rpms/sylpheed/F-7 sylpheed-2.3.1-CVE-2007-2958.patch, NONE, 1.1 sylpheed.spec, 1.49, 1.50

[Michael Schwendt (mschwendt)]

Author: mschwendt

Update of /cvs/pkgs/rpms/sylpheed/F-7
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv10974

Modified Files:
	sylpheed.spec 
Added Files:
	sylpheed-2.3.1-CVE-2007-2958.patch 
Log Message:
* Fri Aug 24 2007 Michael Schwendt <mschwendt[AT]users.sf.net> - 2.3.1-5
- Patch POP3 format string vulnerability CVE-2007-2958 (#254123).
- Clarify licence (GPLv2+).


sylpheed-2.3.1-CVE-2007-2958.patch:

--- NEW FILE sylpheed-2.3.1-CVE-2007-2958.patch ---
diff -Nur sylpheed-2.3.1-orig/src/inc.c sylpheed-2.3.1/src/inc.c
--- sylpheed-2.3.1-orig/src/inc.c	2007-01-12 07:14:57.000000000 +0100
+++ sylpheed-2.3.1/src/inc.c	2007-08-24 12:55:26.000000000 +0200
@@ -1249,7 +1249,7 @@
 			log_warning("%s\n", log_msg);
 	}
 	if (err_msg) {
-		alertpanel_error(err_msg);
+		alertpanel_error("%s", err_msg);
 		g_free(err_msg);
 	}
 }


Index: sylpheed.spec
===================================================================
RCS file: /cvs/pkgs/rpms/sylpheed/F-7/sylpheed.spec,v
retrieving revision 1.49
retrieving revision 1.50
diff -u -r1.49 -r1.50
--- sylpheed.spec	18 May 2007 15:13:21 -0000	1.49
+++ sylpheed.spec	24 Aug 2007 11:07:38 -0000	1.50
@@ -5,8 +5,8 @@
 Summary: GTK+ based, lightweight, and fast email client
 Name: sylpheed
 Version: 2.3.1
-Release: 4
-License: GPL
+Release: 5
+License: GPLv2+
 URL: http://sylpheed.sraoss.jp/
 Group: Applications/Internet
 Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-buildroot-%(%{__id_u} -n)
@@ -27,6 +27,7 @@
 Patch5: sylpheed-2.3.1-apop-cve-2007-1558.patch
 Patch6: sylpheed-2.3.1-pgpmime-signed-compose.patch
 Patch7: sylpheed-2.3.1-escaped-quotes.patch
+Patch8: sylpheed-2.3.1-CVE-2007-2958.patch
 
 %description
 This program is an X based fast email client which has features
@@ -52,6 +53,7 @@
 %patch5 -p1 -b .apop
 %patch6 -p1 -b .pgpmime-signed-compose
 %patch7 -p1 -b .escaped-quotes
+%patch8 -p1 -b .CVE-2007-2958
 
 %build
 %configure --enable-ssl %{!?_without_gpgme:--enable-gpgme} \
@@ -91,6 +93,10 @@
 %{_mandir}/man1/*
 
 %changelog
+* Fri Aug 24 2007 Michael Schwendt <mschwendt[AT]users.sf.net> - 2.3.1-5
+- Patch POP3 format string vulnerability CVE-2007-2958 (#254123).
+- Clarify licence (GPLv2+).
+
 * Fri May 18 2007 Michael Schwendt <mschwendt[AT]users.sf.net> - 2.3.1-4
 - Backport patch for libsylph to improve/fix handling of escapes
   and quotes in headers.