r17837 - in /desktop/unstable/vinagre/debian: changelog patches/ patches/01_fix_format_string.patch rules

[pochu-guest at users.alioth.debian.org]

Author: pochu-guest
Date: Fri Dec  5 22:58:49 2008
New Revision: 17837

URL: http://svn.debian.org/wsvn/pkg-gnome/?sc=1&rev=17837
Log:
* debian/rules: Add symple-patchsys.
* debian/patches/01_fix_format_string.patch:
  - Backport change from 0.5.2, format the printf message, as to avoid
    possible format string attacks.
    Urgency set to high as this is a security issue.
    See https://launchpad.net/bugs/305623 for reference.

Added:
    desktop/unstable/vinagre/debian/patches/
    desktop/unstable/vinagre/debian/patches/01_fix_format_string.patch
Modified:
    desktop/unstable/vinagre/debian/changelog
    desktop/unstable/vinagre/debian/rules

Modified: desktop/unstable/vinagre/debian/changelog
URL: http://svn.debian.org/wsvn/pkg-gnome/desktop/unstable/vinagre/debian/changelog?rev=17837&op=diff
==============================================================================
--- desktop/unstable/vinagre/debian/changelog (original)
+++ desktop/unstable/vinagre/debian/changelog Fri Dec  5 22:58:49 2008
@@ -1,3 +1,14 @@
+vinagre (0.5.1-2) unstable; urgency=high
+
+  * debian/rules: Add symple-patchsys.
+  * debian/patches/01_fix_format_string.patch:
+    - Backport change from 0.5.2, format the printf message, as to avoid
+      possible format string attacks.
+      Urgency set to high as this is a security issue.
+      See https://launchpad.net/bugs/305623 for reference.
+
+ -- Emilio Pozuelo Monfort <pochu at ubuntu.com>  Fri, 05 Dec 2008 23:57:46 +0100
+
 vinagre (0.5.1-1) unstable; urgency=low
 
   [ Josselin Mouette ]

Added: desktop/unstable/vinagre/debian/patches/01_fix_format_string.patch
URL: http://svn.debian.org/wsvn/pkg-gnome/desktop/unstable/vinagre/debian/patches/01_fix_format_string.patch?rev=17837&op=file
==============================================================================
--- desktop/unstable/vinagre/debian/patches/01_fix_format_string.patch (added)
+++ desktop/unstable/vinagre/debian/patches/01_fix_format_string.patch Fri Dec  5 22:58:49 2008
@@ -1,0 +1,10 @@
+--- branches/gnome-2-22/src/vinagre-utils.c	2008/12/05 18:41:37	527
++++ branches/gnome-2-22/src/vinagre-utils.c	2008/12/05 18:55:41	528
+@@ -63,6 +63,7 @@
+ 			      GTK_DIALOG_MODAL | GTK_DIALOG_DESTROY_WITH_PARENT,
+ 			      GTK_MESSAGE_ERROR,
+ 			      GTK_BUTTONS_CLOSE,
++			      "%s",
+ 			      message);
+ 
+   g_signal_connect_swapped (d,

Modified: desktop/unstable/vinagre/debian/rules
URL: http://svn.debian.org/wsvn/pkg-gnome/desktop/unstable/vinagre/debian/rules?rev=17837&op=diff
==============================================================================
--- desktop/unstable/vinagre/debian/rules (original)
+++ desktop/unstable/vinagre/debian/rules Fri Dec  5 22:58:49 2008
@@ -3,6 +3,7 @@
 include /usr/share/cdbs/1/rules/debhelper.mk
 include /usr/share/cdbs/1/rules/utils.mk
 include /usr/share/cdbs/1/class/gnome.mk
+include /usr/share/cdbs/1/rules/simple-patchsys.mk
 include /usr/share/gnome-pkg-tools/1/rules/uploaders.mk
 -include /usr/share/gnome-pkg-tools/1/rules/gnome-get-source.mk