rpms/evolution-data-server/devel evolution-data-server-1.11.3-camel-imap-folder.patch, NONE, 1.1 evolution-data-server.spec, 1.169, 1.170

[Matthew Barnes (mbarnes)]

Author: mbarnes

Update of /cvs/pkgs/rpms/evolution-data-server/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv27807

Modified Files:
	evolution-data-server.spec 
Added Files:
	evolution-data-server-1.11.3-camel-imap-folder.patch 
Log Message:

* Fri Jun 15 2007 Matthew Barnes <mbarnes at redhat.com> - 1.11.3-3.fc8
- Add patch for GNOME bug #224277 (Camel IMAP security flaw).


evolution-data-server-1.11.3-camel-imap-folder.patch:

--- NEW FILE evolution-data-server-1.11.3-camel-imap-folder.patch ---
--- evolution-data-server-1.11.3/camel/providers/imap/camel-imap-folder.c.camel-imap-folder	2007-05-10 05:26:55.000000000 -0400
+++ evolution-data-server-1.11.3/camel/providers/imap/camel-imap-folder.c	2007-06-15 12:19:22.000000000 -0400
@@ -656,7 +656,7 @@ imap_rescan (CamelFolder *folder, int ex
 		uid = g_datalist_get_data (&data, "UID");
 		flags = GPOINTER_TO_UINT (g_datalist_get_data (&data, "FLAGS"));
 		
-		if (!uid || !seq || seq > summary_len) {
+		if (!uid || !seq || seq > summary_len || seq < 0) {
 			g_datalist_clear (&data);
 			continue;
 		}
@@ -2790,7 +2790,7 @@ parse_fetch_response (CamelImapFolder *i
 		
 		if (*response != '*' || *(response + 1) != ' ')
 			return NULL;
-		seq = strtol (response + 2, &response, 10);
+		seq = strtoul (response + 2, &response, 10);
 		if (seq == 0)
 			return NULL;
 		if (g_ascii_strncasecmp (response, " FETCH (", 8) != 0)


Index: evolution-data-server.spec
===================================================================
RCS file: /cvs/pkgs/rpms/evolution-data-server/devel/evolution-data-server.spec,v
retrieving revision 1.169
retrieving revision 1.170
diff -u -r1.169 -r1.170
--- evolution-data-server.spec	14 Jun 2007 19:22:32 -0000	1.169
+++ evolution-data-server.spec	15 Jun 2007 16:36:15 -0000	1.170
@@ -26,7 +26,7 @@
 
 Name: evolution-data-server
 Version: 1.11.3
-Release: 2%{?dist}
+Release: 3%{?dist}
 License: LGPL
 Group: System Environment/Libraries
 Summary: Backend data server for Evolution
@@ -69,6 +69,9 @@
 # GNOME bug #312584
 Patch21: evolution-data-server-1.11.3-exchange-hierarchy-webdav.patch
 
+# GNOME bug #447414
+Patch22: evolution-data-server-1.11.3-camel-imap-folder.patch
+
 ### Dependencies ###
 
 Requires: GConf2
@@ -159,6 +162,7 @@
 %patch19 -p1 -b .camel-folder-symmary-crash
 %patch20 -p1 -b .camel-certdb-nss-cert-get
 %patch21 -p1 -b .exchange-hierarchy-webdav
+%patch22 -p1 -b .camel-imap-folder
 
 mkdir -p krb5-fakeprefix/include
 mkdir -p krb5-fakeprefix/lib
@@ -383,6 +387,9 @@
 %{_libdir}/pkgconfig/libexchange-storage-%{eds_api_version}.pc
 
 %changelog
+* Fri Jun 15 2007 Matthew Barnes <mbarnes at redhat.com> - 1.11.3-3.fc8
+- Add patch for GNOME bug #224277 (Camel IMAP security flaw).
+
 * Thu Jun 14 2007 Matthew Barnes <mbarnes at redhat.com> - 1.11.3-2.fc8
 - Add patch for GNOME bug #312584 (renaming Exchange folders).