[SM-Commit] GIT changes to test grimoire by Treeve Jelbert (f7c0d63c4b2bca2db6d5cd32c6f17c1aef940e4a)

Treeve Jelbert scm at mail.sourcemage.org
Wed Jun 14 16:09:18 EDT 2006


GIT changes to test grimoire by Treeve Jelbert <treeve at scarlet.be>:

 kde-core/arts/DETAILS         |    1 +
 kde-core/arts/HISTORY         |    5 +++++
 kde-core/arts/PRE_BUILD       |    5 +++++
 kde-core/arts/arts-1.2.x.diff |   29 +++++++++++++++++++++++++++++
 4 files changed, 40 insertions(+)

New commits:
commit f7c0d63c4b2bca2db6d5cd32c6f17c1aef940e4a
Author: Treeve Jelbert <treeve at scarlet.be>
Commit: Treeve Jelbert <treeve at scarlet.be>

    arts - security patch - CVE-2006-2916

diff --git a/kde-core/arts/DETAILS b/kde-core/arts/DETAILS
index 3ac349e..645022a 100755
--- a/kde-core/arts/DETAILS
+++ b/kde-core/arts/DETAILS
@@ -9,6 +9,7 @@ SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL
        BUILD_API=2
         WEB_SITE=http://www.kde.org/
          ENTERED=20020322
+  SECURITY_PATCH=1
       LICENSE[0]=GPL
         KEYWORDS="kde audio"
            SHORT="Sound system used by KDE"
diff --git a/kde-core/arts/HISTORY b/kde-core/arts/HISTORY
index b08b283..580bda5 100644
--- a/kde-core/arts/HISTORY
+++ b/kde-core/arts/HISTORY
@@ -1,3 +1,8 @@
+2006-06-14 Treeve Jelbert <treeve01 at pi.be>
+	* DETAILS: SECURITY_PATCH
+	  see <http://www.kde.org/info/security/advisory-20060614-2.txt>
+	* PRE_BUILD, arts-1.2.x.diff: added
+
 2006-05-31 Treeve Jelbert <treeve01 at pi.be>
 	* DETAILS: version 1.5.3
 
diff --git a/kde-core/arts/PRE_BUILD b/kde-core/arts/PRE_BUILD
new file mode 100755
index 0000000..f38f0e6
--- /dev/null
+++ b/kde-core/arts/PRE_BUILD
@@ -0,0 +1,5 @@
+default_pre_build  &&
+#  mk_source_dir $SOURCE_DIRECTORY &&
+cd $SOURCE_DIRECTORY 	   &&
+#  unpack_file
+patch  -p0 < $SPELL_DIRECTORY/arts-1.2.x.diff
diff --git a/kde-core/arts/arts-1.2.x.diff b/kde-core/arts/arts-1.2.x.diff
new file mode 100644
index 0000000..9b8e0fa
--- /dev/null
+++ b/kde-core/arts/arts-1.2.x.diff
@@ -0,0 +1,29 @@
+--- soundserver/artswrapper.c	(revision 546970)
++++ soundserver/artswrapper.c	(working copy)
+@@ -95,6 +95,10 @@ int main(int argc, char **argv)
+ #else
+ 		setreuid(-1, getuid());
+ #endif
++		if (geteuid() != getuid()) {
++			perror("setuid()");
++			return 2;
++		}
+ 	}
+ 
+ 	if(argc == 0)
+--- soundserver/crashhandler.cc	(revision 546970)
++++ soundserver/crashhandler.cc	(working copy)
+@@ -196,7 +196,12 @@ CrashHandler::defaultCrashHandler (int s
+           argv[i++] = NULL;
+ 
+           setgid(getgid());
+-          setuid(getuid());
++          if (getuid() != geteuid())
++            setuid(getuid());
++          if (getuid() != geteuid()) {
++	    perror("setuid()");
++            exit(255);
++          }
+ 
+           execvp(crashApp, argv);
+ 



More information about the SM-Commit mailing list