diff options
author | Remi Collet <fedora@famillecollet.com> | 2012-09-29 08:27:47 +0200 |
---|---|---|
committer | Remi Collet <fedora@famillecollet.com> | 2012-09-29 08:27:47 +0200 |
commit | 093c393b1952ad46f142de1b6ca160bbb338a55d (patch) | |
tree | 83c61fb88f7fbb3c10ad28e6bd36edf46b9d1239 |
php-Smarty: import from rawhide
-rw-r--r-- | php-Smarty-3.1.11-CVE-2012-4437.patch | 12 | ||||
-rw-r--r-- | php-Smarty.spec | 121 |
2 files changed, 133 insertions, 0 deletions
diff --git a/php-Smarty-3.1.11-CVE-2012-4437.patch b/php-Smarty-3.1.11-CVE-2012-4437.patch new file mode 100644 index 0000000..1f5d4d5 --- /dev/null +++ b/php-Smarty-3.1.11-CVE-2012-4437.patch @@ -0,0 +1,12 @@ +--- libs/Smarty.class.php~ 2012-06-30 16:00:24.000000000 -0500 ++++ libs/Smarty.class.php 2012-09-20 07:30:54.070817148 -0500 +@@ -1481,6 +1481,9 @@ + * @package Smarty + */ + class SmartyException extends Exception { ++ public function __construct($message) { ++ $this->message = htmlentities($message); ++ } + } + + /** diff --git a/php-Smarty.spec b/php-Smarty.spec new file mode 100644 index 0000000..6a822fc --- /dev/null +++ b/php-Smarty.spec @@ -0,0 +1,121 @@ +Name: php-Smarty +Summary: Template/Presentation Framework for PHP +Version: 3.1.11 +Release: 1%{?dist} + +Source0: http://www.smarty.net/distributions/Smarty-%{version}.tar.gz +Patch0: php-Smarty-3.1.11-CVE-2012-4437.patch +URL: http://www.smarty.net +License: LGPLv2+ +Group: Development/Libraries + +BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) +BuildArch: noarch + +%if 0%{?rhel} +Requires: php >= 5.1.6-3.5 +%else +Requires: php >= 5.2.0-9 +%endif + +%description +Although Smarty is known as a "Template Engine", it would be more accurately +described as a "Template/Presentation Framework." That is, it provides the +programmer and template designer with a wealth of tools to automate tasks +commonly dealt with at the presentation layer of an application. I stress the +word Framework because Smarty is not a simple tag-replacing template engine. +Although it can be used for such a simple purpose, its focus is on quick and +painless development and deployment of your application, while maintaining +high-performance, scalability, security and future growth. + + +%prep +%setup -qn Smarty-%{version} + +%patch0 -p0 + +%build +# empty build section, nothing required + + +%install +rm -rf $RPM_BUILD_ROOT + +# install smarty libs +install -d $RPM_BUILD_ROOT%{_datadir}/php/Smarty +cp -a libs/* $RPM_BUILD_ROOT%{_datadir}/php/Smarty/ + + +%clean +rm -rf $RPM_BUILD_ROOT + + +%files +%defattr(-,root,root,-) +%doc COPYING.lib demo README change_log.txt SMARTY*.txt +%{_datadir}/php/Smarty + + +%changelog +* Thu Sep 20 2012 Jon Ciesla <limburgher@gmail.com> - 3.1.11-1 +- Update to 3.1.11, patch for CVE-2012-4437, BZ 858989. + +* Fri Jul 20 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.1.10-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild + +* Fri Jun 22 2012 Johan Cwiklinski <johan AT x-tnd DOT be> - 3.1.10-1 +- Update to 3.1.10 + +* Mon May 07 2012 Jon Ciesla <limburgher@gmail.com> - 3.1.8-1 +- Update to 3.1.8, BZ 819162. + +* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.6.26-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild + +* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.6.26-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild + +* Sun Oct 11 2009 Christopher Stone <chris.stone@gmail.com> 2.6.26-1 +- Upstream sync +- Update %%source0 and %%URL + +* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.6.25-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild + +* Mon May 25 2009 Christopher Stone <chris.stone@gmail.com> 2.6.25-1 +- Upstream sync + +* Thu Feb 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.6.20-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild + +* Mon Nov 02 2008 Christopher Stone <chris.stone@gmail.com> 2.6.20-2 +- Add security patch (bz #469648) +- Add RHL dist tag conditional for Requires + +* Mon Oct 13 2008 Christopher Stone <chris.stone@gmail.com> 2.6.20-1 +- Upstream sync + +* Wed Feb 20 2008 Christopher Stone <chris.stone@gmail.com> 2.6.19-1 +- Upstream sync +- Update %%license +- Fix file encoding + +* Sun Apr 29 2007 Christopher Stone <chris.stone@gmail.com> 2.6.18-1 +- Upstream sync + +* Wed Feb 21 2007 Christopher Stone <chris.stone@gmail.com> 2.6.16-2 +- Minor spec file changes/cleanups + +* Fri Feb 09 2007 Orion Poplawski <orion@cora.nwra.com> 2.6.16-1 +- Update to 2.6.16 +- Install in /usr/share/php/Smarty +- Update php version requirement + +* Tue May 16 2006 Orion Poplawski <orion@cora.nwra.com> 2.6.13-1 +- Update to 2.6.13 + +* Tue Nov 1 2005 Orion Poplawski <orion@cora.nwra.com> 2.6.10-2 +- Fix Source0 URL. + +* Thu Oct 13 2005 Orion Poplawski <orion@cora.nwra.com> 2.6.10-1 +- Initial Fedora Extras version |