diff options
| author |   Alastair Tse <liquidx@gentoo.org> | 2005-01-25 17:59:43 +0000 |
|---|---|---|
| committer | Alastair Tse <liquidx@gentoo.org> | 2005-01-25 17:59:43 +0000 |
| commit | 1afb42497bad15e4b23508be7eb031aeb6e51b86 (patch) | |
| tree | b5e3be67f0c565b3c0f5bcd438d72eb41b102987 /app-i18n/zhcon/files | |
| parent | Use properly the kde eclasses, and do not install in KDEDIR. (diff) | |
| download | gentoo-2-1afb42497bad15e4b23508be7eb031aeb6e51b86.tar.gz gentoo-2-1afb42497bad15e4b23508be7eb031aeb6e51b86.tar.bz2 gentoo-2-1afb42497bad15e4b23508be7eb031aeb6e51b86.zip | |
security patch for unauthorised file access (CAN-2005-0072) bug #78117
(Portage version: 2.0.51-r14)
Diffstat (limited to 'app-i18n/zhcon/files')
| -rw-r--r-- | app-i18n/zhcon/files/digest-zhcon-0.2.3-r1 | 1 | ||||
| -rw-r--r-- | app-i18n/zhcon/files/zhcon-0.2.3-CAN-2005-0072.patch | 26 |
2 files changed, 27 insertions, 0 deletions
diff --git a/app-i18n/zhcon/files/digest-zhcon-0.2.3-r1 b/app-i18n/zhcon/files/digest-zhcon-0.2.3-r1 new file mode 100644 index 000000000000..4de71f53731a --- /dev/null +++ b/app-i18n/zhcon/files/digest-zhcon-0.2.3-r1 @@ -0,0 +1 @@ +MD5 64b5d6c2d7055b4e45f4eadfd1303e8f zhcon-0.2.3.tar.gz 5030677 diff --git a/app-i18n/zhcon/files/zhcon-0.2.3-CAN-2005-0072.patch b/app-i18n/zhcon/files/zhcon-0.2.3-CAN-2005-0072.patch new file mode 100644 index 000000000000..a54fd52cedd8 --- /dev/null +++ b/app-i18n/zhcon/files/zhcon-0.2.3-CAN-2005-0072.patch @@ -0,0 +1,26 @@ +--- zhcon-0.2.orig/src/configfile.cpp ++++ zhcon-0.2/src/configfile.cpp +@@ -19,13 +19,23 @@ + #include <stdexcept> + #include <fstream> + #include <cstdlib> ++#include <unistd.h> ++#include <sys/types.h> + #include "configfile.h" + + ConfigFile::ConfigFile(const char *fn) { ++ uid_t ruid, euid; ++ ++ ruid = getuid(); ++ euid = geteuid(); ++ ++ setreuid(euid, ruid); ++ + ifstream in(fn); + if (!in) + throw runtime_error("Could not open config file!"); + ParseFile(in); ++ setreuid(ruid, euid); + } + + ConfigFile::~ConfigFile() {} |