diff --git a/.gitignore b/.gitignore index 7ac1a98..eecca2f 100644 --- a/.gitignore +++ b/.gitignore @@ -45,3 +45,4 @@ abrt-1.1.13.tar.gz /abrt-2.6.1.tar.gz /abrt-2.6.2.tar.gz /abrt-2.7.0.tar.gz +/abrt-2.7.1.tar.gz diff --git a/0012-dbus-ensure-expected-bytes-width-of-DBus-numbers.patch b/0012-dbus-ensure-expected-bytes-width-of-DBus-numbers.patch deleted file mode 100644 index f1418a0..0000000 --- a/0012-dbus-ensure-expected-bytes-width-of-DBus-numbers.patch +++ /dev/null @@ -1,32 +0,0 @@ -From 7fe8403abed51dc951aa497bf149c19d61a19555 Mon Sep 17 00:00:00 2001 -From: Jakub Filak -Date: Wed, 28 Oct 2015 00:21:12 +0100 -Subject: [PATCH] dbus: ensure expected bytes width of DBus numbers - -t - UINT64 - guint64 (unsigned long is not wide enough on 32bit architectures) - -Resolves: rhbz#1256456 - -Signed-off-by: Jakub Filak ---- - src/dbus/abrt-dbus.c | 4 ++-- - 1 file changed, 2 insertions(+), 2 deletions(-) - -diff --git a/src/dbus/abrt-dbus.c b/src/dbus/abrt-dbus.c -index 44778a2..500ddb2 100644 ---- a/src/dbus/abrt-dbus.c -+++ b/src/dbus/abrt-dbus.c -@@ -625,8 +625,8 @@ static void handle_method_call(GDBusConnection *connection, - - g_variant_builder_add(response_builder, "{s(its)}", - element_name, -- element_info->flags, -- size, -+ (gint32)element_info->flags, -+ (guint64)size, - element_info->content); - } - --- -2.5.0 - diff --git a/abrt.spec b/abrt.spec index 9467e37..50cd68d 100644 --- a/abrt.spec +++ b/abrt.spec @@ -48,18 +48,15 @@ Summary: Automatic bug detection and reporting tool Name: abrt -Version: 2.7.0 -Release: 2%{?dist} +Version: 2.7.1 +Release: 1%{?dist} License: GPLv2+ Group: Applications/System URL: https://abrt.readthedocs.org/ Source: https://fedorahosted.org/released/%{name}/%{name}-%{version}.tar.gz -# don't remove this patch, packages in rawhide are not signed! -Patch0: disable-OpenGPGCheck-in-Fedora-Rawhide.patch # git format-patch %%{Version} --topo-order -N -M; # i=1; for p in `ls 0*.patch`; do printf "Patch%04d: %s\n" $i $p; ((i++)); done -Patch0012: 0012-dbus-ensure-expected-bytes-width-of-DBus-numbers.patch # '%%autosetup -S git' -> git BuildRequires: git @@ -757,7 +754,7 @@ killall abrt-dbus >/dev/null 2>&1 || : %{_mandir}/man5/abrt_event.conf.5.gz %config(noreplace) %{_sysconfdir}/libreport/events.d/smart_event.conf %{_mandir}/man5/smart_event.conf.5.gz -%dir %attr(0751, abrt, abrt) %{_localstatedir}/spool/%{name} +%dir %attr(0751, root, abrt) %{_localstatedir}/spool/%{name} %dir %attr(0700, abrt, abrt) %{_localstatedir}/spool/%{name}-upload # abrtd runs as root %dir %attr(0755, root, root) %{_localstatedir}/run/%{name} @@ -887,6 +884,7 @@ killall abrt-dbus >/dev/null 2>&1 || : %{_mandir}/man*/abrt-action-analyze-core.* %{_mandir}/man*/abrt-action-analyze-vulnerability.* %{_mandir}/man*/abrt-action-perform-ccpp-analysis.* +%{_mandir}/man*/abrt-dump-journal-core.* %files addon-upload-watch %defattr(-,root,root,-) @@ -940,7 +938,9 @@ killall abrt-dbus >/dev/null 2>&1 || : %{_initrddir}/abrt-xorg %endif %{_bindir}/abrt-dump-xorg +%{_bindir}/abrt-dump-journal-xorg %{_mandir}/man1/abrt-dump-xorg.1* +%{_mandir}/man1/abrt-dump-journal-xorg.1* %if %{?have_kexec_tools} == 1 %files addon-vmcore @@ -1078,6 +1078,19 @@ killall abrt-dbus >/dev/null 2>&1 || : %config(noreplace) %{_sysconfdir}/profile.d/abrt-console-notification.sh %changelog +* Mon Nov 23 2015 Jakub Filak 2.7.1-1 +- CVE-2015-5287: switch owner of /var/spool/abrt to 'root' +- CVE-2015-5287: ccpp: save abrt core files only if DebugLevel > 0 +- CVE-2015-5287: ccpp: save abrt core files only to new files +- CVE-2015-5287: abrt configuration: introduce DebugLevel +- CVE-2015-5273: a-a-i-d-to-abrt-cache: make own random temporary directory +- ccpp: make crashes of processes with locked memory not-reportable +- xorg: introduce tool abrt-dump-journal-xorg +- abrt-xorg.service: change due to abrt-dump-journal-xorg +- a-d-journal-core: set root owner for created dump directory +- spec: add missing man page for abrt-dump-journal-core +- Resolves: #1262252, #1284557 + * Wed Oct 28 2015 Jakub Filak 2.7.0-2 - Fix broken problem details in abrt-cli/gnome-abrt - Resolves: #1256456 diff --git a/disable-OpenGPGCheck-in-Fedora-Rawhide.patch b/disable-OpenGPGCheck-in-Fedora-Rawhide.patch deleted file mode 100644 index 11d8c3e..0000000 --- a/disable-OpenGPGCheck-in-Fedora-Rawhide.patch +++ /dev/null @@ -1,26 +0,0 @@ -From 1ef034096efe367af85f568bc982af969124003b Mon Sep 17 00:00:00 2001 -From: rpm-build -Date: Mon, 10 Feb 2014 09:39:07 +0100 -Subject: [PATCH] disable OpenGPGCheck in Fedora Rawhide - -Packages in Fedora Rawhide are not signed. ---- - src/daemon/abrt-action-save-package-data.conf | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/src/daemon/abrt-action-save-package-data.conf b/src/daemon/abrt-action-save-package-data.conf -index 3d35bb6..e3f724a 100644 ---- a/src/daemon/abrt-action-save-package-data.conf -+++ b/src/daemon/abrt-action-save-package-data.conf -@@ -3,7 +3,7 @@ - # the list of public keys used to check the signature is - # in the file gpg_keys - # --OpenGPGCheck = yes -+OpenGPGCheck = no - - # Blacklisted packages - # --- -1.8.3.1 - diff --git a/sources b/sources index ce9bff2..606202a 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -1e132c42d1f0161db95c82c0c720e697 abrt-2.7.0.tar.gz +fee268003142e35fc72fa8a52941dd80 abrt-2.7.1.tar.gz