Hello community, here is the log from the commit of package expect for openSUSE:Factory checked in at Thu Aug 6 17:11:19 CEST 2009. -------- --- expect/expect.changes 2008-10-28 17:58:57.000000000 +0100 +++ expect/expect.changes 2009-05-25 16:32:14.000000000 +0200 @@ -1,0 +2,6 @@ +Mon May 25 16:30:18 CEST 2009 - max@suse.de + +- Fix buffer overflow in the "stty" command + (bnc#506873, bnc#501291). + +------------------------------------------------------------------- calling whatdependson for head-i586 New: ---- expect-stty.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ expect.spec ++++++ --- /var/tmp/diff_new_pack.Rlnwbr/_old 2009-08-06 17:08:45.000000000 +0200 +++ /var/tmp/diff_new_pack.Rlnwbr/_new 2009-08-06 17:08:45.000000000 +0200 @@ -1,7 +1,7 @@ # # spec file for package expect (Version 5.44.1.11) # -# Copyright (c) 2008 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -22,7 +22,7 @@ Name: expect BuildRequires: tcl-devel Version: 5.44.1.11 -Release: 1 +Release: 2 BuildRoot: %{_tmppath}/%{name}-%{version}-build Group: Development/Languages/Tcl License: Public Domain, Freeware @@ -32,6 +32,7 @@ Source1: expect-rpmlintrc Patch1: expect.patch Patch2: expect-fixes.patch +Patch3: expect-stty.patch %description Expect is a tool primarily for automating interactive applications, @@ -69,6 +70,7 @@ %setup -q %patch1 %patch2 +%patch3 %build autoreconf ++++++ expect-stty.patch ++++++ --- exp_tty.c +++ exp_tty.c @@ -497,7 +497,7 @@ /* if no result, make a crude one */ if (0 == strcmp(Tcl_GetString(Tcl_GetObjResult(interp)),"")) { - char buf [10]; + char buf [11]; sprintf(buf,"%sraw %secho", (was_raw?"":"-"), (was_echo?"":"-")); @@ -635,7 +635,7 @@ return(TCL_ERROR); } if (cmd_is_stty) { - char buf [10]; + char buf [11]; sprintf(buf,"%sraw %secho", (was_raw?"":"-"), (was_echo?"":"-")); @@ -699,7 +699,7 @@ } if (cmd_is_stty) { - char buf [10]; + char buf [11]; sprintf(buf,"%sraw %secho", (was_raw?"":"-"), (was_echo?"":"-")); ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org