summaryrefslogtreecommitdiff
path: root/archivers
diff options
context:
space:
mode:
authorsalo <salo>2005-04-11 18:44:54 +0000
committersalo <salo>2005-04-11 18:44:54 +0000
commit46ab41257ae465b8e54008b4990086ffe89f8e61 (patch)
tree2ed3c73cdca7ec0bf5e6514a82eaff4065f726a4 /archivers
parentd129ac5d72e1e31d1710b8d0ef67ca6635716f24 (diff)
downloadpkgsrc-46ab41257ae465b8e54008b4990086ffe89f8e61.tar.gz
Security fix for SA14551:
"A vulnerability in GNU Sharutils was reported, which can be potentially exploited by malicious, local users to conduct certain actions on a vulnerable system with escalated privileges." Patch from Debian. Bump PKGREVISION.
Diffstat (limited to 'archivers')
-rw-r--r--archivers/gsharutils/Makefile4
-rw-r--r--archivers/gsharutils/distinfo4
-rw-r--r--archivers/gsharutils/patches/patch-ah22
3 files changed, 24 insertions, 6 deletions
diff --git a/archivers/gsharutils/Makefile b/archivers/gsharutils/Makefile
index 733a464bb3e..fce1ceb869c 100644
--- a/archivers/gsharutils/Makefile
+++ b/archivers/gsharutils/Makefile
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.25 2005/03/31 14:17:05 salo Exp $
+# $NetBSD: Makefile,v 1.26 2005/04/11 18:44:54 salo Exp $
DISTNAME= sharutils-4.2.1
PKGNAME= g${DISTNAME}
-PKGREVISION= 5
+PKGREVISION= 6
CATEGORIES= archivers
MASTER_SITES= ${MASTER_SITE_GNU:=sharutils/}
diff --git a/archivers/gsharutils/distinfo b/archivers/gsharutils/distinfo
index be049fb7171..2f421aeb159 100644
--- a/archivers/gsharutils/distinfo
+++ b/archivers/gsharutils/distinfo
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.12 2005/03/31 14:41:48 salo Exp $
+$NetBSD: distinfo,v 1.13 2005/04/11 18:44:54 salo Exp $
SHA1 (sharutils-4.2.1.tar.gz) = 3f0c0af31bd429cee1e088eb74867f20f8d399ef
RMD160 (sharutils-4.2.1.tar.gz) = 06e1629aa8a1c982e6032f194df6f5fe85f85b43
@@ -10,6 +10,6 @@ SHA1 (patch-ad) = fe6ba534c9830294c97dd37586aaa2c63d385a4c
SHA1 (patch-ae) = 8b88d98af2d1f24ba2623e8d56b36061806f5e12
SHA1 (patch-af) = 50aee8dc24a33892a0f17f7aeb5cfbae1adcb0c9
SHA1 (patch-ag) = af78d21124b33f0d8bdc27969119222e4d79008e
-SHA1 (patch-ah) = 1540064ef3a21a4486950ca24432f471bf1366a9
+SHA1 (patch-ah) = 90fed62712aa4d02d66098581d5e5602e391663e
SHA1 (patch-ai) = a95e116d517e5fe536a31d12db1c33daaf2609af
SHA1 (patch-aj) = 56ee560455a206c6fa5c106f1c759d0a0296dfd7
diff --git a/archivers/gsharutils/patches/patch-ah b/archivers/gsharutils/patches/patch-ah
index 088399f8c18..8d693bcf6c0 100644
--- a/archivers/gsharutils/patches/patch-ah
+++ b/archivers/gsharutils/patches/patch-ah
@@ -1,7 +1,7 @@
-$NetBSD: patch-ah,v 1.5 2005/03/31 14:17:05 salo Exp $
+$NetBSD: patch-ah,v 1.6 2005/04/11 18:44:54 salo Exp $
--- src/unshar.c.orig 1995-11-21 17:22:14.000000000 +0100
-+++ src/unshar.c 2005-03-31 15:33:03.000000000 +0200
++++ src/unshar.c 2005-04-11 20:37:40.000000000 +0200
@@ -346,8 +346,8 @@
{
size_t size_read;
@@ -34,3 +34,21 @@ $NetBSD: patch-ah,v 1.5 2005/03/31 14:17:05 salo Exp $
}
if (file = fopen (name_buffer, "r"), !file)
error (EXIT_FAILURE, errno, name_buffer);
+@@ -424,13 +424,15 @@
+ }
+ else
+ {
++#ifdef __MSDOS__
+ sprintf (name_buffer, "/tmp/unsh.%05d", (int) getpid ());
+ unlink (name_buffer);
+
+ if (file = fopen (name_buffer, "w+"), !file)
+ error (EXIT_FAILURE, errno, name_buffer);
+-#ifndef __MSDOS__
+- unlink (name_buffer); /* will be deleted on fclose */
++#else
++ if (file = tmpfile(), !file)
++ error (EXIT_FAILURE, errno, "tmpfile");
+ #endif
+
+ while (size_read = fread (copy_buffer, 1, sizeof (copy_buffer), stdin),