OpenPKG CVS Repository
http://cvs.openpkg.org/
____________________________________________________________________________
Server: cvs.openpkg.org Name: Thomas Lotterer
Root: /e/openpkg/cvs Email: [EMAIL PROTECTED]
Module: openpkg-src Date: 07-Apr-2004 14:40:10
Branch: HEAD Handle: 2004040713400900
Added files:
openpkg-src/sharutils sharutils.patch
Modified files:
openpkg-src/sharutils sharutils.spec
Log:
SA-2004.011-sharutils
Summary:
Revision Changes Path
1.1 +16 -0 openpkg-src/sharutils/sharutils.patch
1.26 +3 -1 openpkg-src/sharutils/sharutils.spec
____________________________________________________________________________
patch -p0 <<'@@ .'
Index: openpkg-src/sharutils/sharutils.patch
============================================================================
$ cvs diff -u -r0 -r1.1 sharutils.patch
--- /dev/null 2004-04-07 14:40:09.000000000 +0200
+++ sharutils.patch 2004-04-07 14:40:09.000000000 +0200
@@ -0,0 +1,16 @@
+http://www.securityfocus.com/archive/1/359639
+GNU Sharutils buffer overflow vulnerability
+
+Index: src/shar.c
+--- src/shar.c.orig 2004-04-07 14:27:20.000000000 +0200
++++ src/shar.c 2004-04-07 14:30:27.000000000 +0200
+@@ -1905,7 +1905,7 @@
+ break;
+
+ case 'o':
+- strcpy (output_base_name, optarg);
++ strncpy (output_base_name, optarg, sizeof(output_base_name));
+ if (!strchr (output_base_name, '%'))
+ strcat (output_base_name, ".%02d");
+ part_number = 0;
+
@@ .
patch -p0 <<'@@ .'
Index: openpkg-src/sharutils/sharutils.spec
============================================================================
$ cvs diff -u -r1.25 -r1.26 sharutils.spec
--- openpkg-src/sharutils/sharutils.spec 7 Feb 2004 17:58:43 -0000 1.25
+++ openpkg-src/sharutils/sharutils.spec 7 Apr 2004 12:40:09 -0000 1.26
@@ -34,10 +34,11 @@
Group: Archiver
License: GPL
Version: 4.2.1
-Release: 20040207
+Release: 20040407
# list of sources
Source0: ftp://ftp.gnu.org/gnu/sharutils/sharutils-%{version}.tar.gz
+Patch0: sharutils.patch
# build information
Prefix: %{l_prefix}
@@ -71,6 +72,7 @@
%prep
%setup -q
+ %patch
%build
CC="%{l_cc}" \
@@ .
______________________________________________________________________
The OpenPKG Project www.openpkg.org
CVS Repository Commit List [EMAIL PROTECTED]
