2.2.6-18.fc12.1

from a library in the current directory

Makefile

@@ -1,10 +1,10 @@
 # Makefile for source rpm: libtool
-# $Id: Makefile,v 1.1 2004/09/09 07:44:21 cvsdist Exp $
+# $Id: Makefile,v 1.2 2007/10/15 19:04:46 notting Exp $
 NAME := libtool
 SPECFILE = $(firstword $(wildcard *.spec))
 
 define find-makefile-common
-for d in common ../common ../../common ; do if [ -f $$d/Makefile.common ] ; then if [ -f $$d/CVS/Root -a -w $$/Makefile.common ] ; then cd $$d ; cvs -Q update ; fi ; echo "$$d/Makefile.common" ; break ; fi ; done
+for d in common ../common ../../common ; do if [ -f $$d/Makefile.common ] ; then if [ -f $$d/CVS/Root -a -w $$d/Makefile.common ] ; then cd $$d ; cvs -Q update ; fi ; echo "$$d/Makefile.common" ; break ; fi ; done
 endef
 
 MAKEFILE_COMMON := $(shell $(find-makefile-common))

branch

@@ -0,0 +1 @@
+F-12

libtool-1.5.24-relativepath.patch

@@ -1,14 +0,0 @@
-diff -up libtool-1.5.24/libltdl/ltdl.c.relativepath libtool-1.5.24/libltdl/ltdl.c
---- libtool-1.5.24/libltdl/ltdl.c.relativepath	2007-06-01 07:04:54.000000000 +0200
-+++ libtool-1.5.24/libltdl/ltdl.c	2007-07-24 12:56:22.000000000 +0200
-@@ -3225,7 +3225,9 @@ try_dlopen (phandle, filename)
- 	}
-       if (!file)
- 	{
--	  file = fopen (filename, LT_READTEXT_MODE);
-+	  /* don't open .la files in current directory, root might get tricked to run a binary in a prepared directory */
-+	  if(!strncmp((filename + strlen(filename) - 3), LTDL_ARCHIVE_EXT,3) || strstr(filename,"/"))
-+	    file = fopen (filename, LT_READTEXT_MODE);
- 	}
- 
-       /* If we didn't find the file by now, it really isn't there.  Set

libtool.spec

@@ -1,12 +1,12 @@
-%define gcc_version 4.4.1
+%define gcc_version 4.4.4
 
 Summary: The GNU Portable Library Tool
 Name:    libtool
 Version: 2.2.6
-Release: 14%{?dist}
+Release: 18%{?dist}.1
 License: GPLv2+ and LGPLv2+ and GFDL
 Group:   Development/Tools
-Source:  http://ftp.gnu.org/gnu/libtool/libtool-%{version}a.tar.lzma
+Source:  http://ftp.gnu.org/gnu/libtool/libtool-%{version}b.tar.lzma
 Patch0:  libtool-2.2.6a-rpath.patch
 URL:     http://www.gnu.org/software/libtool/
 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-%(%{__id_u} -n)
@@ -67,7 +67,7 @@ Static libraries and header files for development with ltdl.
 
 
 %prep
-%setup -n libtool-%{version} -q
+%setup -n libtool-%{version}b -q
 %patch0 -p1 -b .rpath
 
 %build
@@ -142,6 +142,22 @@ fi
 
 
 %changelog
+* Wed Jun 30 2010 Jakub Jelinek <jakub@redhat.com> 2.2.6-18.fc12.1
+- rebuilt for gcc 4.4.4
+
+* Thu Jan 21 2010 Jakub Jelinek <jakub@redhat.com> 2.2.6-18
+- rebuilt for gcc 4.4.3
+
+* Wed Dec 02 2009 Karsten Hopp <karsten@redhat.com> 2.2.6-17
+- fix directory name used in libtool tarball
+
+* Wed Dec 02 2009 Karsten Hopp <karsten@redhat.com> 2.2.6-16
+- update to 2.2.6b, fixes CVE-2009-3736:
+  libltdl may load and execute code from a library in the current directory
+
+* Mon Oct 19 2009 Jakub Jelinek <jakub@redhat.com> 2.2.6-15
+- Rebuilt for gcc 4.4.2
+
 * Wed Aug 12 2009 Ville Skyttä <ville.skytta@iki.fi> - 2.2.6-14
 - Use lzma compressed upstream tarball.
 

sources

@@ -1 +1 @@
-b121e4848cc53fdd69e796aed73b9ccf  libtool-2.2.6a.tar.lzma
+a4b36980765003b47dd75ac9429f4f11  libtool-2.2.6b.tar.lzma