Hello community, here is the log from the commit of package rsync for openSUSE:11.3 checked in at Mon Apr 4 16:47:35 CEST 2011. -------- --- old-versions/11.3/all/rsync/rsync.changes 2010-01-04 15:27:13.000000000 +0100 +++ 11.3/rsync/rsync.changes 2011-04-04 11:57:27.000000000 +0200 @@ -1,0 +2,5 @@ +Mon Apr 4 09:22:43 UTC 2011 - puzel@novell.com + +- add rsync-CVE-2011-1097.patch (bnc#684387) + +------------------------------------------------------------------- Package does not exist at destination yet. Using Fallback old-versions/11.3/all/rsync Destination is old-versions/11.3/UPDATES/all/rsync calling whatdependson for 11.3-i586 New: ---- rsync-CVE-2011-1097.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ rsync.spec ++++++ --- /var/tmp/diff_new_pack.jUicR4/_old 2011-04-04 16:47:22.000000000 +0200 +++ /var/tmp/diff_new_pack.jUicR4/_new 2011-04-04 16:47:22.000000000 +0200 @@ -1,7 +1,7 @@ # -# spec file for package rsync (Version 3.0.7) +# spec file for package rsync # -# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -22,7 +22,7 @@ Name: rsync Summary: Replacement for RCP/mirror that has Many More Features Version: 3.0.7 -Release: 1 +Release: 4.<RELEASE2> License: GPLv3+ Group: Productivity/Networking/Other AutoReqProv: on @@ -38,6 +38,7 @@ Patch3: system-zlib.diff #PATCH-FIX-UPSTREAM rsync-3.0.5-doc-fix.patch bnc487591 petr.uzel@suse.cz -- based on upstream changes to rsync.yo Patch4: rsync-3.0.5-doc-fix.patch +Patch5: rsync-CVE-2011-1097.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build PreReq: %fillup_prereq %insserv_prereq sed grep BuildRequires: libacl-devel libpng openslp-devel @@ -77,6 +78,7 @@ patch -p1 < patches/xattrs.diff patch -p1 < patches/slp.diff %patch4 -p1 +%patch5 -p1 %build autoheader ++++++ rsync-CVE-2011-1097.patch ++++++ diff -up rsync-3.0.7/flist.c.orig rsync-3.0.7/flist.c --- rsync-3.0.7/flist.c.orig 2009-12-21 23:40:41.000000000 +0100 +++ rsync-3.0.7/flist.c 2011-04-01 13:57:35.195843930 +0200 @@ -52,12 +52,9 @@ extern int preserve_hard_links; extern int preserve_devices; extern int preserve_specials; extern int delete_during; -extern int uid_ndx; -extern int gid_ndx; extern int eol_nulls; extern int relative_paths; extern int implied_dirs; -extern int file_extra_cnt; extern int ignore_perishable; extern int non_perishable_cnt; extern int prune_empty_dirs; @@ -70,6 +67,7 @@ extern int use_safe_inc_flist; extern int need_unsorted_flist; extern int sender_symlink_iconv; extern int unsort_ndx; +extern uid_t our_uid; extern struct stats stats; extern char *filesfrom_host; @@ -1284,10 +1282,12 @@ struct file_struct *make_file(const char } #endif file->mode = st.st_mode; - if (uid_ndx) /* Check uid_ndx instead of preserve_uid for del support */ + if (preserve_uid) F_OWNER(file) = st.st_uid; - if (gid_ndx) /* Check gid_ndx instead of preserve_gid for del support */ + if (preserve_gid) F_GROUP(file) = st.st_gid; + if (am_generator && st.st_uid == our_uid) + file->flags |= FLAG_OWNED_BY_US; if (basename != thisname) file->dirname = lastdir; @@ -3039,13 +3039,14 @@ char *f_name(const struct file_struct *f * of the dirname string, and also indicates that "dirname" is a MAXPATHLEN * buffer (the functions we call will append names onto the end, but the old * dir value will be restored on exit). */ -struct file_list *get_dirlist(char *dirname, int dlen, int ignore_filter_rules) +struct file_list *get_dirlist(char *dirname, int dlen, int flags) { struct file_list *dirlist; char dirbuf[MAXPATHLEN]; int save_recurse = recurse; int save_xfer_dirs = xfer_dirs; int save_prune_empty_dirs = prune_empty_dirs; + int senddir_fd = flags & GDL_IGNORE_FILTER_RULES ? -2 : -1; if (dlen < 0) { dlen = strlcpy(dirbuf, dirname, MAXPATHLEN); @@ -3058,7 +3059,7 @@ struct file_list *get_dirlist(char *dirn recurse = 0; xfer_dirs = 1; - send_directory(ignore_filter_rules ? -2 : -1, dirlist, dirname, dlen, FLAG_CONTENT_DIR); + send_directory(senddir_fd, dirlist, dirname, dlen, FLAG_CONTENT_DIR); xfer_dirs = save_xfer_dirs; recurse = save_recurse; if (do_progress) diff -up rsync-3.0.7/generator.c.orig rsync-3.0.7/generator.c --- rsync-3.0.7/generator.c.orig 2009-12-23 20:36:27.000000000 +0100 +++ rsync-3.0.7/generator.c 2011-04-01 13:33:00.393859865 +0200 @@ -44,8 +44,6 @@ extern int preserve_hard_links; extern int preserve_executability; extern int preserve_perms; extern int preserve_times; -extern int uid_ndx; -extern int gid_ndx; extern int delete_mode; extern int delete_before; extern int delete_during; @@ -169,19 +167,12 @@ static enum delret delete_item(char *fbu do_chmod(fbuf, mode | S_IWUSR); if (S_ISDIR(mode) && !(flags & DEL_DIR_IS_EMPTY)) { - int save_uid_ndx = uid_ndx; /* This only happens on the first call to delete_item() since * delete_dir_contents() always calls us w/DEL_DIR_IS_EMPTY. */ - if (!uid_ndx) - uid_ndx = ++file_extra_cnt; ignore_perishable = 1; /* If DEL_RECURSE is not set, this just reports emptiness. */ ret = delete_dir_contents(fbuf, flags); ignore_perishable = 0; - if (!save_uid_ndx) { - --file_extra_cnt; - uid_ndx = 0; - } if (ret == DR_NOT_EMPTY || ret == DR_AT_LIMIT) goto check_ret; /* OK: try to delete the directory. */ @@ -294,7 +285,7 @@ static enum delret delete_dir_contents(c } strlcpy(p, fp->basename, remainder); - if (!(fp->mode & S_IWUSR) && !am_root && (uid_t)F_OWNER(fp) == our_uid) + if (!(fp->mode & S_IWUSR) && !am_root && fp->flags & FLAG_OWNED_BY_US) do_chmod(fname, fp->mode | S_IWUSR); /* Save stack by recursing to ourself directly. */ if (S_ISDIR(fp->mode)) { @@ -472,7 +463,6 @@ static void delete_in_dir(char *fbuf, st struct file_list *dirlist; char delbuf[MAXPATHLEN]; int dlen, i; - int save_uid_ndx = uid_ndx; if (!fbuf) { change_local_filter_dir(NULL, 0, 0); @@ -504,9 +494,6 @@ static void delete_in_dir(char *fbuf, st return; } - if (!uid_ndx) - uid_ndx = ++file_extra_cnt; - dirlist = get_dirlist(fbuf, dlen, 0); /* If an item in dirlist is not found in flist, delete it @@ -526,7 +513,7 @@ static void delete_in_dir(char *fbuf, st * a delete_item call with a DEL_MAKE_ROOM flag. */ if (flist_find_ignore_dirness(cur_flist, fp) < 0) { int flags = DEL_RECURSE; - if (!(fp->mode & S_IWUSR) && !am_root && (uid_t)F_OWNER(fp) == our_uid) + if (!(fp->mode & S_IWUSR) && !am_root && fp->flags & FLAG_OWNED_BY_US) flags |= DEL_NO_UID_WRITE; f_name(fp, delbuf); if (delete_during == 2) { @@ -538,11 +525,6 @@ static void delete_in_dir(char *fbuf, st } flist_free(dirlist); - - if (!save_uid_ndx) { - --file_extra_cnt; - uid_ndx = 0; - } } /* This deletes any files on the receiving side that are not present on the @@ -1361,7 +1343,7 @@ static void recv_generator(char *fname, if (need_fuzzy_dirlist && S_ISREG(file->mode)) { strlcpy(fnamecmpbuf, dn, sizeof fnamecmpbuf); - fuzzy_dirlist = get_dirlist(fnamecmpbuf, -1, 1); + fuzzy_dirlist = get_dirlist(fnamecmpbuf, -1, GDL_IGNORE_FILTER_RULES); need_fuzzy_dirlist = 0; } diff -up rsync-3.0.7/log.c.orig rsync-3.0.7/log.c --- rsync-3.0.7/log.c.orig 2009-01-17 22:41:35.000000000 +0100 +++ rsync-3.0.7/log.c 2011-04-01 13:33:00.395860059 +0200 @@ -35,8 +35,6 @@ extern int msg_fd_out; extern int allow_8bit_chars; extern int protocol_version; extern int preserve_times; -extern int uid_ndx; -extern int gid_ndx; extern int progress_is_active; extern int stdout_format_has_i; extern int stdout_format_has_o_or_i; diff -up rsync-3.0.7/rsync.c.orig rsync-3.0.7/rsync.c --- rsync-3.0.7/rsync.c.orig 2009-12-19 22:39:49.000000000 +0100 +++ rsync-3.0.7/rsync.c 2011-04-01 13:33:00.397860255 +0200 @@ -42,8 +42,6 @@ extern int am_generator; extern int am_starting_up; extern int allow_8bit_chars; extern int protocol_version; -extern int uid_ndx; -extern int gid_ndx; extern int inc_recurse; extern int inplace; extern int flist_eof; diff -up rsync-3.0.7/rsync.h.orig rsync-3.0.7/rsync.h --- rsync-3.0.7/rsync.h.orig 2011-04-01 13:32:05.835718399 +0200 +++ rsync-3.0.7/rsync.h 2011-04-01 13:33:00.399860469 +0200 @@ -65,6 +65,7 @@ /* These flags are used in the live flist data. */ #define FLAG_TOP_DIR (1<<0) /* sender/receiver/generator */ +#define FLAG_OWNED_BY_US (1<<0) /* generator: set by make_file() for aux flists only */ #define FLAG_FILE_SENT (1<<1) /* sender/receiver/generator */ #define FLAG_DIR_CREATED (1<<1) /* generator */ #define FLAG_CONTENT_DIR (1<<2) /* sender/receiver/generator */ @@ -83,8 +84,12 @@ /* These flags are passed to functions but not stored. */ -#define FLAG_DIVERT_DIRS (1<<16)/* sender */ +#define FLAG_DIVERT_DIRS (1<<16) /* sender, but must be unique */ +/* These flags are for get_dirlist(). */ +#define GDL_IGNORE_FILTER_RULES (1<<0) + +/* Some helper macros for matching bits. */ #define BITS_SET(val,bits) (((val) & (bits)) == (bits)) #define BITS_SETnUNSET(val,onbits,offbits) (((val) & ((onbits)|(offbits))) == (onbits)) #define BITS_EQUAL(b1,b2,mask) (((unsigned)(b1) & (unsigned)(mask)) \ @@ -95,7 +100,7 @@ /* This is used when working on a new protocol version in CVS, and should * be a new non-zero value for each CVS change that affects the protocol. - * It must ALWAYS be 0 when the protocol goes final! */ + * It must ALWAYS be 0 when the protocol goes final (and NEVER before)! */ #define SUBPROTOCOL_VERSION 0 /* We refuse to interoperate with versions that are not in this range. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org