[meego-commits] 8582: Changes to MeeGo:1.0:Core:Update:Testing/bzip2

[Yan Yin]

Hi,
I have made the following changes to bzip2 in project MeeGo:1.0:Core:Update:Testing. Please review and accept ASAP.

Thank You,
Yan Yin

[This message was auto-generated]

---

Request #8582:

  submit:   home:yyin2:branches:MeeGo:1.0:Core:Update:Testing/bzip2(r2)(cleanup) -> MeeGo:1.0:Core:Update:Testing/bzip2


Message:
    Update to 1.0.6 to fix BMC #7736, #7737

State:   new          2010-10-18T02:53:25 yyin2
Comment: None



changes files:
--------------
--- bzip2.changes
+++ bzip2.changes
@@ -0,0 +1,5 @@
+* Mon Oct 18 2010 Yan Yin <yan.yin at intel.com> - 1.0.6
+- Update to 1.0.6 to fix BMC #7736, #7737:
+  (CVE-2010-0405 [bzip2] Integer overflow allows context-dependent attackers to cause a DoS or possibly execute arbitrary code)
+- Remove unneeded patches: bzip2-1.0.4-cflags.patch, bzip2-1.0.4-saneso.patch
+

old:
----
  bzip2-1.0.4-cflags.patch
  bzip2-1.0.4-saneso.patch
  bzip2-1.0.5.tar.gz

new:
----
  bzip2-1.0.6.tar.gz

spec files:
-----------
--- bzip2.spec
+++ bzip2.spec
@@ -1,16 +1,14 @@
 #specfile originally created for Fedora, modified for Moblin Linux
-%define library_version 1.0.4
+%define library_version 1.0.6
 Summary: A file compression utility
 Name: bzip2
-Version: 1.0.5
+Version: 1.0.6
 Release: 2%{?dist}
 License: BSD
 Group: Applications/File
 URL: http://www.bzip.org/
 Source: http://www.bzip.org/%{version}/bzip2-%{version}.tar.gz
-Patch0: bzip2-1.0.4-saneso.patch
-Patch5: bzip2-1.0.4-cflags.patch
-Patch6: bzip2-1.0.4-bzip2recover.patch
+Patch0: bzip2-1.0.4-bzip2recover.patch
 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 
 %description
@@ -44,9 +42,7 @@
 
 %prep
 %setup -q 
-%patch0 -p1 -b .saneso
-%patch5 -p1 -b .cflags
-%patch6 -p1 -b .bz2recover
+%patch0 -p1 -b .bz2recover
 
 %build
 

other changes:
--------------

++++++ bzip2-1.0.5.tar.gz -> bzip2-1.0.6.tar.gz
197702 lines of diff (skipped)

++++++ deleted files:
--- bzip2-1.0.4-cflags.patch
--- bzip2-1.0.4-saneso.patch