rpms/BackupPC/F-11 BackupPC.spec,1.10,1.11
Johan Cwiklinski
trasher at fedoraproject.org
Fri Sep 25 15:16:34 UTC 2009
Author: trasher
Update of /cvs/extras/rpms/BackupPC/F-11
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv14938
Modified Files:
BackupPC.spec
Log Message:
Remove ClientNameAlias directive from CgiUserConfigEdit list to avoid security hole (bug #518412)
Index: BackupPC.spec
===================================================================
RCS file: /cvs/extras/rpms/BackupPC/F-11/BackupPC.spec,v
retrieving revision 1.10
retrieving revision 1.11
diff -u -p -r1.10 -r1.11
--- BackupPC.spec 18 Sep 2009 21:17:03 -0000 1.10
+++ BackupPC.spec 25 Sep 2009 15:16:34 -0000 1.11
@@ -6,7 +6,7 @@
Name: BackupPC
Version: 3.1.0
-Release: 6%{?dist}
+Release: 7%{?dist}
Summary: High-performance backup system
Group: Applications/System
@@ -150,6 +150,7 @@ sed -i s,$LOGNAME,backuppc,g init.d/linu
sed -i 's/^\$Conf{XferMethod}\ =.*/$Conf{XferMethod} = "rsync";/' $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/config.pl
sed -i 's|^\$Conf{CgiURL}\ =.*|$Conf{CgiURL} = "http://localhost/BackupPC";|' $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/config.pl
+sed -i 's|ClientNameAlias => 1,|ClientNameAlias => 0,|' $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/config.pl
%if %{useselinux}
# SElinux
@@ -226,6 +227,9 @@ fi
%endif
%changelog
+* Fri Sep 25 2009 Johan Cwiklinski <johan AT x-tnd DOT be> 3.1.0-7
+- Fix security bug (bug #518412)
+
* Fri Sep 18 2009 Johan Cwiklinski <johan AT x-tnd DOT be> 3.1.0-6
- Fix SELinux policy module for UserEmailInfo.pl file
More information about the fedora-extras-commits
mailing list