Hello community, here is the log from the commit of package balsa checked in at Thu Sep 20 16:28:20 CEST 2007. -------- --- GNOME/balsa/balsa.changes 2007-08-06 19:55:21.000000000 +0200 +++ /mounts/work_src_done/STABLE/balsa/balsa.changes 2007-09-20 16:07:07.000000000 +0200 @@ -1,0 +2,5 @@ +Thu Sep 20 16:06:58 CEST 2007 - sbrabec@suse.cz + +- Fixed IMAP4 stack overflow (#326732, GNOME#474366). + +------------------------------------------------------------------- New: ---- balsa-ir_fetch_seq_buffer_overflow.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ balsa.spec ++++++ --- /var/tmp/diff_new_pack.d25795/_old 2007-09-20 16:27:45.000000000 +0200 +++ /var/tmp/diff_new_pack.d25795/_new 2007-09-20 16:27:45.000000000 +0200 @@ -14,14 +14,15 @@ BuildRequires: bind bind-devel compface cyrus-sasl-gssapi fdupes gmime-devel gnutls-devel gpgme-devel gtksourceview-devel gtkspell-devel intltool krb5-devel libesmtp-devel libgnomeprintui-devel libgnomeui-devel libgtkhtml-devel libidl libnotify-devel openldap2 openldap2-devel pcre-devel perl-XML-Parser postfix scrollkeeper sqlite-devel update-desktop-files License: GPL v2 or later Group: Productivity/Networking/Email/Clients -Autoreqprov: on +AutoReqProv: on Version: 2.3.17 -Release: 15 +Release: 39 Requires: %{name}-lang = %{version} Summary: The GNOME Mail Program -URL: http://balsa.gnome.org/ +Url: http://balsa.gnome.org/ Source: %{name}-%{version}.tar.bz2 Patch0: dont-disable-deprecated.patch +Patch1: balsa-ir_fetch_seq_buffer_overflow.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -81,7 +82,7 @@ %prep %setup -q %patch0 -p1 -### %patch1 -p1 +%patch1 %build autoreconf -f -i @@ -106,7 +107,6 @@ %makeinstall %suse_update_desktop_file %name Network Email %find_lang balsa - %fdupes $RPM_BUILD_ROOT%{_datadir} %clean @@ -129,8 +129,9 @@ %config %{_sysconfdir}/sound/events/*.soundlist %files lang -f balsa.lang - %changelog +* Thu Sep 20 2007 - sbrabec@suse.cz +- Fixed IMAP4 stack overflow (#326732, GNOME#474366). * Mon Aug 06 2007 - maw@suse.de - Split out a -lang subpackage. * Fri Aug 03 2007 - maw@suse.de ++++++ balsa-ir_fetch_seq_buffer_overflow.patch ++++++ http://bugzilla.gnome.org/show_bug.cgi?id=474366 Index: libbalsa/imap/imap-handle.c ================================================================================ --- libbalsa/imap/imap-handle.c +++ libbalsa/imap/imap-handle.c @@ -3294,7 +3294,7 @@ if(seqno<1 || seqno > h->exists) return IMR_PROTOCOL; if(sio_getc(h->sio) != '(') return IMR_PROTOCOL; do { - for(i=0; (c = sio_getc(h->sio)) != -1; i++) { + for(i=0; ((c = sio_getc(h->sio)) != -1) && (i < LONG_STRING - 1); i++) { c = toupper(c); if( !( (c >='A' && c<='Z') || (c >='0' && c<='9') || c == '.') ) break; atom[i] = c; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org