Hello community, here is the log from the commit of package fortune for openSUSE:Factory checked in at Fri Jul 2 16:30:17 CEST 2010. -------- --- fortune/fortune.changes 2009-08-10 14:34:15.000000000 +0200 +++ fortune/fortune.changes 2010-06-30 16:29:46.000000000 +0200 @@ -1,0 +2,5 @@ +Wed Jun 30 16:29:27 CEST 2010 - meissner@suse.de + +- fixed use-after-free issue bnc#618641 + +------------------------------------------------------------------- calling whatdependson for head-i586 New: ---- fortune-fixfree.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ fortune.spec ++++++ --- /var/tmp/diff_new_pack.kklxJt/_old 2010-07-02 16:28:51.000000000 +0200 +++ /var/tmp/diff_new_pack.kklxJt/_new 2010-07-02 16:28:51.000000000 +0200 @@ -1,7 +1,7 @@ # # spec file for package fortune (Version 1.0) # -# Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -20,11 +20,11 @@ Url: ftp://sunsite.unc.edu/pub/Linux/games/amusements/fortune/ Name: fortune -License: BSD 3-clause (or similar) +License: BSD3c(or similar) Group: Amusements/Toys/Other AutoReqProv: on Version: 1.0 -Release: 995 +Release: 996 Summary: Random Saying Source: ftp://ftp.jurix.org/pub/jurix/source/games/fortune.tar.bz2 Patch: fortune.dif @@ -32,6 +32,7 @@ Patch2: %{name}-%{version}-filepermissions.patch Patch3: fortune-decl.patch Patch4: fortune-fix-missing-closedir.patch +Patch5: fortune-fixfree.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -54,6 +55,7 @@ %patch2 %patch3 %patch4 -p1 +%patch5 -p1 %build make all ++++++ fortune-fixfree.patch ++++++ Index: fortune/fortune/fortune.c =================================================================== --- fortune.orig/fortune/fortune.c +++ fortune/fortune/fortune.c @@ -544,11 +544,11 @@ over: fprintf(stderr, "fortune:%s not a fortune file or directory\n", path); - free((char *) fp); if (was_malloc) free(path); do_free(fp->datfile); do_free(fp->posfile); + free((char *) fp); do_free(offensive); return FALSE; } ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org