Skip to Content.
Sympa Menu

sm-commit - [SM-Commit] GIT changes to test grimoire by Treeve Jelbert (f7c0d63c4b2bca2db6d5cd32c6f17c1aef940e4a)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Treeve Jelbert <scm AT mail.sourcemage.org>
  • To: sm-commit AT lists.ibiblio.org
  • Subject: [SM-Commit] GIT changes to test grimoire by Treeve Jelbert (f7c0d63c4b2bca2db6d5cd32c6f17c1aef940e4a)
  • Date: Wed, 14 Jun 2006 15:09:18 -0500

GIT changes to test grimoire by Treeve Jelbert <treeve AT scarlet.be>:

kde-core/arts/DETAILS | 1 +
kde-core/arts/HISTORY | 5 +++++
kde-core/arts/PRE_BUILD | 5 +++++
kde-core/arts/arts-1.2.x.diff | 29 +++++++++++++++++++++++++++++
4 files changed, 40 insertions(+)

New commits:
commit f7c0d63c4b2bca2db6d5cd32c6f17c1aef940e4a
Author: Treeve Jelbert <treeve AT scarlet.be>
Commit: Treeve Jelbert <treeve AT scarlet.be>

arts - security patch - CVE-2006-2916

diff --git a/kde-core/arts/DETAILS b/kde-core/arts/DETAILS
index 3ac349e..645022a 100755
--- a/kde-core/arts/DETAILS
+++ b/kde-core/arts/DETAILS
@@ -9,6 +9,7 @@ SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL
BUILD_API=2
WEB_SITE=http://www.kde.org/
ENTERED=20020322
+ SECURITY_PATCH=1
LICENSE[0]=GPL
KEYWORDS="kde audio"
SHORT="Sound system used by KDE"
diff --git a/kde-core/arts/HISTORY b/kde-core/arts/HISTORY
index b08b283..580bda5 100644
--- a/kde-core/arts/HISTORY
+++ b/kde-core/arts/HISTORY
@@ -1,3 +1,8 @@
+2006-06-14 Treeve Jelbert <treeve01 AT pi.be>
+ * DETAILS: SECURITY_PATCH
+ see <http://www.kde.org/info/security/advisory-20060614-2.txt>
+ * PRE_BUILD, arts-1.2.x.diff: added
+
2006-05-31 Treeve Jelbert <treeve01 AT pi.be>
* DETAILS: version 1.5.3

diff --git a/kde-core/arts/PRE_BUILD b/kde-core/arts/PRE_BUILD
new file mode 100755
index 0000000..f38f0e6
--- /dev/null
+++ b/kde-core/arts/PRE_BUILD
@@ -0,0 +1,5 @@
+default_pre_build &&
+# mk_source_dir $SOURCE_DIRECTORY &&
+cd $SOURCE_DIRECTORY &&
+# unpack_file
+patch -p0 < $SPELL_DIRECTORY/arts-1.2.x.diff
diff --git a/kde-core/arts/arts-1.2.x.diff b/kde-core/arts/arts-1.2.x.diff
new file mode 100644
index 0000000..9b8e0fa
--- /dev/null
+++ b/kde-core/arts/arts-1.2.x.diff
@@ -0,0 +1,29 @@
+--- soundserver/artswrapper.c (revision 546970)
++++ soundserver/artswrapper.c (working copy)
+@@ -95,6 +95,10 @@ int main(int argc, char **argv)
+ #else
+ setreuid(-1, getuid());
+ #endif
++ if (geteuid() != getuid()) {
++ perror("setuid()");
++ return 2;
++ }
+ }
+
+ if(argc == 0)
+--- soundserver/crashhandler.cc (revision 546970)
++++ soundserver/crashhandler.cc (working copy)
+@@ -196,7 +196,12 @@ CrashHandler::defaultCrashHandler (int s
+ argv[i++] = NULL;
+
+ setgid(getgid());
+- setuid(getuid());
++ if (getuid() != geteuid())
++ setuid(getuid());
++ if (getuid() != geteuid()) {
++ perror("setuid()");
++ exit(255);
++ }
+
+ execvp(crashApp, argv);
+



  • [SM-Commit] GIT changes to test grimoire by Treeve Jelbert (f7c0d63c4b2bca2db6d5cd32c6f17c1aef940e4a), Treeve Jelbert, 06/14/2006

Archive powered by MHonArc 2.6.24.

Top of Page