OpenPKG CVS Repository
http://cvs.openpkg.org/
____________________________________________________________________________
Server: cvs.openpkg.org Name: Ralf S. Engelschall
Root: /v/openpkg/cvs Email: [EMAIL PROTECTED]
Module: openpkg-src Date: 21-Oct-2005 08:29:13
Branch: HEAD Handle: 2005102107291200
Added files:
openpkg-src/texinfo texinfo.patch
Modified files:
openpkg-src/texinfo texinfo.spec
Log:
apply Security Bugfix (CVE-2005-3011)
Summary:
Revision Changes Path
1.1 +33 -0 openpkg-src/texinfo/texinfo.patch
1.42 +3 -1 openpkg-src/texinfo/texinfo.spec
____________________________________________________________________________
patch -p0 <<'@@ .'
Index: openpkg-src/texinfo/texinfo.patch
============================================================================
$ cvs diff -u -r0 -r1.1 texinfo.patch
--- /dev/null 2005-10-21 08:28:51 +0200
+++ texinfo.patch 2005-10-21 08:29:13 +0200
@@ -0,0 +1,33 @@
+Security Bugfix (CVE-2005-3011)
+
+Index: util/texindex.c
+--- util/texindex.c.orig 2004-04-11 19:56:47 +0200
++++ util/texindex.c 2005-10-21 08:18:13 +0200
+@@ -390,11 +390,12 @@
+ maketempname (int count)
+ {
+ static char *tempbase = NULL;
++ char *tempname;
+ char tempsuffix[10];
++ int fd;
+
+ if (!tempbase)
+ {
+- int fd;
+ tempbase = concat (tempdir, "txidxXXXXXX");
+
+ fd = mkstemp (tempbase);
+@@ -403,7 +404,12 @@
+ }
+
+ sprintf (tempsuffix, ".%d", count);
+- return concat (tempbase, tempsuffix);
++ tempname = concat (tempbase, tempsuffix);
++ fd = open (tempname, O_CREAT|O_EXCL|O_WRONLY, 0600);
++ if (fd == -1)
++ pfatal_with_name (tempname);
++ close (fd);
++ return tempname;
+ }
+
+
@@ .
patch -p0 <<'@@ .'
Index: openpkg-src/texinfo/texinfo.spec
============================================================================
$ cvs diff -u -r1.41 -r1.42 texinfo.spec
--- openpkg-src/texinfo/texinfo.spec 24 Mar 2005 11:20:29 -0000 1.41
+++ openpkg-src/texinfo/texinfo.spec 21 Oct 2005 06:29:12 -0000 1.42
@@ -33,10 +33,11 @@
Group: Text
License: GPL
Version: 4.8
-Release: 20050104
+Release: 20051021
# list of sources
Source0: ftp://ftp.gnu.org/pub/gnu/texinfo/texinfo-%{version}.tar.gz
+Patch0: texinfo.patch
# build information
Prefix: %{l_prefix}
@@ -63,6 +64,7 @@
%prep
%setup -q
+ %patch -p0
chmod u+x install-sh
%build
@@ .
______________________________________________________________________
The OpenPKG Project www.openpkg.org
CVS Repository Commit List [email protected]
