de
+
+- update to version 2.4.4:
+ * Fix buffer overflows in URL auth code (CVE-2018-18820,
+bsc#1114434)
+ * Worked around buffer overflows in URL auth’s cURL interface
+ * Do not report hashed user passworts in user list
+ * Fixed segfault in htpasswd auth if no filename is set
+ * Fixed a segfault when xsltApplyStylesheet() returns error
+ * Do not segfault on malformed Opus streams
+ * Global listener count could be negative under certain
+circumstances
+ * Added code to announce Opus streams as such towards yp servers
+
+---
Old:
icecast-2.4.3.tar.gz
New:
icecast-2.4.4.tar.gz
Other differences:
--
++ icecast.spec ++
--- /var/tmp/diff_new_pack.VHX1xY/_old 2018-11-10 17:01:18.507612019 +0100
+++ /var/tmp/diff_new_pack.VHX1xY/_new 2018-11-10 17:01:18.507612019 +0100
@@ -1,7 +1,7 @@
#
# spec file for package icecast
#
-# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -12,15 +12,15 @@
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
-# Please submit bugfixes or comments via http://bugs.opensuse.org/
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
Name: icecast
-Version:2.4.3
+Version:2.4.4
Release:0
Summary:Audio Streaming Server
-License:GPL-2.0+
+License:GPL-2.0-or-later
Group: Productivity/Networking/Web/Servers
Url:http://www.icecast.org/
Source:
http://downloads.xiph.org/releases/icecast/icecast-%{version}.tar.gz
++ icecast-2.4.3.tar.gz -> icecast-2.4.4.tar.gz ++
44739 lines of diff (skipped)
++ icecast-fix-no-add-needed.patch ++
--- /var/tmp/diff_new_pack.VHX1xY/_old 2018-11-10 17:01:18.755611717 +0100
+++ /var/tmp/diff_new_pack.VHX1xY/_new 2018-11-10 17:01:18.755611717 +0100
@@ -5,7 +5,7 @@
--- a/configure.in
+++ b/configure.in
@@ -1,6 +1,7 @@
- AC_INIT([Icecast], [2.4.3], [icec...@xiph.org])
+ AC_INIT([Icecast], [2.4.4], [icec...@xiph.org])
AC_PREREQ(2.54)
+AC_CONFIG_MACRO_DIR([m4])
commit icecast for openSUSE:Factory
Hello community,
here is the log from the commit of package icecast for openSUSE:Factory checked
in at 2017-12-19 10:58:02
Comparing /work/SRC/openSUSE:Factory/icecast (Old)
and /work/SRC/openSUSE:Factory/.icecast.new (New)
Package is "icecast"
Tue Dec 19 10:58:02 2017 rev:32 rq:557844 version:2.4.3
Changes:
--- /work/SRC/openSUSE:Factory/icecast/icecast.changes 2015-04-10
09:53:18.0 +0200
+++ /work/SRC/openSUSE:Factory/.icecast.new/icecast.changes 2017-12-19
10:58:09.114322347 +0100
@@ -1,0 +2,13 @@
+Sun Dec 17 16:25:42 UTC 2017 - avin...@opensuse.org
+
+- update to version 2.4.3:
+ * Fixes Windows only vulnerability (CVE-2005-0837), where an
+attacker could access the raw XSLT template file by appending a
+dot “.” to the URL. To be clear, no runtime information could be
+accessed this way.
+- cleanup spec file with spec-cleaner
+- fix bad line endings warning in CSS file
+- rebase icecast-fix-no-add-needed.patch
+- replace PreReq statements with Requires(pre)
+
+---
Old:
icecast-2.4.2.tar.gz
New:
icecast-2.4.3.tar.gz
Other differences:
--
++ icecast.spec ++
--- /var/tmp/diff_new_pack.mjx73Z/_old 2017-12-19 10:58:09.842287205 +0100
+++ /var/tmp/diff_new_pack.mjx73Z/_new 2017-12-19 10:58:09.842287205 +0100
@@ -1,7 +1,7 @@
#
# spec file for package icecast
#
-# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
Name: icecast
-Version:2.4.2
+Version:2.4.3
Release:0
Summary:Audio Streaming Server
License:GPL-2.0+
@@ -35,6 +35,7 @@
# PATCH-FEATURE-OPENSUSE -- mp3 frame validation
Patch100: icecast-mp3-frame-validation.patch
BuildRequires: curl-devel
+BuildRequires: dos2unix
BuildRequires: libtheora-devel
BuildRequires: libtool
BuildRequires: libvorbis-devel
@@ -42,11 +43,9 @@
BuildRequires: openssl-devel
BuildRequires: speex-devel
BuildRequires: systemd-rpm-macros
-%{?systemd_requires}
-PreReq: /usr/sbin/groupadd
-PreReq: /usr/sbin/useradd
+Requires(pre): shadow
Recommends: logrotate
-BuildRoot: %{_tmppath}/%{name}-%{version}-build
+%{?systemd_requires}
%description
Icecast is a MP3 and OGG streaming server able to serve many clients
@@ -77,21 +76,24 @@
make %{?_smp_mflags}
%install
-make install DESTDIR=%{buildroot} docdir=%{_docdir}/%{name}
+%make_install docdir=%{_docdir}/%{name}
# service file
install -d -m 0755 %{buildroot}%{_sbindir}
install -d "%{buildroot}%{_unitdir}/system"
install -D -m 0644 %{SOURCE2} %{buildroot}%{_unitdir}/icecast.service
-ln -s /usr/sbin/service %{buildroot}%{_sbindir}/rc%{name}
+ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rc%{name}
# create missing dirs
install -d -m 0755 %{buildroot}%{_localstatedir}/{lib,log}/%{name}
# logrotate
-install -D -m 0644 %{SOURCE3} %{buildroot}/etc/logrotate.d/%{name}
+install -D -m 0644 %{SOURCE3} %{buildroot}%{_sysconfdir}/logrotate.d/%{name}
+
+# fix warning about bad line endings
+dos2unix %{buildroot}%{_docdir}/icecast/assets/css/style.css
%pre
-/usr/sbin/groupadd -r %{name} >/dev/null 2>&1 || :
-/usr/sbin/useradd -g %{name} -s /bin/false -r -c "Icecast streaming server"
-d %{_localstatedir}/lib/%{name} %{name} >/dev/null 2>&1 || :
+%{_sbindir}/groupadd -r %{name} >/dev/null 2>&1 || :
+%{_sbindir}/useradd -g %{name} -s /bin/false -r -c "Icecast streaming server"
-d %{_localstatedir}/lib/%{name} %{name} >/dev/null 2>&1 || :
%service_add_pre %{name}.service
%preun
@@ -104,7 +106,6 @@
%service_del_postun %{name}.service
%files
-%defattr(-,root,root)
%dir %doc %{_docdir}/%{name}
%doc %{_docdir}/%{name}/README
%doc %{_docdir}/%{name}/AUTHORS
@@ -113,7 +114,7 @@
%doc %{_docdir}/%{name}/TODO
%doc %{_docdir}/%{name}/ChangeLog
%config(noreplace) %attr(640,root,%{name}) %{_sysconfdir}/%{name}.xml
-%config(noreplace) /etc/logrotate.d/%{name}
+%config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
%{_bindir}/icecast
%{_datadir}/icecast
%{_sbindir}/rc%{name}
@@ -123,7 +124,6 @@
%attr(750,%{name},%{name}) %{_localstatedir}/log/%{name}
%files doc
-%defattr(-,root,root)
%doc %{_docdir}/%{name}
%exclude %{_docdir}/%{name}/README
%exclude %{_docdir}/%{name}/AUTHORS
++ icecast-2.4.2.tar.gz -> icecast-2.4.3.tar.gz ++
20801 lines of diff (skipped)
++ icecast-fix-no-add-needed.patch ++
--- /var/tmp/diff_new_pack.mjx73Z/_old 2017-12-19 10:58:10.070276199 +0100
+++ /var/tmp/diff_new_pa
commit icecast for openSUSE:Factory
Hello community,
here is the log from the commit of package icecast for openSUSE:Factory checked
in at 2015-01-29 09:57:27
Comparing /work/SRC/openSUSE:Factory/icecast (Old)
and /work/SRC/openSUSE:Factory/.icecast.new (New)
Package is "icecast"
Changes:
--- /work/SRC/openSUSE:Factory/icecast/icecast.changes 2014-11-26
22:57:23.0 +0100
+++ /work/SRC/openSUSE:Factory/.icecast.new/icecast.changes 2015-01-29
09:57:47.0 +0100
@@ -1,0 +2,10 @@
+Mon Jan 19 22:10:57 UTC 2015 - p.drou...@gmail.com
+
+- Remove sysvinit support as the package now build only for systems
+ with systemd support
+- Add a backward rc compatibility symlink to systemd service file
+- Only require systemd-rpm-macros to build; no need to require
+ entire systemd environment
+- Clean up specfile
+
+---
Old:
icecast.init
Other differences:
--
++ icecast.spec ++
--- /var/tmp/diff_new_pack.QLN1QK/_old 2015-01-29 09:57:49.0 +0100
+++ /var/tmp/diff_new_pack.QLN1QK/_new 2015-01-29 09:57:49.0 +0100
@@ -1,7 +1,7 @@
#
# spec file for package icecast
#
-# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -24,7 +24,6 @@
Group: Productivity/Networking/Web/Servers
Url:http://www.icecast.org/
Source:
http://downloads.xiph.org/releases/icecast/icecast-%{version}.tar.gz
-Source1:icecast.init
Source2:icecast.service
Source3:icecast.logrotate
Source99: icecast.rpmlintrc
@@ -42,17 +41,8 @@
BuildRequires: libxslt-devel
BuildRequires: openssl-devel
BuildRequires: speex-devel
-%if 0%{?suse_version} >= 1140
-%if 0%{?suse_version} > 1220
-%define _unitdir /usr/lib/systemd
-%else
-%define _unitdir /lib/systemd
-%endif
-BuildRequires: systemd
+BuildRequires: systemd-rpm-macros
%{?systemd_requires}
-%endif
-PreReq: %fillup_prereq
-PreReq: %insserv_prereq
PreReq: /usr/sbin/groupadd
PreReq: /usr/sbin/useradd
Recommends: logrotate
@@ -88,48 +78,30 @@
%install
make install DESTDIR=%{buildroot} docdir=%{_docdir}/%{name}
-# init script
-install -d -m 0755 %{buildroot}%{_sbindir}
-install -D -m 0755 %{SOURCE1} %{buildroot}%{_sysconfdir}/init.d/%{name}
-ln -s -f %{_sysconfdir}/init.d/%{name} %{buildroot}%{_sbindir}/rc%{name}
-%if 0%{?suse_version} >= 1140
# service file
+install -d -m 0755 %{buildroot}%{_sbindir}
install -d "%{buildroot}%{_unitdir}/system"
-install -D -m 0644 %{SOURCE2} %{buildroot}%{_unitdir}/system/icecast.service
-%endif
+install -D -m 0644 %{SOURCE2} %{buildroot}%{_unitdir}/icecast.service
+ln -s /usr/sbin/service %{buildroot}%{_sbindir}/rc%{name}
# create missing dirs
install -d -m 0755 %{buildroot}%{_localstatedir}/{lib,log}/%{name}
# logrotate
install -D -m 0644 %{SOURCE3} %{buildroot}/etc/logrotate.d/%{name}
-cp -a conf/*.dist %{buildroot}%{_docdir}/%{name}
-
%pre
/usr/sbin/groupadd -r %{name} >/dev/null 2>&1 || :
/usr/sbin/useradd -g %{name} -s /bin/false -r -c "Icecast streaming server"
-d %{_localstatedir}/lib/%{name} %{name} >/dev/null 2>&1 || :
-%if 0%{?suse_version} > 1140
%service_add_pre %{name}.service
-%endif
%preun
-%stop_on_removal %{name}
-%if 0%{?suse_version} > 1140
%service_del_preun %{name}.service
-%endif
%post
-%fillup_and_insserv %{name}
-%if 0%{?suse_version} > 1140
%service_add_post %{name}.service
-%endif
%postun
-%restart_on_update %{name}
-%insserv_cleanup
-%if 0%{?suse_version} > 1140
%service_del_postun %{name}.service
-%endif
%files
%defattr(-,root,root)
@@ -145,10 +117,7 @@
%{_bindir}/icecast
%{_datadir}/icecast
%{_sbindir}/rc%{name}
-%{_sysconfdir}/init.d/%{name}
-%if 0%{?suse_version} >= 1140
-%config %{_unitdir}/system/%{name}.service
-%endif
+%config %{_unitdir}/%{name}.service
# TODO: enable chroot support in this dir
%{_localstatedir}/lib/%{name}
%attr(750,%{name},%{name}) %{_localstatedir}/log/%{name}
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit icecast for openSUSE:Factory
Hello community,
here is the log from the commit of package icecast for openSUSE:Factory checked
in at 2014-11-26 20:55:43
Comparing /work/SRC/openSUSE:Factory/icecast (Old)
and /work/SRC/openSUSE:Factory/.icecast.new (New)
Package is "icecast"
Changes:
--- /work/SRC/openSUSE:Factory/icecast/icecast.changes 2014-11-24
11:10:11.0 +0100
+++ /work/SRC/openSUSE:Factory/.icecast.new/icecast.changes 2014-11-26
22:57:23.0 +0100
@@ -1,0 +2,15 @@
+Tue Nov 25 22:38:43 CET 2014 - ti...@suse.de
+
+- updated to version 2.4.1:
+ * Fixes in logging, in default mounts, JSON status API
+ * SSL Security improvements:
+ * Handle empty strings in config file better
+ * Require Content-Type header for PUT requests
+ * Fix possible leak of on-connect scripts (CVE-2014-9018,bnc#906538)
+ More details, see http://icecast.org/news/icecast-release-2_4_1/
+- Remove obsoleted patch:
+ icecast-2.4.0-produce-valid-json.patch
+- Change doc subpackage to noarch
+- Spec file cleanup
+
+---
Old:
icecast-2.4.0-produce-valid-json.patch
icecast-2.4.0.tar.gz
New:
icecast-2.4.1.tar.gz
Other differences:
--
++ icecast.spec ++
--- /var/tmp/diff_new_pack.zJTZta/_old 2014-11-26 22:57:24.0 +0100
+++ /var/tmp/diff_new_pack.zJTZta/_new 2014-11-26 22:57:24.0 +0100
@@ -17,7 +17,7 @@
Name: icecast
-Version:2.4.0
+Version:2.4.1
Release:0
Summary:Audio Streaming Server
License:GPL-2.0+
@@ -33,8 +33,6 @@
# PATCH-MISSING-TAG -- See
http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines
Patch1: icecast-fix-no-add-needed.patch
Patch3: icecast-add_pidfile_directive.patch
-# PATCH-FIX-UPSTREAM -- Produce valid json status, already in upstream trunk
svn. boo#905468.
-Patch4: icecast-2.4.0-produce-valid-json.patch
# PATCH-FEATURE-OPENSUSE -- mp3 frame validation
Patch100: icecast-mp3-frame-validation.patch
BuildRequires: curl-devel
@@ -67,6 +65,7 @@
%package doc
Summary:Documentation for Icecast
Group: Documentation/Other
+BuildArch: noarch
%description doc
Icecast is a MP3 and OGG streaming server able to serve many clients
@@ -77,20 +76,18 @@
%prep
%setup -q
-%patch0
-%patch1
-%patch3
-%patch4
-%patch100
+%patch0 -p1
+%patch1 -p1
+%patch3 -p1
+%patch100 -p1
%build
autoreconf -fiv
%configure
-make
+make %{?_smp_mflags}
%install
-make install DESTDIR=%{buildroot}
-rm -rf %{buildroot}%{_datadir}/doc/%{name}
+make install DESTDIR=%{buildroot} docdir=%{_docdir}/%{name}
# init script
install -d -m 0755 %{buildroot}%{_sbindir}
install -D -m 0755 %{SOURCE1} %{buildroot}%{_sysconfdir}/init.d/%{name}
@@ -106,14 +103,7 @@
# logrotate
install -D -m 0644 %{SOURCE3} %{buildroot}/etc/logrotate.d/%{name}
-D=%{buildroot}%{_docdir}/%{name}
-install -d "$D"
-cp -a README AUTHORS COPYING NEWS TODO ChangeLog "$D/"
-cp -a doc/*.{html,jpg,png} "$D/"
-cp -a conf/*.dist "$D/"
-
-%clean
-%{?buildroot:%__rm -rf %{buildroot}}
+cp -a conf/*.dist %{buildroot}%{_docdir}/%{name}
%pre
/usr/sbin/groupadd -r %{name} >/dev/null 2>&1 || :
@@ -165,10 +155,12 @@
%files doc
%defattr(-,root,root)
-%dir %doc %{_docdir}/%{name}
-%doc %{_docdir}/%{name}/*.html
-%doc %{_docdir}/%{name}/*.jpg
-%doc %{_docdir}/%{name}/*.png
-%doc %{_docdir}/%{name}/*.dist
+%doc %{_docdir}/%{name}
+%exclude %{_docdir}/%{name}/README
+%exclude %{_docdir}/%{name}/AUTHORS
+%exclude %{_docdir}/%{name}/COPYING
+%exclude %{_docdir}/%{name}/NEWS
+%exclude %{_docdir}/%{name}/TODO
+%exclude %{_docdir}/%{name}/ChangeLog
%changelog
++ icecast-2.3.1_runas_icecast_user.patch ++
--- /var/tmp/diff_new_pack.zJTZta/_old 2014-11-26 22:57:24.0 +0100
+++ /var/tmp/diff_new_pack.zJTZta/_new 2014-11-26 22:57:24.0 +0100
@@ -1,27 +1,12 @@
conf/icecast_minimal.xml.in.orig
-+++ conf/icecast_minimal.xml.in
-@@ -32,4 +32,19 @@
- error.log
- 3
-
-+
-+0
-+
-+
-+icecast
-+icecast
-+
-+
-
conf/icecast_shoutcast_compat.xml.in.orig
-+++ conf/icecast_shoutcast_compat.xml.in
+---
+ conf/icecast.xml.in | 12 +---
+ conf/icecast_minimal.xml.in | 15 +++
+ conf/icecast_shoutcast_compat.xml.in | 12
+ conf/icecast_urlauth.xml.in | 12
+ 4 files changed, 48 insertions(+), 3 deletions(-)
+
+--- a/conf/icecast_shoutcast_compat.xml.in
b/conf/icecast_shoutcast_compat.xml.in
@@ -44,5 +44,17 @@
@@ -40,8 +25,8 @@
+
conf/icecast_urlauth.xml.in.orig
-+++ conf/icecast_urlauth.
commit icecast for openSUSE:Factory
Hello community,
here is the log from the commit of package icecast for openSUSE:Factory checked
in at 2014-11-24 11:09:28
Comparing /work/SRC/openSUSE:Factory/icecast (Old)
and /work/SRC/openSUSE:Factory/.icecast.new (New)
Package is "icecast"
Changes:
--- /work/SRC/openSUSE:Factory/icecast/icecast.changes 2014-11-18
22:46:01.0 +0100
+++ /work/SRC/openSUSE:Factory/.icecast.new/icecast.changes 2014-11-24
11:10:11.0 +0100
@@ -1,0 +2,5 @@
+Sat Nov 22 12:44:18 UTC 2014 - fi...@opensuse.org
+
+- Add icecast-mp3-frame-validation.patch: validate mp3 frame.
+
+---
New:
icecast-mp3-frame-validation.patch
Other differences:
--
++ icecast.spec ++
--- /var/tmp/diff_new_pack.o5gyAf/_old 2014-11-24 11:10:12.0 +0100
+++ /var/tmp/diff_new_pack.o5gyAf/_new 2014-11-24 11:10:12.0 +0100
@@ -35,6 +35,8 @@
Patch3: icecast-add_pidfile_directive.patch
# PATCH-FIX-UPSTREAM -- Produce valid json status, already in upstream trunk
svn. boo#905468.
Patch4: icecast-2.4.0-produce-valid-json.patch
+# PATCH-FEATURE-OPENSUSE -- mp3 frame validation
+Patch100: icecast-mp3-frame-validation.patch
BuildRequires: curl-devel
BuildRequires: libtheora-devel
BuildRequires: libtool
@@ -79,6 +81,7 @@
%patch1
%patch3
%patch4
+%patch100
%build
autoreconf -fiv
++ icecast-mp3-frame-validation.patch ++
Description: MP3 Frame validation
Author: Paul Kelly
Icecast does not make any attempt to demarcate the boundaries between MP3
frames, and when a listening client connects to the server it generally is
sent an initial partial frame that can't be decoded. This is not a problem
for almost all client players.
It becomes a problem however when a "pre-roll" intro clip is used. When
Icecast connects the listener to the main stream after playing the intro
clip, it will very likely cut in in the middle of a frame, which causes a
problem for some players. Flash player in particular exhibits strange
behaviour with the audio cutting in and out every few seconds. Pausing the
player and resuming cures the problem.
http://lists.xiph.org/pipermail//icecast-dev/2011-October/001998.html
Index: src/format_mp3.c
===
--- src/format_mp3.c.orig
+++ src/format_mp3.c
@@ -509,6 +509,161 @@ static int complete_read (source_t *sour
return 1;
}
+static int bitrate_table[2][3][14] =
+{
+{
+/* MPEG-2 Layer III */
+{ 8, 16, 24, 32, 40, 48, 56, 64, 80, 96, 112, 128, 144, 160},
+/* MPEG-2 Layer II */
+{ 8, 16, 24, 32, 40, 48, 56, 64, 80, 96, 112, 128, 144, 160},
+/* MPEG-2 Layer I */
+{32, 48, 56, 64, 80, 96, 112, 128, 144, 160, 176, 192, 224, 256}
+},
+{
+/* MPEG-1 Layer III */
+{32, 40, 48, 56, 64, 80, 96, 112, 128, 160, 192, 224, 256, 320},
+/* MPEG-1 Layer II */
+{32, 48, 56, 64, 80, 96, 112, 128, 160, 192, 224, 256, 320, 384},
+/* MPEG-1 Layer I */
+{32, 64, 96, 128, 160, 192, 224, 256, 288, 320, 352, 384, 416, 448}
+}
+};
+
+static int samplerate_table[4][3] =
+{
+{11025, 12000, 8000}, /* MPEG-2 LSF */
+{0, 0, 0}, /* Reserved */
+{22050, 24000, 16000}, /* MPEG-2 */
+{44100, 48000, 32000} /* MPEG-1 */
+};
+
+static int framesize_table[2][3] =
+{
+/* L.III L.II L.I */
+{ 576, 1152, 384}, /* MPEG-2 */
+{ 1152, 1152, 384} /* MPEG-1 */
+};
+
+static int slotsize_table[3] =
+{
+1, /* L. III */
+1, /* L. II */
+4 /* L. I */
+};
+
+static int validate_header(mpeg_frame_t *fr)
+{
+unsigned char version_code, layer_code, bitrate_code,
+ samplerate_code, padding;
+char message[200];
+
+#define MAX_FRAME_LEN 2880 /* 160kbps Layer II @ 8kHz */
+
+/* Check sync word is present */
+if (fr->data[0] != 0xff || (fr->data[1] & 0xe0) != 0xe0)
+goto invalid_frame;
+
+/* Validate header by checking no reserved values are present */
+if ( (version_code= (fr->data[1] & 0x18) >> 3) == 1
+ || (layer_code = (fr->data[1] & 0x06) >> 1) == 0
+ || (bitrate_code= (fr->data[2] & 0xf0) >> 4) == 15
+ || (samplerate_code = (fr->data[2] & 0x0c) >> 2) == 3)
+goto invalid_frame;
+
+if (bitrate_code == 0) /* Free-format bitrate */
+/* We can't calculate the frame length anyway from this so can go no
+ * further with validation, so return the header as invalid. This is
+ * arguably a bug. */
+goto invalid_frame;
+
+/* Calculate data length of frame */
+fr->kbps = bitrate_table[version_code & 1][
commit icecast for openSUSE:Factory
Hello community, here is the log from the commit of package icecast for openSUSE:Factory checked in at 2014-11-18 22:45:20 Comparing /work/SRC/openSUSE:Factory/icecast (Old) and /work/SRC/openSUSE:Factory/.icecast.new (New) Package is "icecast" Changes: --- /work/SRC/openSUSE:Factory/icecast/icecast.changes 2014-11-10 17:29:04.0 +0100 +++ /work/SRC/openSUSE:Factory/.icecast.new/icecast.changes 2014-11-18 22:46:01.0 +0100 @@ -1,0 +2,6 @@ +Fri Nov 14 15:36:05 UTC 2014 - fi...@opensuse.org + +- Add icecast-2.4.0-produce-valid-json.patch: produce valid json status, + fix boo#905468. + +--- New: icecast-2.4.0-produce-valid-json.patch Other differences: -- ++ icecast.spec ++ --- /var/tmp/diff_new_pack.LPhTPK/_old 2014-11-18 22:46:02.0 +0100 +++ /var/tmp/diff_new_pack.LPhTPK/_new 2014-11-18 22:46:02.0 +0100 @@ -33,6 +33,8 @@ # PATCH-MISSING-TAG -- See http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines Patch1: icecast-fix-no-add-needed.patch Patch3: icecast-add_pidfile_directive.patch +# PATCH-FIX-UPSTREAM -- Produce valid json status, already in upstream trunk svn. boo#905468. +Patch4: icecast-2.4.0-produce-valid-json.patch BuildRequires: curl-devel BuildRequires: libtheora-devel BuildRequires: libtool @@ -76,6 +78,7 @@ %patch0 %patch1 %patch3 +%patch4 %build autoreconf -fiv ++ icecast-2.4.0-produce-valid-json.patch ++ Index: web/status-json.xsl === --- web/status-json.xsl.orig +++ web/status-json.xsl @@ -7,24 +7,18 @@ true - - - - - - - - - "dummy":null} - +"dummy":null} +"dummy":null} +"dummy":null} +"dummy":null} +"dummy":null} +"dummy":null} - - - - - +"dummy":null} +"dummy":null} +"dummy":null} +"dummy":null} +"dummy":null} -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit icecast for openSUSE:Factory
Hello community,
here is the log from the commit of package icecast for openSUSE:Factory checked
in at 2014-11-10 17:28:46
Comparing /work/SRC/openSUSE:Factory/icecast (Old)
and /work/SRC/openSUSE:Factory/.icecast.new (New)
Package is "icecast"
Changes:
--- /work/SRC/openSUSE:Factory/icecast/icecast.changes 2014-05-26
14:40:57.0 +0200
+++ /work/SRC/openSUSE:Factory/.icecast.new/icecast.changes 2014-11-10
17:29:04.0 +0100
@@ -1,0 +2,5 @@
+Sun Nov 09 04:42:00 UTC 2014 - Led
+
+- fix bashisms in pre script
+
+---
Other differences:
--
++ icecast.spec ++
--- /var/tmp/diff_new_pack.QHJgLA/_old 2014-11-10 17:29:06.0 +0100
+++ /var/tmp/diff_new_pack.QHJgLA/_new 2014-11-10 17:29:06.0 +0100
@@ -110,8 +110,8 @@
%{?buildroot:%__rm -rf %{buildroot}}
%pre
-/usr/sbin/groupadd -r %{name} &>/dev/null || :
-/usr/sbin/useradd -g %{name} -s /bin/false -r -c "Icecast streaming server"
-d %{_localstatedir}/lib/%{name} %{name} &>/dev/null || :
+/usr/sbin/groupadd -r %{name} >/dev/null 2>&1 || :
+/usr/sbin/useradd -g %{name} -s /bin/false -r -c "Icecast streaming server"
-d %{_localstatedir}/lib/%{name} %{name} >/dev/null 2>&1 || :
%if 0%{?suse_version} > 1140
%service_add_pre %{name}.service
%endif
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit icecast for openSUSE:Factory
Hello community,
here is the log from the commit of package icecast for openSUSE:Factory checked
in at 2014-05-26 14:40:56
Comparing /work/SRC/openSUSE:Factory/icecast (Old)
and /work/SRC/openSUSE:Factory/.icecast.new (New)
Package is "icecast"
Changes:
--- /work/SRC/openSUSE:Factory/icecast/icecast.changes 2014-02-11
15:23:00.0 +0100
+++ /work/SRC/openSUSE:Factory/.icecast.new/icecast.changes 2014-05-26
14:40:57.0 +0200
@@ -1,0 +2,14 @@
+Tue May 20 17:14:26 UTC 2014 - m...@davykager.nl
+
+- Update to version 2.4.0:
+ * Support for WebM video
+ * Support for Opus audio in Ogg
+ * Fixes for some race conditions
+ * Allow (standard strftime(3)) %x codes in . Disabled for win32.
+ * Dropped debian packaging directory as debian use their own.
+- Disable Gentoo patches because they have no effect on the OBS builds.
+ icecast-2.3.3-libkate.patch (has no effect on automated builds)
+ icecast-2.3.3-fix-xiph_openssl.patch (spec file guarantees openssl exists)
+- Rebase icecast-fix-no-add-needed.patch for version 2.4.0.
+
+---
Old:
icecast-2.3.3-fix-xiph_openssl.patch
icecast-2.3.3-libkate.patch
icecast-2.3.3.tar.gz
New:
icecast-2.4.0.tar.gz
Other differences:
--
++ icecast.spec ++
--- /var/tmp/diff_new_pack.LW0g3Z/_old 2014-05-26 14:40:59.0 +0200
+++ /var/tmp/diff_new_pack.LW0g3Z/_new 2014-05-26 14:40:59.0 +0200
@@ -17,7 +17,7 @@
Name: icecast
-Version:2.3.3
+Version:2.4.0
Release:0
Summary:Audio Streaming Server
License:GPL-2.0+
@@ -33,8 +33,6 @@
# PATCH-MISSING-TAG -- See
http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines
Patch1: icecast-fix-no-add-needed.patch
Patch3: icecast-add_pidfile_directive.patch
-Patch4:
http://data.gpo.zugaina.org/gentoo/net-misc/icecast/files/icecast-2.3.3-libkate.patch
-Patch5:
http://data.gpo.zugaina.org/gentoo/net-misc/icecast/files/icecast-2.3.3-fix-xiph_openssl.patch
BuildRequires: curl-devel
BuildRequires: libtheora-devel
BuildRequires: libtool
@@ -78,8 +76,6 @@
%patch0
%patch1
%patch3
-%patch4 -p1
-%patch5 -p1
%build
autoreconf -fiv
@@ -107,7 +103,7 @@
D=%{buildroot}%{_docdir}/%{name}
install -d "$D"
cp -a README AUTHORS COPYING NEWS TODO ChangeLog "$D/"
-cp -a doc/*.{html,jpg,css} "$D/"
+cp -a doc/*.{html,jpg,png} "$D/"
cp -a conf/*.dist "$D/"
%clean
@@ -166,7 +162,7 @@
%dir %doc %{_docdir}/%{name}
%doc %{_docdir}/%{name}/*.html
%doc %{_docdir}/%{name}/*.jpg
-%doc %{_docdir}/%{name}/*.css
+%doc %{_docdir}/%{name}/*.png
%doc %{_docdir}/%{name}/*.dist
%changelog
++ icecast-2.3.3.tar.gz -> icecast-2.4.0.tar.gz ++
34997 lines of diff (skipped)
++ icecast-fix-no-add-needed.patch ++
--- /var/tmp/diff_new_pack.LW0g3Z/_old 2014-05-26 14:40:59.0 +0200
+++ /var/tmp/diff_new_pack.LW0g3Z/_new 2014-05-26 14:40:59.0 +0200
@@ -1,33 +1,33 @@
configure.in.orig 2013-06-04 23:21:32.945687628 +0200
-+++ configure.in 2013-06-04 23:30:16.635405784 +0200
-@@ -1,6 +1,7 @@
- AC_INIT([Icecast], [2.3.3], [icec...@xiph.org])
-
- AC_PREREQ(2.54)
-+AC_CONFIG_MACRO_DIR([m4])
- AC_CONFIG_SRCDIR(src/main.c)
- dnl Process this file with autoconf to produce a configure script.
-
-@@ -8,7 +9,8 @@
- AM_CONFIG_HEADER(config.h)
- AM_MAINTAINER_MODE
-
--AC_PROG_CC
-+AC_PROG_CC_STDC
-+AC_USE_SYSTEM_EXTENSIONS
- AC_CANONICAL_HOST
- AC_PROG_LIBTOOL
- AC_SYS_LARGEFILE
-@@ -50,9 +52,12 @@
-
- dnl -- configure options --
-
-+XIPH_PATH_XML
- XIPH_PATH_XSLT
- XIPH_VAR_APPEND([XIPH_CPPFLAGS],[$XSLT_CFLAGS])
- XIPH_VAR_PREPEND([XIPH_LIBS],[$XSLT_LIBS])
-+XIPH_VAR_APPEND([XIPH_CPPFLAGS],[$XML_CFLAGS])
-+XIPH_VAR_PREPEND([XIPH_LIBS],[$XML_LIBS])
-
- XIPH_PATH_VORBIS([
- XIPH_VAR_APPEND([XIPH_CPPFLAGS],[$VORBIS_CFLAGS])
+--- configure.in.orig 2014-05-04 20:46:52.0 +0200
configure.in 2014-05-20 16:41:18.210785900 +0200
+@@ -1,6 +1,7 @@
+ AC_INIT([Icecast], [2.4.0], [icec...@xiph.org])
+
+ AC_PREREQ(2.54)
++AC_CONFIG_MACRO_DIR([m4])
+ AC_CONFIG_SRCDIR(src/main.c)
+ dnl Process this file with autoconf to produce a configure script.
+
+@@ -8,7 +9,8 @@
+ AM_CONFIG_HEADER(config.h)
+ AM_MAINTAINER_MODE
+
+-AC_PROG_CC
++AC_PROG_CC_STDC
++AC_USE_SYSTEM_EXTENSIONS
+ AC_CANONICAL_HOST
+ AC_PROG_LIBTOOL
+ AC_SYS_LARGEFILE
+@@ -53,9 +55,12 @@
+
+ dnl -- configure options --
+
++XIPH_PATH_XML
+ XIPH_PATH_XSLT
+ XIPH_VAR_APPEND([XIPH_CPPFLAGS],[$XSLT_CFLAGS])
+ XIPH_VAR_PREPEND([XIPH_LIBS],[$XSLT_LIBS])
++XIPH_VAR_APPEND([XIPH_CPPFLAGS],[$XML_CFLAGS])
++XIPH_VAR_PREPEND([XIPH_LIBS],[$XML_LIBS])
+
+ XIPH_PATH_VORBIS([
+ XIPH_VAR_APPEN
commit icecast for openSUSE:Factory
Hello community, here is the log from the commit of package icecast for openSUSE:Factory checked in at 2014-02-11 15:22:59 Comparing /work/SRC/openSUSE:Factory/icecast (Old) and /work/SRC/openSUSE:Factory/.icecast.new (New) Package is "icecast" Changes: --- /work/SRC/openSUSE:Factory/icecast/icecast.changes 2013-11-30 07:28:22.0 +0100 +++ /work/SRC/openSUSE:Factory/.icecast.new/icecast.changes 2014-02-11 15:23:00.0 +0100 @@ -1,0 +2,6 @@ +Tue Feb 11 11:34:17 CET 2014 - ti...@suse.de + +- Remove the obsoleted icecast-2.3.2-CVE-2011-4612.diff that leads + to invalid access to freed memory (bnc#862096) + +--- Old: icecast-2.3.2-CVE-2011-4612.diff Other differences: -- ++ icecast.spec ++ --- /var/tmp/diff_new_pack.XJ4vwi/_old 2014-02-11 15:23:01.0 +0100 +++ /var/tmp/diff_new_pack.XJ4vwi/_new 2014-02-11 15:23:01.0 +0100 @@ -1,7 +1,7 @@ # # spec file for package icecast # -# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -32,7 +32,6 @@ Patch0: icecast-2.3.1_runas_icecast_user.patch # PATCH-MISSING-TAG -- See http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines Patch1: icecast-fix-no-add-needed.patch -Patch2: icecast-2.3.2-CVE-2011-4612.diff Patch3: icecast-add_pidfile_directive.patch Patch4: http://data.gpo.zugaina.org/gentoo/net-misc/icecast/files/icecast-2.3.3-libkate.patch Patch5: http://data.gpo.zugaina.org/gentoo/net-misc/icecast/files/icecast-2.3.3-fix-xiph_openssl.patch @@ -78,7 +77,6 @@ %setup -q %patch0 %patch1 -%patch2 %patch3 %patch4 -p1 %patch5 -p1 -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit icecast for openSUSE:Factory
Hello community, here is the log from the commit of package icecast for openSUSE:Factory checked in at 2013-11-30 07:28:21 Comparing /work/SRC/openSUSE:Factory/icecast (Old) and /work/SRC/openSUSE:Factory/.icecast.new (New) Package is "icecast" Changes: --- /work/SRC/openSUSE:Factory/icecast/icecast.changes 2013-06-05 17:42:30.0 +0200 +++ /work/SRC/openSUSE:Factory/.icecast.new/icecast.changes 2013-11-30 07:28:22.0 +0100 @@ -1,0 +2,6 @@ +Fri Nov 29 11:07:13 UTC 2013 - pascal.ble...@opensuse.org + +- remove dependency to syslog.target in icecast.service, as it doesn't exist + any more, see bnc#852314 + +--- Other differences: -- ++ icecast.service ++ --- /var/tmp/diff_new_pack.AJVCqh/_old 2013-11-30 07:28:23.0 +0100 +++ /var/tmp/diff_new_pack.AJVCqh/_new 2013-11-30 07:28:23.0 +0100 @@ -13,8 +13,8 @@ [Unit] Description=Icecast Server -Requires=var-run.mount network.target remote-fs.target syslog.target time-sync.target -After=var-run.mount network.target remote-fs.target syslog.target time-sync.target +Requires=var-run.mount network.target remote-fs.target time-sync.target +After=var-run.mount network.target remote-fs.target time-sync.target [Service] ExecStart=/usr/bin/icecast -b -c /etc/icecast.xml -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit icecast for openSUSE:Factory
Hello community,
here is the log from the commit of package icecast for openSUSE:Factory checked
in at 2013-06-05 17:42:28
Comparing /work/SRC/openSUSE:Factory/icecast (Old)
and /work/SRC/openSUSE:Factory/.icecast.new (New)
Package is "icecast"
Changes:
--- /work/SRC/openSUSE:Factory/icecast/icecast.changes 2013-03-08
09:13:16.0 +0100
+++ /work/SRC/openSUSE:Factory/.icecast.new/icecast.changes 2013-06-05
17:42:30.0 +0200
@@ -1,0 +2,48 @@
+Wed Jun 5 00:10:46 UTC 2013 - pascal.ble...@opensuse.org
+
+- update to 2.3.3:
+ * security:
++ Improved HTTPS cipher handling and added support for chained
certificates.
++ Allow the source password to be undefined. There was a corner case, where
+ a default password would have taken effect. It would require the admin to
+ remove the 'source-password' from the icecast config to take effect.
Default
+ configs ship with the password set, so this vulnerability doesn't trigger
+ there.
++ Prevent error log injection of control characters by substituting
+ non-alphanumeric characters with a '.' (CVE-2011-4612). Injection
attempts
+ can be identified via access.log, as that stores URL encoded requests.
+ Investigation if further logging code needs to have sanitized output is
+ ongoing.
+
+ * bugfixes:
++ On-demand relaying - Reject listeners while reconnecting. Fix stats for
+ relays without mount section.
++ Prevent too frequent YP updates.
++ Only allow raw metadata updates from same IP as connected source (unless
+ user is admin). This addresses broken client software that issues updates
+ without being connected.
++ Minor memory leaks
++ XSPF file installation
++ Fix case of global listeners count becoming out of sync.
++ Setting an interval of 0 in mount should disable shoutcast metadata
inserts.
+
+ * authentication:
++ Sources can now be authenticated via URL, like listeners. Post info is
+
"action=stream_auth&mount=/stream&ip=IP&server=SERVER&port=8000&user=fred&pass=pass"
+ As admin requests can come in for a stream (eg metadata update) these
+ requests can be issued while stream is active. For these &admin=1 is
added to
+ the POST details.
+
+ * XSL update:
++ automatically generate VCLT playlist like we do with M3U, the mountpoint
+ extension is .vclt
+
+- package updates:
+ * add systemd service file
+ * add logrotate configuration
+ * add Gentoo patches
+ * set pidfile directive in default config file to make it work with
+systemd
+ * split out HTML documentation into -doc subpackage
+
+---
Old:
icecast-2.3.2.tar.bz2
New:
icecast-2.3.3-fix-xiph_openssl.patch
icecast-2.3.3-libkate.patch
icecast-2.3.3.tar.gz
icecast-add_pidfile_directive.patch
icecast.logrotate
icecast.rpmlintrc
icecast.service
Other differences:
--
++ icecast.spec ++
--- /var/tmp/diff_new_pack.3i2Y48/_old 2013-06-05 17:42:31.0 +0200
+++ /var/tmp/diff_new_pack.3i2Y48/_new 2013-06-05 17:42:31.0 +0200
@@ -17,19 +17,25 @@
Name: icecast
-Version:2.3.2
+Version:2.3.3
Release:0
Summary:Audio Streaming Server
License:GPL-2.0+
Group: Productivity/Networking/Web/Servers
Url:http://www.icecast.org/
-Source: %{name}-%{version}.tar.bz2
+Source:
http://downloads.xiph.org/releases/icecast/icecast-%{version}.tar.gz
Source1:icecast.init
+Source2:icecast.service
+Source3:icecast.logrotate
+Source99: icecast.rpmlintrc
# PATCH-MISSING-TAG -- See
http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines
Patch0: icecast-2.3.1_runas_icecast_user.patch
# PATCH-MISSING-TAG -- See
http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines
Patch1: icecast-fix-no-add-needed.patch
Patch2: icecast-2.3.2-CVE-2011-4612.diff
+Patch3: icecast-add_pidfile_directive.patch
+Patch4:
http://data.gpo.zugaina.org/gentoo/net-misc/icecast/files/icecast-2.3.3-libkate.patch
+Patch5:
http://data.gpo.zugaina.org/gentoo/net-misc/icecast/files/icecast-2.3.3-fix-xiph_openssl.patch
BuildRequires: curl-devel
BuildRequires: libtheora-devel
BuildRequires: libtool
@@ -37,21 +43,45 @@
BuildRequires: libxslt-devel
BuildRequires: openssl-devel
BuildRequires: speex-devel
+%if 0%{?suse_version} >= 1140
+%if 0%{?suse_version} > 1220
+%define _unitdir /usr/lib/systemd
+%else
+%define _unitdir /lib/systemd
+%endif
+BuildRequires: systemd
+%{?systemd_requires}
+%endif
PreReq: %fillup_prereq
PreReq:
commit icecast for openSUSE:Factory
Hello community,
here is the log from the commit of package icecast for openSUSE:Factory checked
in at 2013-03-08 09:13:15
Comparing /work/SRC/openSUSE:Factory/icecast (Old)
and /work/SRC/openSUSE:Factory/.icecast.new (New)
Package is "icecast", Maintainer is "ti...@suse.com"
Changes:
--- /work/SRC/openSUSE:Factory/icecast/icecast.changes 2012-11-21
17:01:14.0 +0100
+++ /work/SRC/openSUSE:Factory/.icecast.new/icecast.changes 2013-03-08
09:13:16.0 +0100
@@ -1,0 +2,5 @@
+Tue Jan 22 15:17:07 UTC 2013 - j...@suse.com
+
+- nuked %make_install to make SLES11 SP2 happy.
+
+---
Other differences:
--
++ icecast.spec ++
--- /var/tmp/diff_new_pack.MjPLuf/_old 2013-03-08 09:13:17.0 +0100
+++ /var/tmp/diff_new_pack.MjPLuf/_new 2013-03-08 09:13:17.0 +0100
@@ -1,7 +1,7 @@
#
# spec file for package icecast
#
-# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -59,7 +59,7 @@
make
%install
-%make_install
+make install DESTDIR=%{buildroot}
rm -rf %{buildroot}%{_datadir}/doc/%{name}
# init script
install -d -m 0755 %{buildroot}%{_sbindir}
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit icecast for openSUSE:Factory
Hello community,
here is the log from the commit of package icecast for openSUSE:Factory checked
in at 2012-11-21 17:01:12
Comparing /work/SRC/openSUSE:Factory/icecast (Old)
and /work/SRC/openSUSE:Factory/.icecast.new (New)
Package is "icecast", Maintainer is "ti...@suse.com"
Changes:
--- /work/SRC/openSUSE:Factory/icecast/icecast.changes 2012-03-07
13:42:44.0 +0100
+++ /work/SRC/openSUSE:Factory/.icecast.new/icecast.changes 2012-11-21
17:01:14.0 +0100
@@ -1,0 +2,6 @@
+Mon Nov 19 19:26:04 UTC 2012 - dims...@opensuse.org
+
+- Fix useradd invocation: -o is useless without -u and newer
+ versions of pwdutils/shadowutils fail on this now.
+
+---
Other differences:
--
++ icecast.spec ++
--- /var/tmp/diff_new_pack.wbq1t3/_old 2012-11-21 17:01:15.0 +0100
+++ /var/tmp/diff_new_pack.wbq1t3/_new 2012-11-21 17:01:15.0 +0100
@@ -73,7 +73,7 @@
%pre
/usr/sbin/groupadd -r %{name} &>/dev/null || :
-/usr/sbin/useradd -o -g %{name} -s /bin/false -r -c "Icecast streaming server"
-d %{_localstatedir}/lib/%{name} %{name} &>/dev/null || :
+/usr/sbin/useradd -g %{name} -s /bin/false -r -c "Icecast streaming server" -d
%{_localstatedir}/lib/%{name} %{name} &>/dev/null || :
%post
%fillup_and_insserv %{name}
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit icecast for openSUSE:Factory
Hello community,
here is the log from the commit of package icecast for openSUSE:Factory checked
in at 2012-03-07 13:42:33
Comparing /work/SRC/openSUSE:Factory/icecast (Old)
and /work/SRC/openSUSE:Factory/.icecast.new (New)
Package is "icecast", Maintainer is "ti...@suse.com"
Changes:
--- /work/SRC/openSUSE:Factory/icecast/icecast.changes 2011-10-18
14:15:27.0 +0200
+++ /work/SRC/openSUSE:Factory/.icecast.new/icecast.changes 2012-03-07
13:42:44.0 +0100
@@ -1,0 +2,5 @@
+Mon Mar 5 18:15:03 CET 2012 - ti...@suse.de
+
+- Fix VUL-1: icecast log injection (CVE-2011-4612, bnc#737255)
+
+---
New:
icecast-2.3.2-CVE-2011-4612.diff
Other differences:
--
++ icecast.spec ++
--- /var/tmp/diff_new_pack.P2FCI6/_old 2012-03-07 13:42:45.0 +0100
+++ /var/tmp/diff_new_pack.P2FCI6/_new 2012-03-07 13:42:45.0 +0100
@@ -1,7 +1,7 @@
#
# spec file for package icecast
#
-# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -16,27 +16,27 @@
#
-
Name: icecast
Version:2.3.2
-Release:62
-License:GPL-2.0+
+Release:0
Summary:Audio Streaming Server
-Url:http://www.icecast.org/
+License:GPL-2.0+
Group: Productivity/Networking/Web/Servers
+Url:http://www.icecast.org/
Source: %{name}-%{version}.tar.bz2
Source1:icecast.init
# PATCH-MISSING-TAG -- See
http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines
Patch0: icecast-2.3.1_runas_icecast_user.patch
# PATCH-MISSING-TAG -- See
http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines
Patch1: icecast-fix-no-add-needed.patch
+Patch2: icecast-2.3.2-CVE-2011-4612.diff
BuildRequires: curl-devel
BuildRequires: libtheora-devel
+BuildRequires: libtool
BuildRequires: libvorbis-devel
BuildRequires: libxslt-devel
-BuildRequires: libtool
-BuildRequires: speex-devel
BuildRequires: openssl-devel
+BuildRequires: speex-devel
PreReq: %fillup_prereq
PreReq: %insserv_prereq
PreReq: /usr/sbin/groupadd
@@ -51,6 +51,7 @@
%setup -q
%patch0
%patch1
+%patch2 -p1
%build
autoreconf -fiv
++ icecast-2.3.2-CVE-2011-4612.diff ++
---
src/fserve.c | 22 ++
1 file changed, 22 insertions(+)
--- a/src/fserve.c
+++ b/src/fserve.c
@@ -395,6 +395,19 @@ int fserve_client_create (client_t *http
int xspf_requested = 0, xspf_file_available = 1;
ice_config_t *config;
FILE *file;
+char *filtered_path, *p;
+
+/* strip \r and \n from path string; it's duplicated, so it must be
+ * freed at return
+ */
+filtered_path = strdup(path);
+if (!filtered_path)
+ return -1;
+for (p = filtered_path; *p; p++) {
+if (*p == '\r' || *p == '\n')
+ *p = '_';
+}
+path = filtered_path;
fullpath = util_get_path_from_normalised_uri (path);
INFO2 ("checking for file %s (%s)", path, fullpath);
@@ -414,6 +427,7 @@ int fserve_client_create (client_t *http
WARN2 ("req for file \"%s\" %s", fullpath, strerror (errno));
client_send_404 (httpclient, "The file you requested could not be
found");
free (fullpath);
+ free (filtered_path);
return -1;
}
m3u_file_available = 0;
@@ -462,6 +476,7 @@ int fserve_client_create (client_t *http
fserve_add_client (httpclient, NULL);
free (sourceuri);
free (fullpath);
+ free (filtered_path);
return 0;
}
if (xspf_requested && xspf_file_available == 0)
@@ -475,6 +490,8 @@ int fserve_client_create (client_t *http
free (reference);
admin_send_response (doc, httpclient, TRANSFORMED, "xspf.xsl");
xmlFreeDoc(doc);
+free (fullpath);
+ free (filtered_path);
return 0;
}
@@ -486,6 +503,7 @@ int fserve_client_create (client_t *http
client_send_404 (httpclient, "The file you requested could not be
found");
config_release_config();
free (fullpath);
+ free (filtered_path);
return -1;
}
config_release_config();
@@ -495,6 +513,7 @@ int fserve_client_create (client_t *http
client_send_404 (httpclient, "The file you requested could not be
found");
WARN1 ("found requested file but there is no handler for it: %s",
fullpath);
free (fullpath);
+ free (filter
commit icecast for openSUSE:Factory
Hello community, here is the log from the commit of package icecast for openSUSE:Factory checked in at 2011-12-06 18:18:55 Comparing /work/SRC/openSUSE:Factory/icecast (Old) and /work/SRC/openSUSE:Factory/.icecast.new (New) Package is "icecast", Maintainer is "ti...@suse.com" Changes: Other differences: -- ++ icecast.spec ++ --- /var/tmp/diff_new_pack.GW5kfO/_old 2011-12-06 18:33:02.0 +0100 +++ /var/tmp/diff_new_pack.GW5kfO/_new 2011-12-06 18:33:02.0 +0100 @@ -20,7 +20,7 @@ Name: icecast Version:2.3.2 Release:62 -License:GPLv2+ +License:GPL-2.0+ Summary:Audio Streaming Server Url:http://www.icecast.org/ Group: Productivity/Networking/Web/Servers -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit icecast for openSUSE:Factory
Hello community, here is the log from the commit of package icecast for openSUSE:Factory checked in at Tue Oct 18 14:10:26 CEST 2011. --- openSUSE:Factory/icecast/icecast.changes2011-09-23 02:03:12.0 +0200 +++ /mounts/work_src_done/STABLE/icecast/icecast.changes2011-10-15 06:51:58.0 +0200 @@ -1,0 +2,5 @@ +Sat Oct 15 04:47:10 UTC 2011 - co...@suse.com + +- add libtool as buildrequire to make the spec file more reliable + +--- calling whatdependson for head-i586 Other differences: -- ++ icecast.spec ++ --- /var/tmp/diff_new_pack.a118e6/_old 2011-10-18 14:10:22.0 +0200 +++ /var/tmp/diff_new_pack.a118e6/_new 2011-10-18 14:10:22.0 +0200 @@ -34,6 +34,7 @@ BuildRequires: libtheora-devel BuildRequires: libvorbis-devel BuildRequires: libxslt-devel +BuildRequires: libtool BuildRequires: speex-devel BuildRequires: openssl-devel PreReq: %fillup_prereq continue with "q"... Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit icecast for openSUSE:Factory
Hello community,
here is the log from the commit of package icecast for openSUSE:Factory
checked in at Mon Sep 5 18:16:01 CEST 2011.
--- icecast/icecast.changes 2008-06-18 17:18:15.0 +0200
+++ icecast/icecast.changes 2011-08-29 18:20:11.0 +0200
@@ -1,0 +2,6 @@
+Mon Aug 29 16:19:14 UTC 2011 - crrodrig...@opensuse.org
+
+- Fix build with --no-add-needed
+- Enable SSL support.
+
+---
calling whatdependson for head-i586
New:
icecast-fix-no-add-needed.patch
Other differences:
--
++ icecast.spec ++
--- /var/tmp/diff_new_pack.LvUU4Y/_old 2011-09-05 18:14:58.0 +0200
+++ /var/tmp/diff_new_pack.LvUU4Y/_new 2011-09-05 18:14:58.0 +0200
@@ -1,7 +1,7 @@
#
-# spec file for package icecast (Version 2.3.2)
+# spec file for package icecast
#
-# Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -15,60 +15,63 @@
# Please submit bugfixes or comments via http://bugs.opensuse.org/
#
-# norootforbuild
Name: icecast
-BuildRequires: curl-devel libtheora-devel libvorbis-devel libxslt-devel
speex-devel
-PreReq: /usr/sbin/useradd /usr/sbin/groupadd %insserv_prereq
%fillup_prereq
-Summary:Audio Streaming Server
Version:2.3.2
-Release:52
-Group: Productivity/Networking/Web/Servers
-AutoReqProv:on
-License:GPL v2 or later
+Release:62
+License:GPLv2+
+Summary:Audio Streaming Server
Url:http://www.icecast.org/
+Group: Productivity/Networking/Web/Servers
Source: %{name}-%{version}.tar.bz2
Source1:icecast.init
-Patch: icecast-2.3.1_runas_icecast_user.patch
+# PATCH-MISSING-TAG -- See
http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines
+Patch0: icecast-2.3.1_runas_icecast_user.patch
+# PATCH-MISSING-TAG -- See
http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines
+Patch1: icecast-fix-no-add-needed.patch
+BuildRequires: curl-devel
+BuildRequires: libtheora-devel
+BuildRequires: libvorbis-devel
+BuildRequires: libxslt-devel
+BuildRequires: speex-devel
+BuildRequires: openssl-devel
+PreReq: %fillup_prereq
+PreReq: %insserv_prereq
+PreReq: /usr/sbin/groupadd
+PreReq: /usr/sbin/useradd
BuildRoot: %{_tmppath}/%{name}-%{version}-build
%description
Icecast is a MP3 and OGG streaming server able to serve many clients
with MP3 and OGG audio.
-
-
-Authors:
-
-Jack Moffitt
-Barath Raghavan
-Alexander Hav�ng
-
%prep
-%setup
-%patch
+%setup -q
+%patch0
+%patch1
%build
+autoreconf -fiv
%configure
make
%install
-%makeinstall
-rm -rf $RPM_BUILD_ROOT%{_datadir}/doc/%{name}
+%make_install
+rm -rf %{buildroot}%{_datadir}/doc/%{name}
# init script
-%{__install} -d -m 0755 %{buildroot}%{_sbindir}
-%{__install} -D -m 0755 %{S:1} %{buildroot}%{_sysconfdir}/init.d/%{name}
-%{__ln_s} -f %{_sysconfdir}/init.d/%{name} %{buildroot}%{_sbindir}/rc%{name}
+install -d -m 0755 %{buildroot}%{_sbindir}
+install -D -m 0755 %{SOURCE1} %{buildroot}%{_sysconfdir}/init.d/%{name}
+ln -s -f %{_sysconfdir}/init.d/%{name} %{buildroot}%{_sbindir}/rc%{name}
# create missing dirs
-%{__install} -d -m 0755 %{buildroot}%{_var}/{lib,log}/%{name}
+install -d -m 0755 %{buildroot}%{_localstatedir}/{lib,log}/%{name}
%clean
-[ "$RPM_BUILD_ROOT" != "/" -a -d $RPM_BUILD_ROOT ] && rm -rf $RPM_BUILD_ROOT
+[ %{buildroot} != "/" -a -d %{buildroot} ] && rm -rf %{buildroot}
%pre
/usr/sbin/groupadd -r %{name} &>/dev/null || :
-/usr/sbin/useradd -o -g %{name} -s /bin/false -r -c "Icecast streaming server"
-d %{_var}/lib/%{name} %{name} &>/dev/null || :
+/usr/sbin/useradd -o -g %{name} -s /bin/false -r -c "Icecast streaming server"
-d %{_localstatedir}/lib/%{name} %{name} &>/dev/null || :
%post
%fillup_and_insserv %{name}
@@ -87,13 +90,13 @@
%doc doc/*.jpg
%doc doc/*.css
%doc conf/*.dist
-%config(noreplace) %attr(640,root,%{name}) /etc/%{name}.xml
+%config(noreplace) %attr(640,root,%{name}) %{_sysconfdir}/%{name}.xml
%{_bindir}/icecast
%{_datadir}/icecast
%{_sbindir}/rc%{name}
%{_sysconfdir}/init.d/%{name}
# TODO: enable chroot support in this dir
-%{_var}/lib/%{name}
-%attr(755,%{name},%{name}) %{_var}/log/%{name}
+%{_localstatedir}/lib/%{name}
+%attr(755,%{name},%{name}) %{_localstatedir}/log/%{name}
%changelog
++ icecast-2.3.1_runas_icecast_user.patch ++
--- /var/tmp/diff_new_pack.LvUU4Y/_old 2011-09-05 18:14:58.0 +0200
+++ /var/tmp/diff_new_pack.LvUU4Y/_new 2011-09-05 18:14:58.0 +0200
@@ -1,5 +1,3 @@
-Index: conf/icecast_minimal
