Hello community, here is the log from the commit of package python-suds for openSUSE:Factory checked in at 2013-07-08 22:25:53 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-suds (Old) and /work/SRC/openSUSE:Factory/.python-suds.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-suds" Changes: -------- --- /work/SRC/openSUSE:Factory/python-suds/python-suds.changes 2012-12-28 22:47:41.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.python-suds.new/python-suds.changes 2013-07-08 22:25:54.000000000 +0200 @@ -1,0 +2,6 @@ +Thu Jul 4 14:10:03 UTC 2013 - speili...@suse.com + +- Add suds-insecure-cache-tempdir.patch: Create random cache tempdir + to avoid other local user access (bnc#827568) + +------------------------------------------------------------------- New: ---- suds-insecure-cache-tempdir.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-suds.spec ++++++ --- /var/tmp/diff_new_pack.WiwJCV/_old 2013-07-08 22:25:54.000000000 +0200 +++ /var/tmp/diff_new_pack.WiwJCV/_new 2013-07-08 22:25:54.000000000 +0200 @@ -1,7 +1,7 @@ # # spec file for package python-suds # -# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -24,6 +24,8 @@ Group: Development/Languages/Python Url: https://fedorahosted.org/suds Source: %{name}-%{version}.tar.gz +# PATCH-FIX-UPSTREAM speili...@suse.com +Patch0: suds-insecure-cache-tempdir.patch BuildRequires: fdupes BuildRequires: python-devel BuildRequires: python-distribute @@ -53,6 +55,7 @@ %prep %setup -q +%patch0 -p1 %build python setup.py build ++++++ suds-insecure-cache-tempdir.patch ++++++ diff -ruN a/suds/cache.py b/suds/cache.py --- a/suds/cache.py 2010-04-14 21:04:17.000000000 +0200 +++ b/suds/cache.py 2013-07-04 16:08:25.879241623 +0200 @@ -20,7 +20,7 @@ import os import suds -from tempfile import gettempdir as tmp +import tempfile from suds.transport import * from suds.sax.parser import Parser from suds.sax.element import Element @@ -138,7 +138,7 @@ @type duration: {unit:value} """ if location is None: - location = os.path.join(tmp(), 'suds') + location = tempfile.mkdtemp() self.location = location self.duration = (None, 0) self.setduration(**duration) Binary files a/suds/.cache.py.swp and b/suds/.cache.py.swp differ -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
