rpms/libuser/FC-4 libuser-0.53.7-double-free.patch, NONE, 1.1 libuser-0.53.7-enumerate.patch, NONE, 1.1 libuser-0.53.7-lpasswd.patch, NONE, 1.1 libuser.spec, 1.38, 1.39

[fedora-cvs-commits at redhat.com]

Author: mitr

Update of /cvs/dist/rpms/libuser/FC-4
In directory cvs.devel.redhat.com:/tmp/cvs-serv20597

Modified Files:
	libuser.spec 
Added Files:
	libuser-0.53.7-double-free.patch 
	libuser-0.53.7-enumerate.patch libuser-0.53.7-lpasswd.patch 
Log Message:
* Sat Jul 15 2006 Miloslav Trmac <mitr at redhat.com> - 0.53.7-1.fc4.1
- Fix an lpasswd crash (#198891)
- Fix a double free and user enumeration (#186382)
- Ship libuser.so.1


libuser-0.53.7-double-free.patch:
 user.c |    1 +
 1 files changed, 1 insertion(+)

--- NEW FILE libuser-0.53.7-double-free.patch ---
Index: lib/user.c
===================================================================
RCS file: /usr/local/CVS/libuser/lib/user.c,v
retrieving revision 1.75
diff -u -r1.75 user.c
--- lib/user.c	14 Nov 2004 20:58:51 -0000	1.75
+++ lib/user.c	7 May 2006 14:30:58 -0000
@@ -649,6 +649,7 @@
 			g_list_free(list);
 			/* Merge the pending data. */
 			attributes = lu_ent_get_attributes(current);
+			list = attributes;
 			while (attributes != NULL) {
 				attr = (const char *)attributes->data;
 				values = lu_ent_get(current, attr);

libuser-0.53.7-enumerate.patch:
 files.c |    2 +-
 1 files changed, 1 insertion(+), 1 deletion(-)

--- NEW FILE libuser-0.53.7-enumerate.patch ---
Index: modules/files.c
===================================================================
RCS file: /usr/local/CVS/libuser/modules/files.c,v
retrieving revision 1.76
diff -u -r1.76 files.c
--- modules/files.c	15 Apr 2005 13:28:16 -0000	1.76
+++ modules/files.c	7 May 2006 14:31:07 -0000
@@ -2656,7 +2656,7 @@
 		}
 		/* If the account name matches the pattern, parse it and add
 		 * it to the list. */
-		if (fnmatch(pattern, buf, 0) == 0) {
+		if (fnmatch(pattern, key, 0) == 0) {
 			parser(buf, ent);
 			g_ptr_array_add(ret, ent);
 		} else {

libuser-0.53.7-lpasswd.patch:
 lpasswd.c |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

--- NEW FILE libuser-0.53.7-lpasswd.patch ---
--- libuser-0.53.7/apps/lpasswd.c.lpasswd	2006-07-15 22:50:28.000000000 +0200
+++ libuser-0.53.7/apps/lpasswd.c	2006-07-15 22:50:50.000000000 +0200
@@ -77,8 +77,6 @@
 	}
 	user = poptGetArg(popt);
 
-	lu_authenticate_unprivileged(user, "passwd");
-
 	if ((user == NULL) || (geteuid() != getuid())) {
 		struct passwd *pwd;
 		pwd = getpwuid(getuid());
@@ -92,6 +90,8 @@
 		}
 	}
 
+	lu_authenticate_unprivileged(user, "passwd");
+
 	ctx = lu_start(user, groupflag ? lu_group : lu_user, NULL, NULL,
 		       interactive ? lu_prompt_console :
 		       lu_prompt_console_quiet, NULL, &error);


Index: libuser.spec
===================================================================
RCS file: /cvs/dist/rpms/libuser/FC-4/libuser.spec,v
retrieving revision 1.38
retrieving revision 1.39
diff -u -r1.38 -r1.39
--- libuser.spec	30 Apr 2005 16:56:58 -0000	1.38
+++ libuser.spec	15 Jul 2006 21:11:14 -0000	1.39
@@ -5,7 +5,7 @@
 
 Name: libuser
 Version: 0.53.7
-Release: 1
+Release: 1.fc4.1
 Group: System Environment/Base
 License: LGPL
 Source: libuser-%{version}.tar.gz
@@ -17,6 +17,9 @@
 BuildRequires: libselinux-devel
 %endif
 Summary: A user and group account administration library.
+Patch0: libuser-0.53.7-double-free.patch
+Patch1: libuser-0.53.7-enumerate.patch
+Patch2: libuser-0.53.7-lpasswd.patch
 
 %description
 The libuser library implements a standardized interface for manipulating
@@ -38,6 +41,9 @@
 
 %prep
 %setup -q
+%patch0 -p0 -b .double-free
+%patch1 -p0 -b .enumerate
+%patch2 -p1 -b .lpasswd
 
 %build
 CFLAGS="$RPM_OPT_FLAGS -fPIC" ; export CFLAGS
@@ -77,7 +83,7 @@
 
 %attr(0755,root,root) %{_bindir}/*
 %{_libdir}/python%{python}/site-packages/*.so
-%{_libdir}/*.so.*.*
+%{_libdir}/*.so.*
 %dir %{_libdir}/%{name}
 %{_libdir}/%{name}/*.so
 %attr(0755,root,root) %{_sbindir}/*
@@ -94,6 +100,11 @@
 %{_datadir}/gtk-doc/html/*
 
 %changelog
+* Sat Jul 15 2006 Miloslav Trmac <mitr at redhat.com> - 0.53.7-1.fc4.1
+- Fix an lpasswd crash (#198891)
+- Fix a double free and user enumeration (#186382)
+- Ship libuser.so.1
+
 * Sat Apr 30 2005 Miloslav Trmac <mitr at redhat.com> - 0.53.7-1
 - Rebuild with updated translations, add missing translations.