OpenPKG CVS Repository
http://cvs.openpkg.org/
____________________________________________________________________________
Server: cvs.openpkg.org Name: Thomas Lotterer
Root: /e/openpkg/cvs Email: [EMAIL PROTECTED]
Module: openpkg-src Date: 07-Apr-2004 14:42:11
Branch: OPENPKG_2_0_SOLID Handle: 2004040713421100
Added files: (Branch: OPENPKG_2_0_SOLID)
openpkg-src/sharutils sharutils.patch
Modified files: (Branch: OPENPKG_2_0_SOLID)
openpkg-src/sharutils sharutils.spec
Log:
SA-2004.011-sharutils
Summary:
Revision Changes Path
1.1.2.1 +16 -0 openpkg-src/sharutils/sharutils.patch
1.25.2.2 +3 -1 openpkg-src/sharutils/sharutils.spec
____________________________________________________________________________
patch -p0 <<'@@ .'
Index: openpkg-src/sharutils/sharutils.patch
============================================================================
$ cvs diff -u -r0 -r1.1.2.1 sharutils.patch
--- /dev/null 2004-04-07 14:42:11.000000000 +0200
+++ sharutils.patch 2004-04-07 14:42:11.000000000 +0200
@@ -0,0 +1,16 @@
+http://www.securityfocus.com/archive/1/359639
+GNU Sharutils buffer overflow vulnerability
+
+Index: src/shar.c
+--- src/shar.c.orig 2004-04-07 14:27:20.000000000 +0200
++++ src/shar.c 2004-04-07 14:30:27.000000000 +0200
+@@ -1905,7 +1905,7 @@
+ break;
+
+ case 'o':
+- strcpy (output_base_name, optarg);
++ strncpy (output_base_name, optarg, sizeof(output_base_name));
+ if (!strchr (output_base_name, '%'))
+ strcat (output_base_name, ".%02d");
+ part_number = 0;
+
@@ .
patch -p0 <<'@@ .'
Index: openpkg-src/sharutils/sharutils.spec
============================================================================
$ cvs diff -u -r1.25.2.1 -r1.25.2.2 sharutils.spec
--- openpkg-src/sharutils/sharutils.spec 18 Feb 2004 14:51:39 -0000
1.25.2.1
+++ openpkg-src/sharutils/sharutils.spec 7 Apr 2004 12:42:11 -0000
1.25.2.2
@@ -34,10 +34,11 @@
Group: Archiver
License: GPL
Version: 4.2.1
-Release: 2.0.0
+Release: 2.0.1
# list of sources
Source0: ftp://ftp.gnu.org/gnu/sharutils/sharutils-%{version}.tar.gz
+Patch0: sharutils.patch
# build information
Prefix: %{l_prefix}
@@ -71,6 +72,7 @@
%prep
%setup -q
+ %patch
%build
CC="%{l_cc}" \
@@ .
______________________________________________________________________
The OpenPKG Project www.openpkg.org
CVS Repository Commit List [EMAIL PROTECTED]
