Hello community, here is the log from the commit of package fvwm2 checked in at Tue Nov 14 19:10:38 CET 2006. -------- --- fvwm2/fvwm2.changes 2006-09-05 14:38:38.000000000 +0200 +++ /mounts/work_src_done/STABLE/fvwm2/fvwm2.changes 2006-11-14 16:24:07.000000000 +0100 @@ -1,0 +2,5 @@ +Tue Nov 14 16:17:36 CET 2006 - lmichnovic@suse.cz + +- fixed possible command execution (sec-fvwmname.patch) [#220708] + +------------------------------------------------------------------- New: ---- fvwm-2.5.16-sec-fvwmname.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ fvwm2.spec ++++++ --- /var/tmp/diff_new_pack.Iy6CLk/_old 2006-11-14 19:09:52.000000000 +0100 +++ /var/tmp/diff_new_pack.Iy6CLk/_new 2006-11-14 19:09:52.000000000 +0100 @@ -12,13 +12,13 @@ Name: fvwm2 BuildRequires: freetype2-devel fribidi-devel gcc-c++ gtk-devel gtkdoc imlib-config imlib-devel libpng-devel libstroke-devel pkgconfig readline-devel update-desktop-files -License: BSD +License: BSD License and BSD-like Group: System/GUI/Other Provides: fvwmicns windowmanager xpmroot Obsoletes: fvwm xpmroot Autoreqprov: on Version: 2.5.16 -Release: 9 +Release: 25 Summary: Improved Version of FVWM Window Manager URL: http://www.fvwm.org Source0: fvwm-%{version}.tar.bz2 @@ -31,6 +31,7 @@ Patch0: fvwm-configure.patch Patch1: fvwm-%{version}-gcc-warnings.patch Patch2: fvwm-%{version}-ia64.patch +Patch3: fvwm-%{version}-sec-fvwmname.patch %description FVWM is a virtual desktop window manager for the X Window System. @@ -66,6 +67,7 @@ %patch0 %patch1 %patch2 +%patch3 mkdir icons tar -C icons -j -x -v -f $RPM_SOURCE_DIR/fvwm_icons.tar.bz2 # @@ -160,6 +162,8 @@ %endif %changelog -n fvwm2 +* Tue Nov 14 2006 - lmichnovic@suse.cz +- fixed possible command execution (sec-fvwmname.patch) [#220708] * Tue Sep 05 2006 - lmichnovic@suse.cz - distinquishing from X.org version which config file to install (Source4 resp. Source5) ++++++ fvwm-2.5.16-sec-fvwmname.patch ++++++ --- bin/fvwm-menu-directory.in +++ bin/fvwm-menu-directory.in @@ -279,7 +279,7 @@ my $itemStr = $dir && $itemF_eval? &evalItem($_name, $dir): $_name; $itemStr = escapeItemName($itemStr); my $act = !$dir || $checkSubdirs && !-x $dir? "Nop": !$reuse? - qq(Popup ") . escapeFvwmName($dir) . qq("$submenuPos): + qq(Popup ") . escapeFileName($dir) . qq("$submenuPos): qq(PipeRead 'echo ") . escapeFileName($dir) . qq(" >$dirFile; ) . qq(echo Menu ") . escapeFvwmName($name) . qq(" WarpTitle'); return qq(+ "$iconDStr$itemStr" $act\n); ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org
participants (1)
-
root@suse.de