Hello community, here is the log from the commit of package rocksndiamonds.636 for openSUSE:12.1:Update checked in at 2012-07-27 18:28:59 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.1:Update/rocksndiamonds.636 (Old) and /work/SRC/openSUSE:12.1:Update/.rocksndiamonds.636.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "rocksndiamonds.636", Maintainer is "" Changes: -------- New Changes file: --- /dev/null 2012-07-06 19:40:38.919402255 +0200 +++ /work/SRC/openSUSE:12.1:Update/.rocksndiamonds.636.new/rocksndiamonds.changes 2012-07-27 18:29:01.000000000 +0200 @@ -0,0 +1,393 @@ +------------------------------------------------------------------- +Fri Jul 13 06:53:24 UTC 2012 - meissner@suse.com + +- do not create ~/.rocksndiamonds/ world writeable. + bnc#736261 / CVE-2011-4606 + +------------------------------------------------------------------- +Sun Apr 24 16:08:38 UTC 2011 - PVince81@opensuse.org + +- updated to version 3.3.0.1 +- moved game data to /usr/share instead of /usr/share/games +according to packaging conventions + +------------------------------------------------------------------- +Tue Nov 3 19:09:43 UTC 2009 - coolo@novell.com + +- updated patches to apply with fuzz=0 + +------------------------------------------------------------------- +Fri Oct 31 14:15:12 CET 2008 - meissner@suse.de + +- run fdupes + +------------------------------------------------------------------- +Wed Mar 5 15:43:46 CET 2008 - anosek@suse.cz + +- updated to version 3.2.4 + +* lots of improvements and bugfixes. See ChangeLog for the full list + +* title messages are now also searched in graphics artwork directory; + those found in graphics directory have precendence over those found + in level directory -- this handles title messages stored in graphics + directories as part of the artwork set, just like title images; this + makes sense, as corresponding special font definitions for messages + are usually defined in the same graphics artwork directory, and also + because title images and title messages that are combined in a level + set introduction should usually not be separated when the level set + is used with a different artwork set (e.g. using "override graphics") +* added use of hashes created from static lists (element tokens, image + config, font tokens) to speed up lookup of configuration parameters +* added "busy" animation when initializing program and loading artwork +* added initialization profiling for program startup (debugging only) +* added graphics engine directive "border.draw_masked_when_fading" that + enables/disables drawing of border mask over screen that is just faded +* added additional configuration directives for setup screen draw offset + menu.draw_xoffset.SETUP[XXX] and menu.draw_yoffset.SETUP[XXX] with XXX + in GAME, EDITOR, GRAPHICS, SOUND, ARTWORK, INPUT, SHORTCUTS_1, + SHORTCUTS_2, CHOOSE_ARTWORK, CHOOSE_OTHER (where "CHOOSE_ARTWORK" is + used to define draw offset on custom artwork selection screens and + "CHOOSE_OTHER" is used on all other list style selection screens, like + choosing game speed or screen mode for fullscreen mode) +* added eight pure decoration graphic definitions for the game panel +* added support for accessing native Diamond Caves II level packages +* added game panel control to display arbitrary elements on game panel +* added game panel control to display custom element score (globally + unique for identical custom elements) either as value or as element +* added ".draw_masked" and ".draw_order" to game panel control drawing +* added displaying of gravity state (on/off) as new game panel control +* added animation for game panel elements (similar to game elements) +* added new pseudo game mode "PANEL" to define panel fonts and graphics + - panel fonts now use ".PANEL" suffix instead of ".PLAYING" suffix + - panel graphics now use ".PANEL" suffix instead of ".DOOR" suffix + (else graphics would have to use ".PLAYING", which would be confusing) +* added attribute ".tile_size" for element style game panel controls +* added <space> key as additional valid key to use for confirm requester +* improved menu fading, adding separate fading definitions for entering + and leaving a "content" screen (in general), and optional definitions + for the special "content" screens SCORES, EDITOR, INFO and PLAYING +* added (currently invisible) setup option to define scroll delay value +* added option "game.forced_scroll_delay_value" to override user choice + of scroll delay value for certain level sets with "graphicsinfo.conf" +* replaced setup option "scroll delay: on/off" by new setup option that + directly allows selecting the desired scroll delay value from 0 to 8 +* added displaying of most game panel control elements (not animated) +* added new configuration directives to display additional game engine + values on the game control panel, like the following examples: + - game.panel.time_hh/time_mm/time_ss - level time in HH/MM/SS format + - game.panel.penguins - number of penguins to rescue + - game.panel.level_name - level name of current level +* added support for preview tile sizes "1" and "2" (1x1 and 2x2 pixels) +* added new player option "no centering when relocating" for "invisible" + teleportations to level areas that look exactly the same, giving the + illusion that the player did not relocate at all (this was the default + since 3.2.3, but caused visual problems with room creation in "Zelda") +* added new menu fading effect "melt", shamelessly stolen from "DOOM" +* improved menu fading, adding separate fading definitions for entering + and leaving a menu and for fading between menu and "content" screens +* improved menu fading, adding separate fading definitions for fading + between menu screens and fading between menu and "destination" screens +* titlemessage_initial_x and titlemessage_x set to "[DEFAULT]" in static + configuration (set from "[titlemessage_initial]" and "[titlemessage]") +* fading settings of "[titlemessage_initial]" and "[titlemessage]" set + to "[DEFAULT]" in static configuration (set from "[title_initial]" and + "[title]") +* improved title fading, allowing fading animation types "none", "fade" + and "crossfade" (including cross-fading of last title to main menu) + + ....... + +------------------------------------------------------------------- +Sat May 19 10:04:46 CEST 2007 - coolo@suse.de + +- remove X-SuSE-translate from desktop file + +------------------------------------------------------------------- +Mon Mar 5 09:59:48 CET 2007 - ssommer@suse.de + +- BuildRequires SDL_net-devel + +------------------------------------------------------------------- +Mon Feb 5 13:58:58 CET 2007 - anosek@suse.cz + +- updated to version 3.2.3 + * bugfix release + * some improvements on program startup performance + +------------------------------------------------------------------- +Mon Sep 11 13:09:53 CEST 2006 - anosek@suse.cz + +- updated to version 3.2.2 + - instant tape reloading for the last saved tape using "quick save/load" + - fixed bug that prevented solving levels without exit (like in Sokoban) + - fixed bug with quick loading tapes in fullscreen with EMC game engine + - fixed level time for EMC levels (needed for the upcoming EMC collection) + - added key shortcut "Alt + Enter" to toggle fullscreen mode at any time + - added support for mouse scroll wheel for all scrollbar gadgets + - added support for horizontal mouse wheel scrolling by holding "Shift" + - added support for single step mouse wheel scrolling by holding "Alt" + - improved down-scaling of images for better editor and preview graphics + +------------------------------------------------------------------- +Thu Aug 3 14:12:07 CEST 2006 - anosek@suse.cz + +- updated to version 3.2.0 + - finished new native game engine for Emerald Mine (Club) levels + - added all new elements from EMC engine also to R'n'D engine + - added selection between ECS and AGA graphics for EMC levels to setup + - added multi-player support for EMC game engine (with up to four players) + - added player switching (visual and quick) to R'n'D and EM game engine + - added key shortcut settings for switching player focus to setup menu + - added custom element actions for CE change page in level editor + - added "CE value" and "CE score" counters for custom elements + - added cascaded element lists to element list in level editor + - added dynamic element list with all elements used in current level + - added special Supaplex animations for Murphy being bored and sleeping + - added setup option to display element token name in level editor + - added up to five title screens for each level set to show after loading + - added credits pages to the "credits" section that were really missing + - lots of bugfixes and internal engine changes (see ChangeLog file) +- dropped obsolete patches + rocksndiamonds-3.1.1-overflow.patch + rocksndiamonds-3.1.1-userlevels.patch + + +------------------------------------------------------------------- +Wed Feb 1 16:15:17 CET 2006 - mmarek@suse.cz + +- fix user levels being readonly after last update + (userlevels.patch) (patch from upstream) + +------------------------------------------------------------------- +Tue Jan 31 18:44:26 CET 2006 - mmarek@suse.cz + +- fix buffer overflow reported by David Binderman + [#146444] (overflow.patch) + +------------------------------------------------------------------- +Wed Jan 25 21:41:11 CET 2006 - mls@suse.de + +- converted neededforbuild to BuildRequires + +------------------------------------------------------------------- +Mon Dec 19 16:50:37 CET 2005 - mmarek@suse.cz + +- added contributed levels +- added icon + +------------------------------------------------------------------- +Mon Dec 19 13:31:09 CET 2005 - mmarek@suse.cz + +- updated to 3.1.1 + +------------------------------------------------------------------- +Tue Apr 12 19:57:43 CEST 2005 - mcihar@suse.cz + +- fix for gcc 4 + +------------------------------------------------------------------- +Mon Jan 31 16:08:10 CET 2005 - ro@suse.de + +- fix build + +------------------------------------------------------------------- +Wed Aug 04 16:28:00 CEST 2004 - mcihar@suse.cz + +- update to 3.1.0 ++++ 196 more lines (skipped) ++++ between /dev/null ++++ and /work/SRC/openSUSE:12.1:Update/.rocksndiamonds.636.new/rocksndiamonds.changes New: ---- Contributions-1.2.0.tar.bz2 rocksndiamonds-3.3.0.1-smpeg.patch rocksndiamonds-3.3.0.1.tar.bz2 rocksndiamonds-CVE-2011-4606.patch rocksndiamonds.changes rocksndiamonds.desktop rocksndiamonds.png rocksndiamonds.spec ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ rocksndiamonds.spec ++++++ # # spec file for package rocksndiamonds # # Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # Name: rocksndiamonds BuildRequires: SDL_image-devel BuildRequires: SDL_mixer-devel BuildRequires: SDL_net-devel BuildRequires: fdupes BuildRequires: update-desktop-files Provides: rockdiam Obsoletes: rockdiam Version: 3.3.0.1 Release: 0 PreReq: permissions Summary: Arcade style game with stereo sounds License: GPL-2.0+ Group: Amusements/Games/Action/Arcade Url: http://www.artsoft.org/rocksndiamonds/ # Downloaded from http://www.artsoft.org/RELEASES/unix/rocksndiamonds/rocksndiamonds-3.3.0.1.t... # Deleted already compiled binary: rm rocksndiamonds # Repacked as tar.bz2 Source: %{name}-%{version}.tar.bz2 Source2: %{name}.png Source3: %{name}.desktop Source4: Contributions-1.2.0.tar.bz2 Patch: %{name}-%{version}-smpeg.patch Patch1: %{name}-CVE-2011-4606.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build %description A game like "Boulderdash" (C 64) or "Emerald Mine" (Amiga). Included are many levels known from the games "Boulderdash", "Emerald Mine", "Sokoban", "Supaplex" and "DX-Boulderdash", level elements for "Diamond Caves II" style games and a lot of new levels designed by other players. Some features: - joystick support for Linux, FreeBSD and DOS/Windows - local multiplayer support for all supported platforms - network multiplayer support for Unix platform - soft scrolling with 50 frames/s - stereo sound effects and music - music module support for SDL version (Unix/Win32) - fullscreen support for SDL version (Unix/Win32) - lots of additional levels available (over 10.000) Authors: -------- Holger Schemel <info@artsoft.org> %prep %setup -q if [ ! -f /usr/%_lib/libsmpeg.a ] ; then %patch -p1 fi %patch1 -p1 cp %{S:2} %{S:3} . pushd levels tar xjf %{S:4} popd %build make sdl \ OPTIONS="$RPM_OPT_FLAGS" \ XLIB_PATH=/usr/X11R6/%{_lib} \ RO_GAME_DIR=%{_datadir}/%{name} \ RW_GAME_DIR=%{_var}/games/%{name} %install rm -rf $RPM_BUILD_ROOT LIBDIR=$RPM_BUILD_ROOT%{_datadir}/%{name} SCOREDIR=$RPM_BUILD_ROOT%{_var}/games/%{name} install -m 755 -d $LIBDIR install -m 755 -d $SCOREDIR install -m 755 -d $RPM_BUILD_ROOT%{_bindir}/ install -m 755 -d $RPM_BUILD_ROOT%{_mandir}/man6 install -m 755 -d $RPM_BUILD_ROOT%{_datadir}/pixmaps cp -a graphics $LIBDIR cp -a sounds $LIBDIR cp -a music $LIBDIR cp -a levels $LIBDIR find $LIBDIR/levels -name '*.orig' | xargs rm find $LIBDIR -type f -exec chmod 644 \{\} \; find $LIBDIR -type d -exec chmod 755 \{\} \; install -m 755 %{name} $RPM_BUILD_ROOT%{_bindir} install -m 644 %{name}.1 $RPM_BUILD_ROOT%{_mandir}/man6/%{name}.6 install -m 644 %{name}.png $RPM_BUILD_ROOT%{_datadir}/pixmaps %suse_update_desktop_file -i %{name} Game ArcadeGame %fdupes $RPM_BUILD_ROOT %post %run_permissions %verifyscript %verify_permissions -e %{_bindir}/rocksndiamonds %clean rm -rf $RPM_BUILD_ROOT %files %defattr(-,root,root) %doc ChangeLog COPYING CREDITS README %doc %{_mandir}/man6/* %verify(not mode) %attr(0755,games,games) %{_bindir}/%{name} %{_datadir}/%{name} %{_datadir}/applications/%{name}.desktop %{_datadir}/pixmaps/%{name}.png %attr(775,games,games) %{_var}/games/%{name} %changelog ++++++ rocksndiamonds-3.3.0.1-smpeg.patch ++++++ diff -Naur rocksndiamonds-3.3.0.1/src/Makefile rocksndiamonds-3.3.0.1-new//src/Makefile --- rocksndiamonds-3.3.0.1/src/Makefile 2010-06-08 22:21:03.000000000 +0200 +++ rocksndiamonds-3.3.0.1-new//src/Makefile 2011-04-24 18:12:32.376229376 +0200 @@ -102,7 +102,7 @@ ifeq ($(TARGET),sdl) # compiling for SDL target SYS_CFLAGS = -DTARGET_SDL $(shell sdl-config --cflags) -SDL_LIBS = -lSDL_image -lSDL_mixer -lSDL_net -lsmpeg +SDL_LIBS = -lSDL_image -lSDL_mixer -lSDL_net SYS_LDFLAGS = $(SDL_LIBS) $(shell sdl-config --libs) endif ++++++ rocksndiamonds-CVE-2011-4606.patch ++++++ diff -up rocksndiamonds-3.3.0.1/src/libgame/setup.c.CVE-2011-4606 rocksndiamonds-3.3.0.1/src/libgame/setup.c --- rocksndiamonds-3.3.0.1/src/libgame/setup.c.CVE-2011-4606 2011-12-12 14:28:30.083078680 -0500 +++ rocksndiamonds-3.3.0.1/src/libgame/setup.c 2011-12-12 14:34:36.758744753 -0500 @@ -1293,11 +1293,14 @@ void sortTreeInfo(TreeInfo **node_first) #define MODE_W_ALL (S_IWUSR | S_IWGRP | S_IWOTH) #define MODE_X_ALL (S_IXUSR | S_IXGRP | S_IXOTH) +#define MODE_R_PRIVATE (S_IRUSR) #define MODE_W_PRIVATE (S_IWUSR) +#define MODE_X_PRIVATE (S_IXUSR) + #define MODE_W_PUBLIC (S_IWUSR | S_IWGRP) #define MODE_W_PUBLIC_DIR (S_IWUSR | S_IWGRP | S_ISGID) -#define DIR_PERMS_PRIVATE (MODE_R_ALL | MODE_X_ALL | MODE_W_PRIVATE) +#define DIR_PERMS_PRIVATE (MODE_R_PRIVATE | MODE_X_PRIVATE | MODE_W_PRIVATE) #define DIR_PERMS_PUBLIC (MODE_R_ALL | MODE_X_ALL | MODE_W_PUBLIC_DIR) #define FILE_PERMS_PRIVATE (MODE_R_ALL | MODE_W_PRIVATE) @@ -1456,7 +1459,8 @@ void createDirectory(char *dir, char *te if (running_setgid) posix_umask(last_umask & group_umask); else - dir_mode |= MODE_W_ALL; + if (permission_class == PERMS_PUBLIC) + dir_mode |= MODE_W_ALL; if (!fileExists(dir)) if (posix_mkdir(dir, dir_mode) != 0) ++++++ rocksndiamonds.desktop ++++++ [Desktop Entry] Categories=Game;ArcadeGame Encoding=UTF-8 Name=Rocks n Diamonds Exec=rocksndiamonds Terminal=false Icon=rocksndiamonds Type=Application -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org