Hello community, here is the log from the commit of package icecast for openSUSE:Factory checked in at 2017-12-19 10:58:02 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/icecast (Old) and /work/SRC/openSUSE:Factory/.icecast.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "icecast" Tue Dec 19 10:58:02 2017 rev:32 rq:557844 version:2.4.3 Changes: -------- --- /work/SRC/openSUSE:Factory/icecast/icecast.changes 2015-04-10 09:53:18.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.icecast.new/icecast.changes 2017-12-19 10:58:09.114322347 +0100 @@ -1,0 +2,13 @@ +Sun Dec 17 16:25:42 UTC 2017 - avindra@opensuse.org + +- update to version 2.4.3: + * Fixes Windows only vulnerability (CVE-2005-0837), where an + attacker could access the raw XSLT template file by appending a + dot “.” to the URL. To be clear, no runtime information could be + accessed this way. +- cleanup spec file with spec-cleaner +- fix bad line endings warning in CSS file +- rebase icecast-fix-no-add-needed.patch +- replace PreReq statements with Requires(pre) + +------------------------------------------------------------------- Old: ---- icecast-2.4.2.tar.gz New: ---- icecast-2.4.3.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ icecast.spec ++++++ --- /var/tmp/diff_new_pack.mjx73Z/_old 2017-12-19 10:58:09.842287205 +0100 +++ /var/tmp/diff_new_pack.mjx73Z/_new 2017-12-19 10:58:09.842287205 +0100 @@ -1,7 +1,7 @@ # # spec file for package icecast # -# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: icecast -Version: 2.4.2 +Version: 2.4.3 Release: 0 Summary: Audio Streaming Server License: GPL-2.0+ @@ -35,6 +35,7 @@ # PATCH-FEATURE-OPENSUSE -- mp3 frame validation Patch100: icecast-mp3-frame-validation.patch BuildRequires: curl-devel +BuildRequires: dos2unix BuildRequires: libtheora-devel BuildRequires: libtool BuildRequires: libvorbis-devel @@ -42,11 +43,9 @@ BuildRequires: openssl-devel BuildRequires: speex-devel BuildRequires: systemd-rpm-macros -%{?systemd_requires} -PreReq: /usr/sbin/groupadd -PreReq: /usr/sbin/useradd +Requires(pre): shadow Recommends: logrotate -BuildRoot: %{_tmppath}/%{name}-%{version}-build +%{?systemd_requires} %description Icecast is a MP3 and OGG streaming server able to serve many clients @@ -77,21 +76,24 @@ make %{?_smp_mflags} %install -make install DESTDIR=%{buildroot} docdir=%{_docdir}/%{name} +%make_install docdir=%{_docdir}/%{name} # service file install -d -m 0755 %{buildroot}%{_sbindir} install -d "%{buildroot}%{_unitdir}/system" install -D -m 0644 %{SOURCE2} %{buildroot}%{_unitdir}/icecast.service -ln -s /usr/sbin/service %{buildroot}%{_sbindir}/rc%{name} +ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rc%{name} # create missing dirs install -d -m 0755 %{buildroot}%{_localstatedir}/{lib,log}/%{name} # logrotate -install -D -m 0644 %{SOURCE3} %{buildroot}/etc/logrotate.d/%{name} +install -D -m 0644 %{SOURCE3} %{buildroot}%{_sysconfdir}/logrotate.d/%{name} + +# fix warning about bad line endings +dos2unix %{buildroot}%{_docdir}/icecast/assets/css/style.css %pre -/usr/sbin/groupadd -r %{name} >/dev/null 2>&1 || : -/usr/sbin/useradd -g %{name} -s /bin/false -r -c "Icecast streaming server" -d %{_localstatedir}/lib/%{name} %{name} >/dev/null 2>&1 || : +%{_sbindir}/groupadd -r %{name} >/dev/null 2>&1 || : +%{_sbindir}/useradd -g %{name} -s /bin/false -r -c "Icecast streaming server" -d %{_localstatedir}/lib/%{name} %{name} >/dev/null 2>&1 || : %service_add_pre %{name}.service %preun @@ -104,7 +106,6 @@ %service_del_postun %{name}.service %files -%defattr(-,root,root) %dir %doc %{_docdir}/%{name} %doc %{_docdir}/%{name}/README %doc %{_docdir}/%{name}/AUTHORS @@ -113,7 +114,7 @@ %doc %{_docdir}/%{name}/TODO %doc %{_docdir}/%{name}/ChangeLog %config(noreplace) %attr(640,root,%{name}) %{_sysconfdir}/%{name}.xml -%config(noreplace) /etc/logrotate.d/%{name} +%config(noreplace) %{_sysconfdir}/logrotate.d/%{name} %{_bindir}/icecast %{_datadir}/icecast %{_sbindir}/rc%{name} @@ -123,7 +124,6 @@ %attr(750,%{name},%{name}) %{_localstatedir}/log/%{name} %files doc -%defattr(-,root,root) %doc %{_docdir}/%{name} %exclude %{_docdir}/%{name}/README %exclude %{_docdir}/%{name}/AUTHORS ++++++ icecast-2.4.2.tar.gz -> icecast-2.4.3.tar.gz ++++++ ++++ 20801 lines of diff (skipped) ++++++ icecast-fix-no-add-needed.patch ++++++ --- /var/tmp/diff_new_pack.mjx73Z/_old 2017-12-19 10:58:10.070276199 +0100 +++ /var/tmp/diff_new_pack.mjx73Z/_new 2017-12-19 10:58:10.070276199 +0100 @@ -5,7 +5,7 @@ --- a/configure.in +++ b/configure.in @@ -1,6 +1,7 @@ - AC_INIT([Icecast], [2.4.2], [icecast@xiph.org]) + AC_INIT([Icecast], [2.4.3], [icecast@xiph.org]) AC_PREREQ(2.54) +AC_CONFIG_MACRO_DIR([m4])