dist-git conversion

from a library in the current directory

.cvsignore

@@ -1 +0,0 @@
-libtool-2.2.6a.tar.gz

.gitignore

@@ -0,0 +1 @@
+libtool-2.2.6b.tar.gz

Makefile

@@ -1,21 +0,0 @@
-# Makefile for source rpm: libtool
-# $Id: Makefile,v 1.1 2004/09/09 07:44:21 cvsdist Exp $
-NAME := libtool
-SPECFILE = $(firstword $(wildcard *.spec))
-
-define find-makefile-common
-for d in common ../common ../../common ; do if [ -f $$d/Makefile.common ] ; then if [ -f $$d/CVS/Root -a -w $$/Makefile.common ] ; then cd $$d ; cvs -Q update ; fi ; echo "$$d/Makefile.common" ; break ; fi ; done
-endef
-
-MAKEFILE_COMMON := $(shell $(find-makefile-common))
-
-ifeq ($(MAKEFILE_COMMON),)
-# attempt a checkout
-define checkout-makefile-common
-test -f CVS/Root && { cvs -Q -d $$(cat CVS/Root) checkout common && echo "common/Makefile.common" ; } || { echo "ERROR: I can't figure out how to checkout the 'common' module." ; exit -1 ; } >&2
-endef
-
-MAKEFILE_COMMON := $(shell $(checkout-makefile-common))
-endif
-
-include $(MAKEFILE_COMMON)

libtool-1.5.24-relativepath.patch

@@ -1,14 +0,0 @@
-diff -up libtool-1.5.24/libltdl/ltdl.c.relativepath libtool-1.5.24/libltdl/ltdl.c
---- libtool-1.5.24/libltdl/ltdl.c.relativepath	2007-06-01 07:04:54.000000000 +0200
-+++ libtool-1.5.24/libltdl/ltdl.c	2007-07-24 12:56:22.000000000 +0200
-@@ -3225,7 +3225,9 @@ try_dlopen (phandle, filename)
- 	}
-       if (!file)
- 	{
--	  file = fopen (filename, LT_READTEXT_MODE);
-+	  /* don't open .la files in current directory, root might get tricked to run a binary in a prepared directory */
-+	  if(!strncmp((filename + strlen(filename) - 3), LTDL_ARCHIVE_EXT,3) || strstr(filename,"/"))
-+	    file = fopen (filename, LT_READTEXT_MODE);
- 	}
- 
-       /* If we didn't find the file by now, it really isn't there.  Set

libtool.spec

@@ -1,12 +1,12 @@
-%define gcc_version 4.4.0
+%define gcc_version 4.4.1
 
 Summary: The GNU Portable Library Tool
 Name:    libtool
 Version: 2.2.6
-Release: 11%{?dist}
+Release: 11%{?dist}.3
 License: GPLv2+ and LGPLv2+ and GFDL
 Group:   Development/Tools
-Source:  http://ftp.gnu.org/gnu/libtool/libtool-%{version}a.tar.gz
+Source:  http://ftp.gnu.org/gnu/libtool/libtool-%{version}b.tar.gz
 Patch0:  libtool-2.2.6a-rpath.patch
 URL:     http://www.gnu.org/software/libtool/
 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-%(%{__id_u} -n)
@@ -67,7 +67,7 @@ Static libraries and header files for development with ltdl.
 
 
 %prep
-%setup -n libtool-%{version} -q
+%setup -n libtool-%{version}b -q
 %patch0 -p1 -b .rpath
 
 %build
@@ -142,6 +142,16 @@ fi
 
 
 %changelog
+* Thu Dec 03 2009 Karsten Hopp <karsten@redhat.com> 2.2.6-11.3
+- require gcc-4.4.1 from F-11-updates
+
+* Wed Dec 02 2009 Karsten Hopp <karsten@redhat.com> 2.2.6-11.2
+- update to 2.2.6b, fixes CVE-2009-3736:
+  libltdl may load and execute code from a library in the current directory
+
+* Thu Jul 30 2009 Jakub Jelinek <jakub@redhat.com> 2.2.6-11.fc11.1
+- rebuilt against gcc-4.4.1
+
 * Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.6-11
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
 

sources

@@ -1 +1 @@
-8ca1ea241cd27ff9832e045fe9afe4fd  libtool-2.2.6a.tar.gz
+07da460450490148c6d2df0f21481a25  libtool-2.2.6b.tar.gz