auto-import lftp-2.6.3-4 from lftp-2.6.3-4.src.rpm

lftp.spec

@@ -1,11 +1,12 @@
 Summary: A sophisticated file transfer program
 Name: lftp 
 Version: 2.6.3
-Release: 3
+Release: 4
 License: GPL
 Group: Applications/Internet
-Source: http://ftp.yars.free.net/pub/software/unix/net/ftp/client/lftp/lftp-%{version}.tar.gz
+Source0: http://ftp.yars.free.net/pub/software/unix/net/ftp/client/lftp/lftp-%{version}.tar.gz
 Source1: http://ftp.yars.free.net/pub/software/unix/net/ftp/client/lftp/lftp-%{version}.tar.gz.asc
+Patch0: lftp-2.6.9-ulf.patch
 URL: http://lftp.yar.ru/
 BuildRoot: %{_tmppath}/%{name}-%{version}-root
 BuildPrereq: ncurses-devel, openssl-devel, pkgconfig, readline-devel
@@ -17,7 +18,8 @@ mirroring, and can transfer several files in parallel. It is designed with
 reliability in mind.
 
 %prep
-%setup -q  
+%setup -q
+%patch0 -p1 -b .ulf
 
 %build
 if pkg-config openssl ; then
@@ -61,6 +63,10 @@ rm -rf $RPM_BUILD_ROOT
 %{_libdir}/lftp/%{version}/proto-http.so
 
 %changelog
+* Tue Dec  9 2003 Nalin Dahyabhai <nalin@redhat.com> 2.6.3-4
+- include patch based on patch from Ulf Härnhammar to fix unsafe use of
+  sscanf when reading http directory listings (CAN-2003-0963)
+
 * Wed Jan 22 2003 Tim Powers <timp@redhat.com>
 - rebuilt