source: projects/specs/trunk/r/rsync/rsync-vl.spec @ 8544

Revision 8544, 7.8 KB checked in by daisuke, 10 years ago (diff)

rsync: security fix

Line 
1Summary:     A program for synchronizing files over a network.
2Summary(ja): ネットワーク越しにファイルを同期させるプログラム
3Name: rsync
4Version: 3.1.0
5Release: 2%{_dist_release}
6Group: Applications/Internet
7License: GPLv3+
8URL: http://rsync.samba.org
9Source: ftp://rsync.samba.org/pub/rsync/rsync-%{version}.tar.gz
10Source1: ftp://rsync.samba.org/pub/rsync/rsync-patches-%{version}.tar.gz
11Source2: rsync.xinetd
12
13Patch0: ssh-6-option.diff
14# security fixes
15Patch100: rsync-3.1.1-dos.patch
16
17Prefix: %{_prefix}
18BuildRoot: %{_tmppath}/%{name}-%{version}-root
19
20BuildRequires: libacl-devel libattr-devel popt-devel
21
22Vendor: Project Vine
23Distribution: Vine Linux
24Packager: daisuke
25
26%description
27Rsync uses a quick and reliable algorithm to very quickly bring
28remote and host files into sync.  Rsync is fast because it just
29sends the differences in the files over the network (instead of
30sending the complete files). Rsync is often used as a very powerful
31mirroring process or just as a more capable replacement for the
32rcp command.  A technical report which describes the rsync algorithm
33is included in this package.
34
35Install rsync if you need a powerful mirroring program.
36
37%description -l ja
38rsync は高速で信頼性の高いアルゴリズムを使い,遠隔ホスト上のファイルと
39高速に同期させることが出来ます.rsync が高速に動作するのは,ネットワーク
40上に流れるデータがファイルの差分だけだからです (ファイル全体をやりとり
41するのではなく).rsync は強力なミラリングツールとしても,rcp コマンドの
42代替としても使うことが出来ます.rsync のアルゴリズムに関する技術情報は
43このパッケージに同梱されています.
44
45強力なミラープログラムが必要ならば rsync をインストールして下さい.
46
47
48%prep
49%setup -q -b 1
50
51# backword compatibility fix patches
52patch -p1 -i patches/acls.diff
53patch -p1 -i patches/xattrs.diff
54
55#Enable --copy-devices parameter
56patch -p1 -i patches/copy-devices.diff
57
58%patch0 -p1 -b .man
59# security fixes
60%patch100 -p1 -b .CVE-2011-1097
61
62%build
63autoreconf
64%configure
65make %{?_smp_mflags} CCOPTFLAGS="$RPM_OPT_FLAGS"
66
67
68%install
69rm -rf $RPM_BUILD_ROOT
70
71%makeinstall
72mkdir -p $RPM_BUILD_ROOT/etc/xinetd.d
73install -m 644 %{SOURCE2} $RPM_BUILD_ROOT/etc/xinetd.d/rsync
74
75
76%clean
77rm -rf $RPM_BUILD_ROOT
78
79
80%files
81%defattr(-,root,root)
82%doc COPYING README tech_report.tex
83%doc NEWS OLDNEWS TODO
84/etc/xinetd.d/rsync
85%{_prefix}/bin/rsync
86%{_mandir}/man1/rsync.1*
87%{_mandir}/man5/rsyncd.conf.5*
88
89
90%changelog
91* Wed Jun 11 2014 Daisuke SUZUKI <daisuke@vinelinux.org> 3.1.0-2
92- add Patch100 to fix CVE-2014-2855
93
94* Sat Nov 23 2013 Toshiharu Kudoh <toshi.kd2@gmail.com> 3.1.0-1
95- new upstream release
96
97* Fri Jan 20 2012 Toshiharu Kudoh <toshi.kd2@gmail.com> 3.0.9-1
98- new upstream release
99
100* Sun May 22 2011 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 3.0.8-1
101- new upstream release with security fixes
102- drop patch100 (is included in new release)
103
104* Sat Apr  2 2011 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 3.0.7-2
105- add Patch100 for fix CVE-2011-1097 (filelist)
106- change specfile name (-vl)
107
108* Sat Jan 2 2010 Toshiharu Kudoh <toshi.kd2@gmail.com> 3.0.7-1
109- new upstream release
110
111* Thu Oct 8 2009 Toshiharu Kudoh <toshi.kd2@gmail.com> 3.0.6-1
112- new upstream release
113- changed License tag
114- added Patch0 from Debian
115- added BuildRequires: libattr-devel popt-devel
116- added patch -p1 -i patches/copy-devices.diff in %setup
117  (to enable --copy-devices parameter)
118
119* Sun Sep 27 2009 Toshiharu Kudoh <toshi.kd2@gmail.com> 3.0.4-2
120- added BuildRequires: libacl-devel (to enable ACL)
121
122* Tue Sep 09 2008 Daisuke SUZUKI <daisuke@linux.or.jp> 3.0.4-1
123- new upstream release
124- add rsync-patches (replaces patch1,2)
125  use xattr.patch and acls.patch for backword compatibility
126
127* Sun Apr 13 2008 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 3.0.2-1
128- new upstream release
129- add patch1,2 for backward compatibility from fc
130- new versioning policy
131
132* Tue Aug 21 2007 MATSUBAYASHI Kohji <shaolin@vinelinux.org> 2.6.9-0vl2
133- add Patch10 for CVE-2007-4091
134  (rsync "f_name()" Function Directory Name Handling Off-By-One Vulnerability)
135
136* Wed Jan 10 2007 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 2.6.9-0vl1
137- new upstream release
138- add Vendor/Distribution tag
139
140* Mon Mar 28 2005 Daisuke SUZUKI <daisuke@linux.or.jp> 2.6.4-0vl1
141- new upstream release
142
143* Sat Oct 30 2004 Daisuke SUZUKI <daisuke@linux.or.jp> 2.6.3-0vl1
144- new upstream release
145- drop obsolete patch1 which is merged in upstream.
146
147* Tue Aug 17 2004 SATO Masakiyo <info@pocomoco.net> 2.6.2-0vl2
148- added patch1 for a path-sanitizing bug
149
150* Wed May  5 2004 Daisuke SUZUKI <daisuke@linux.or.jp> 2.6.2-0vl1
151- new upstream release
152
153* Fri Apr 30 2004 Daisuke SUZUKI <daisuke@linux.or.jp> 2.6.1-0vl1
154- new upstream release
155
156* Fri Dec 05 2003 Daisuke SUZUKI <daisuke@linux.or.jp> 2.5.7-0vl1
157- new upstream release
158- security fix
159
160* Mon Apr 21 2003 IWAI Masaharu <iwai@alib.jp> 2.5.6-0vl1
161- new upstream release
162
163* Sun Sep 29 2002 Daisuke SUZUKI <daisuke@linux.or.jp> 2.5.5-0vl1
164- new upstream release
165
166* Wed Mar 13 2002 Toru Sagami <sagami@vinelinux.org> 2.5.4-0vl1
167- updated to 2.5.4, which contains additional fix for zlib double-free bug.
168
169* Tue Mar 12 2002 IWAI Masaharu <iwaim@cc.mbn.or.jp> 2.5.3-0vl1
170- upstream release
171
172* Sat Jan 26 2002 Toru Sagami <sagami@vinelinux.org> 2.5.2-0vl1
173- SECURITY FIXES:
174    * Signedness security patch from Sebastian Krahmer
175- added more docs
176
177* Sun Jan 06 2002 Toru Sagami <sagami@vinelinux.org>
178- 2.5.1-0vl1
179
180* Sun Dec  2 2001 Yoichi Imai <yoichi@silver-forest.com>
181- 2.5.0-0vl1
182- update to 2.5.0
183- edit maxdel.patch for 2.5.0
184
185* Tue Jan 09 2001 MATSUBAYASHI 'Shaolin' Kohji <shaolin@rhythmaning.org>
186- 2.4.6-2vl1
187- based on 2.4.6-2 from Rawhide
188- added Japanese summary and description
189
190* Sat Sep 30 2000 Florian La Roche <Florian.LaRoche@redhat.de>
191- add xinetd configuration
192
193* Tue Sep 26 2000 Bernhard Rosenkraenzer <bero@redhat.com>
194- 2.4.6
195
196* Mon Jul 31 2000 Bill Nottingham <notting@redhat.com>
197- update to 2.4.4 - fixes yet another problem with rsh transport
198
199* Wed Jul 12 2000 Prospector <bugzilla@redhat.com>
200- automatic rebuild
201
202* Sat Jun 10 2000 Bill Nottingham <notting@redhat.com>
203- rebuild in new build env.
204
205* Mon Apr 10 2000 Bill Nottingham <notting@redhat.com>
206- update to 2.4.3
207
208* Tue Apr  4 2000 Bill Nottingham <notting@redhat.com>
209- update to 2.4.2
210
211* Tue Mar  7 2000 Bill Nottingham <notting@redhat.com>
212- fix maxdelete behavior so it isn't sent to older servers.
213
214* Mon Jan 31 2000 Jeff Johnson <jbj@redhat.com>
215- update to 2.4.1.
216
217* Fri Dec 17 1999 Bill Nottingham <notting@redhat.com>
218- update to 2.3.2
219
220* Sat Jun 12 1999 Jeff Johnson <jbj@redhat.com>
221- add "max. delete" patch to limit damage when server is hosed.
222
223* Wed Apr 07 1999 Bill Nottingham <notting@redhat.com>
224- update to 2.3.1.
225
226* Sun Mar 21 1999 Cristian Gafton <gafton@redhat.com>
227- auto rebuild in the new build environment (release 2)
228
229* Tue Mar 16 1999 Jeff Johnson <jbj@redhat.com>
230- update to 2.3.0.
231
232* Sat Mar 13 1999 Jeff Johnson <jbj@redhat.com>
233- update to 2.3.0 beta.
234
235* Fri Dec 18 1998 Bill Nottingham <notting@redhat.com>
236- update to 2.2.1
237
238* Thu Sep 10 1998 Jeff Johnson <jbj@redhat.com>
239- updated to 2.1.1
240
241* Mon Aug 17 1998 Erik Troan <ewt@redhat.com>
242- updated to 2.1.0
243
244* Thu Aug 06 1998 Erik Troan <ewt@redhat.com>
245- buildrooted and attr-rophied
246- removed tech-report.ps; the .tex should be good enough
247
248* Mon Aug 25 1997 John A. Martin <jam@jamux.com>
249- Built 1.6.3-2 after finding no rsync-1.6.3-1.src.rpm although there
250  was an ftp://ftp.redhat.com/pub/contrib/alpha/rsync-1.6.3-1.alpha.rpm
251  showing no packager nor signature but giving
252  "Source RPM: rsync-1.6.3-1.src.rpm".
253- Changes from 1.6.2-1 packaging: added '$RPM_OPT_FLAGS' to make, strip
254  to '%build', removed '%prefix'.
255
256* Thu Apr 10 1997 Michael De La Rue <miked@ed.ac.uk>
257- rsync-1.6.2-1 packaged.  (This entry by jam to credit Michael for the
258  previous package(s).)
Note: See TracBrowser for help on using the repository browser.