[packages/sftp] - fix format string error - rel 8

baggins baggins at pld-linux.org
Thu Oct 20 09:19:11 CEST 2016


commit 1fc0ba32441048ce40f7570f4f53f052ca3cbae6
Author: Jan Rękorajski <baggins at pld-linux.org>
Date:   Thu Oct 20 09:18:58 2016 +0200

    - fix format string error
    - rel 8

 format-security.patch | 11 +++++++++++
 sftp.spec             |  4 +++-
 2 files changed, 14 insertions(+), 1 deletion(-)
---
diff --git a/sftp.spec b/sftp.spec
index ac88bbc..4f2e175 100644
--- a/sftp.spec
+++ b/sftp.spec
@@ -2,13 +2,14 @@ Summary:	sftp: a ftp-replacement over an rsh/ssh tunnel
 Summary(pl.UTF-8):	Zamiennik ftp działający poprzez tunel rsh/ssh
 Name:		sftp
 Version:	0.9.9
-Release:	7
+Release:	8
 License:	GPL
 Group:		Applications/Networking
 Source0:	http://www.xbill.org/sftp/download/old/%{name}-%{version}.tar.gz
 # Source0-md5:	9880c86ed928997da069bdb108bf4ad9
 Patch0:		%{name}-DESTDIR.patch
 Patch1:		%{name}-open.patch
+Patch2:		format-security.patch
 BuildRequires:	autoconf
 BuildRequires:	automake
 BuildRequires:	readline-devel >= 4.1
@@ -33,6 +34,7 @@ dwa programy - sftp i sftpserv.
 %setup -q
 %patch0 -p1
 %patch1 -p1
+%patch2 -p1
 
 %build
 %{__aclocal}
diff --git a/format-security.patch b/format-security.patch
new file mode 100644
index 0000000..0973202
--- /dev/null
+++ b/format-security.patch
@@ -0,0 +1,11 @@
+--- sftp-0.9.9/sftp.c~	2001-03-06 22:42:17.000000000 +0100
++++ sftp-0.9.9/sftp.c	2016-10-20 09:17:59.296238176 +0200
+@@ -211,7 +211,7 @@
+ 	if (nargs == 1) {
+ 		printf("Supported commands are:\n");
+ 		for (i = 0; action[i].str != NULL; i++) {
+-			printf(action[i].str);
++			puts(action[i].str);
+ 			if (i % 8 == 7)
+ 				putchar('\n');
+ 			else
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/sftp.git/commitdiff/1fc0ba32441048ce40f7570f4f53f052ca3cbae6



More information about the pld-cvs-commit mailing list