Hello community, here is the log from the commit of package moonlight for openSUSE:11.4 checked in at Thu Apr 7 00:19:48 CEST 2011. -------- --- old-versions/11.4/all/moonlight/moonlight.changes 2011-02-22 23:26:40.000000000 +0100 +++ 11.4/moonlight/moonlight.changes 2011-04-06 20:21:58.000000000 +0200 @@ -1,0 +2,9 @@ +Wed Apr 6 17:53:28 UTC 2011 - ajorgensen@novell.com + +- Update to Moonlight 2.4.1 for bnc#667077 + CVE-2011-0989: modification of read-only values via RuntimeHelpers.InitializeArray + CVE-2011-0990: buffer overflow due to race condition in in Array.FastCopy + CVE-2011-0991: use-after-free due to DynamicMethod resurrection + CVE-2011-0992: information leak due to improper thread finalization + +------------------------------------------------------------------- Package does not exist at destination yet. Using Fallback old-versions/11.4/all/moonlight Destination is old-versions/11.4/UPDATES/all/moonlight calling whatdependson for 11.4-i586 Old: ---- moonlight-2.4.tar.bz2 New: ---- moonlight-2.4.1.tar.bz2 non-desktop.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ moonlight.spec ++++++ --- /var/tmp/diff_new_pack.UhMp96/_old 2011-04-07 00:19:19.000000000 +0200 +++ /var/tmp/diff_new_pack.UhMp96/_new 2011-04-07 00:19:19.000000000 +0200 @@ -30,17 +30,17 @@ %endif # The version we must have on the system to build the plugin -%define required_mono 2.6 +%define required_mono 2.0 # If the system mono is older we must disable the desktop parts # because there will be problems with libmono.so %define with_desktop yes %define desktop_support --enable-desktop-support --enable-sdk # Comment this section out if you know you have mono >= required_mono -#if 0%{?suse_version} < 1120 -#define with_desktop no -#define desktop_support --disable-desktop-support --disable-sdk -#endif +%if 0%{?suse_version} < 1120 +%define with_desktop no +%define desktop_support --disable-desktop-support --disable-sdk +%endif # The version included with the sources (for the plugin assemblies) %define included_mono 2.6.1 @@ -55,13 +55,14 @@ Group: Productivity/Multimedia/Other Summary: Novell Moonlight Url: http://go-mono.com/moonlight/ -Version: 2.4 -Release: 1.<RELEASE2> +Version: 2.4.1 +Release: 0.<RELEASE2> BuildRoot: %{_tmppath}/%{name}-%{version}-build Source0: %{name}-%{version}.tar.bz2 Source1: mono-%{included_mono}.tar.bz2 Source2: mono-basic-%{included_basic}.tar.bz2 -Patch0: %{name}-2.4-underlinking.patch +Patch0: moonlight-2.4-underlinking.patch +Patch1: non-desktop.patch # Required to build the included mono BuildRequires: bison # Always required @@ -322,6 +323,7 @@ %setup -q -T -D -b 1 -n %{name}-%{version} %setup -q -T -D -b 2 -n %{name}-%{version} %patch0 +%patch1 -p1 %build # The plugin requires a complete build of it's own mono ++++++ mono-2.6.1.tar.bz2 ++++++ old-versions/11.4/all/moonlight/mono-2.6.1.tar.bz2 11.4/moonlight/mono-2.6.1.tar.bz2 differ: char 11, line 1 ++++++ moonlight-2.4.tar.bz2 -> moonlight-2.4.1.tar.bz2 ++++++ old-versions/11.4/all/moonlight/moonlight-2.4.tar.bz2 11.4/moonlight/moonlight-2.4.1.tar.bz2 differ: char 11, line 1 ++++++ non-desktop.patch ++++++ Index: moonlight-2.4.1/tools/Makefile.am =================================================================== --- moonlight-2.4.1.orig/tools/Makefile.am +++ moonlight-2.4.1/tools/Makefile.am @@ -1,7 +1,11 @@ SUBDIRS = mopen generators if INCLUDE_MANAGED_CODE #don't include respack because the toplevel includes that already -SUBDIRS += xamlg xaml2html mxap munxap unsign sockpol +SUBDIRS += xamlg xaml2html mxap unsign sockpol +endif + +if INCLUDE_DESKTOP_MANAGED_CODE +SUBDIRS += munxap endif DIST_SUBDIRS = $(SUBDIRS) moonvisi respack # added as dist_subdir so as not to break make dist ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org