Hello community, here is the log from the commit of package aria2 for openSUSE:Factory checked in at Mon Nov 2 16:06:49 CET 2009. -------- --- aria2/aria2.changes 2009-08-22 03:37:23.000000000 +0200 +++ /mounts/work_src_done/STABLE/aria2/aria2.changes 2009-11-02 10:32:06.000000000 +0100 @@ -1,0 +2,5 @@ +Mon Nov 2 09:01:29 UTC 2009 - lnussel@suse.de + +- fix format string problem (bnc#547318, CVE-2009-3617) + +------------------------------------------------------------------- calling whatdependson for head-i586 New: ---- aria2-1.5.2-CVE-2009-3617.diff ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ aria2.spec ++++++ --- /var/tmp/diff_new_pack.uEm9yt/_old 2009-11-02 16:06:42.000000000 +0100 +++ /var/tmp/diff_new_pack.uEm9yt/_new 2009-11-02 16:06:42.000000000 +0100 @@ -30,13 +30,14 @@ Name: aria2 Version: 1.5.2 -Release: 1 +Release: 2 %define pkg_version 1.5.2 Summary: Parallelizing Multi-Protocol Utility for Downloading Files Source: http://prdownloads.sourceforge.net/aria2/aria2-%{pkg_version}.tar.bz2 Patch1: aria2-cares-static.patch Patch2: aria2-cares-lib64.patch Patch4: aria2-atoi.patch +Patch5: aria2-1.5.2-CVE-2009-3617.diff Url: http://sourceforge.net/projects/aria2 Group: Productivity/Networking/Other License: GNU General Public License (GPL) @@ -109,6 +110,7 @@ %endif #%_lib==lib64 %endif #cares %patch4 +%patch5 -p1 %build export CFLAGS="%{optflags} -fPIC" ++++++ aria2-1.5.2-CVE-2009-3617.diff ++++++ Index: aria2-1.5.2/src/AbstractCommand.cc =================================================================== --- aria2-1.5.2.orig/src/AbstractCommand.cc +++ aria2-1.5.2/src/AbstractCommand.cc @@ -280,7 +280,6 @@ bool AbstractCommand::prepareForRetry(ti void AbstractCommand::onAbort() { if(!req.isNull()) { - logger->debug(req->getCurrentUrl().c_str()); // TODO This might be a problem if the failure is caused by proxy. e->_requestGroupMan->getOrCreateServerStat(req->getHost(), req->getProtocol())->setError(); ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org