This is an automated email from the git hooks/post-receive script. arand-guest pushed a commit to branch debdir in repository redeclipse.
commit 609f3d64f075c25f2c66d706ce734fd40b453066 Author: Martin Erik Werner <[email protected]> Date: Mon Jul 23 23:44:16 2012 +0200 add security-text-command-fix.patch File access security fix. --- changelog | 4 +++- patches/security-text-command-fix.patch | 24 ++++++++++++++++++++++++ patches/series | 1 + 3 files changed, 28 insertions(+), 1 deletion(-) diff --git a/changelog b/changelog index 9c6b1cd..bef6d69 100644 --- a/changelog +++ b/changelog @@ -1,6 +1,6 @@ redeclipse (1.2-3) UNRELEASED; urgency=low - * Add unversion lib dependency alternatives + * Add unversioned lib dependency alternatives - libgl1-mesa-dev | libgl-dev - libsdl1.2-dev | libsdl-dev - lib1g-dev | libz-dev @@ -11,6 +11,8 @@ redeclipse (1.2-3) UNRELEASED; urgency=low - Removed build-with-debug-symbols.patch: Now handled in d/rules instead * Enable parallel build + * Add debian/patches/security-text-command-fix.patch + - File access security fix -- Martin Erik Werner <[email protected]> Mon, 27 Feb 2012 13:53:19 +0100 diff --git a/patches/security-text-command-fix.patch b/patches/security-text-command-fix.patch new file mode 100644 index 0000000..9121d8f --- /dev/null +++ b/patches/security-text-command-fix.patch @@ -0,0 +1,24 @@ +From 52fdd35c3ffc1ce2e568180eac2da93e179fef2a Mon Sep 17 00:00:00 2001 +From: eihrul <eihrul@2cd6abe5-5779-42d9-9038-cec04ae5ff40> +Date: Sun, 22 Jul 2012 21:22:55 +0000 +Subject: [PATCH] text command fix +Comment: + This patch fixes a file access security issue which could allow a remote + attacker access local files by transmitting map script files. + +git-svn-id: https://redeclipse.svn.sourceforge.net/svnroot/redeclipse@3764 2cd6abe5-5779-42d9-9038-cec04ae5ff40 +--- + src/engine/textedit.h | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +--- a/src/engine/textedit.h ++++ b/src/engine/textedit.h +@@ -690,7 +690,7 @@ + + #define TEXTCOMMAND(f, s, d, body) ICOMMAND(0, f, s, d,\ + editor *top = currentfocus();\ +- if(!top) return;\ ++ if(!top || identflags&IDF_WORLD) return;\ + body\ + ) + diff --git a/patches/series b/patches/series index 15b0306..df1a5cf 100644 --- a/patches/series +++ b/patches/series @@ -2,3 +2,4 @@ windowed-by-default.patch build-with-system-enet.patch backported-fix-icon-sizes.patch build-with-ldflags.patch +security-text-command-fix.patch -- Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-games/redeclipse.git _______________________________________________ Pkg-games-commits mailing list [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-games-commits
