rpms/dstat/F-11 dstat-0.6.9-path.patch, NONE, 1.1 dstat.spec, 1.15, 1.16

[Jan Zeleny]

Author: jzeleny

Update of /cvs/extras/rpms/dstat/F-11
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv13087

Modified Files:
	dstat.spec 
Added Files:
	dstat-0.6.9-path.patch 
Log Message:
fixed CVE-2009-3894

dstat-0.6.9-path.patch:
 dstat   |    2 --
 dstat15 |    2 --
 2 files changed, 4 deletions(-)

--- NEW FILE dstat-0.6.9-path.patch ---
--- dstat-0.6.9/dstat.orig	2009-12-03 17:06:47.000000000 +0100
+++ dstat-0.6.9/dstat	2009-12-03 17:06:56.000000000 +0100
@@ -28,8 +28,6 @@ try:
     inspath('/usr/local/share/dstat/')
     inspath('/usr/share/dstat/')
     inspath(os.path.abspath(os.path.dirname(sys.argv[0])) + '/plugins/')    # binary path + /plugins/
-    inspath(os.getcwd() + '/plugins/')                                      # current path + /plugins/
-    inspath(os.getcwd())                                                    # current path
     inspath(os.path.expanduser('~/.dstat/'))                                # home + /.dstat/
 except KeyboardInterrupt, e:
     pass
--- dstat-0.6.9/dstat15.orig	2009-12-03 17:07:08.000000000 +0100
+++ dstat-0.6.9/dstat15	2009-12-03 17:07:14.000000000 +0100
@@ -28,8 +28,6 @@ try:
     inspath('/usr/local/share/dstat/')
     inspath('/usr/share/dstat/')
     inspath(os.path.abspath(os.path.dirname(sys.argv[0])) + '/plugins/')    # binary path + /plugins/
-    inspath(os.getcwd() + '/plugins/')                                      # current path + /plugins/
-    inspath(os.getcwd())                                                    # current path
     inspath(os.path.expanduser('~/.dstat/'))                                # home + /.dstat/
 except KeyboardInterrupt, e:
     pass


Index: dstat.spec
===================================================================
RCS file: /cvs/extras/rpms/dstat/F-11/dstat.spec,v
retrieving revision 1.15
retrieving revision 1.16
diff -u -p -r1.15 -r1.16
--- dstat.spec	24 Feb 2009 12:53:04 -0000	1.15
+++ dstat.spec	3 Dec 2009 16:11:24 -0000	1.16
@@ -4,7 +4,7 @@
 Summary: Versatile resource statistics tool
 Name: dstat
 Version: 0.6.9
-Release: 4%{?dist}
+Release: 5%{?dist}
 License: GPLv2
 Group: System Environment/Base
 URL: http://dag.wieers.com/home-made/dstat/
@@ -12,6 +12,7 @@ URL: http://dag.wieers.com/home-made/dst
 Source: http://dag.wieers.com/home-made/dstat/dstat-%{version}.tar.bz2
 Patch0: dstat-0.6.8-dbus.patch
 Patch1: dstat-0.6.9-counts.patch
+Patch2: dstat-0.6.9-path.patch
 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root%(%{__id_u} -n)
 
 BuildArch: noarch
@@ -37,6 +38,7 @@ confusion, less mistakes.
 %setup -q
 %patch0 -p1 -b .dbus
 %patch1 -p1 -b .counts
+%patch2 -p1 -b .path
 
 %build
 # Make sure the docs are in unix format
@@ -67,6 +69,9 @@ cd docs
 %{_datadir}/dstat/*.py*
 
 %changelog
+* Thu Dec 03 2009 Jan Zeleny <jzeleny at redhat.com> - 0.6.9-5
+- added patch fixing security issue CVE-2009-3894
+
 * Tue Feb 24 2009 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 0.6.9-4
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild