OpenPKG CVS Repository
http://cvs.openpkg.org/
____________________________________________________________________________
Server: cvs.openpkg.org Name: Ralf S. Engelschall
Root: /e/openpkg/cvs Email: [EMAIL PROTECTED]
Module: openpkg-src Date: 19-May-2004 21:14:15
Branch: OPENPKG_1_3_SOLID Handle: 2004051920141500
Modified files: (Branch: OPENPKG_1_3_SOLID)
openpkg-src/cvs cvs.patch cvs.spec
Log:
apply security bugfix (OpenPKG-SA-2004.022-cvs, CAN-2004-0396)
Summary:
Revision Changes Path
1.3.2.1.2.5 +26 -0 openpkg-src/cvs/cvs.patch
1.48.2.3.2.6+1 -1 openpkg-src/cvs/cvs.spec
____________________________________________________________________________
patch -p0 <<'@@ .'
Index: openpkg-src/cvs/cvs.patch
============================================================================
$ cvs diff -u -r1.3.2.1.2.4 -r1.3.2.1.2.5 cvs.patch
--- openpkg-src/cvs/cvs.patch 14 Apr 2004 18:10:01 -0000 1.3.2.1.2.4
+++ openpkg-src/cvs/cvs.patch 19 May 2004 19:14:15 -0000 1.3.2.1.2.5
@@ -154,3 +154,29 @@
if (mname[0] == '!' && mname[1] != '\0')
{
+=============================================================================
+
+Security Bugfixes
+(OpenPKG-SA-2004.022-cvs, CAN-2004-0396)
+
+Index: src/server.c
+--- src/server.c.orig 2004-05-19 21:05:23.000000000 +0200
++++ src/server.c 2004-05-19 21:05:34.000000000 +0200
+@@ -1618,7 +1618,7 @@
+ && strncmp (arg, name, cp - name) == 0)
+ {
+ timefield = strchr (cp + 1, '/') + 1;
+- if (*timefield != '=')
++ if (*timefield == '/')
+ {
+ cp = timefield + strlen (timefield);
+ cp[1] = '\0';
+@@ -1661,7 +1661,7 @@
+ && strncmp (arg, name, cp - name) == 0)
+ {
+ timefield = strchr (cp + 1, '/') + 1;
+- if (!(timefield[0] == 'M' && timefield[1] == '/'))
++ if (*timefield == '/')
+ {
+ cp = timefield + strlen (timefield);
+ cp[1] = '\0';
@@ .
patch -p0 <<'@@ .'
Index: openpkg-src/cvs/cvs.spec
============================================================================
$ cvs diff -u -r1.48.2.3.2.5 -r1.48.2.3.2.6 cvs.spec
--- openpkg-src/cvs/cvs.spec 14 Apr 2004 18:10:01 -0000 1.48.2.3.2.5
+++ openpkg-src/cvs/cvs.spec 19 May 2004 19:14:15 -0000 1.48.2.3.2.6
@@ -37,7 +37,7 @@
Group: SCM
License: GPL
Version: %{V_cvs}
-Release: 1.3.4
+Release: 1.3.5
# package options
%option with_fsl yes
@@ .
______________________________________________________________________
The OpenPKG Project www.openpkg.org
CVS Repository Commit List [EMAIL PROTECTED]
