SOURCES: cvs-CAN_2005_2693.patch (NEW) - fix Unsafe Temporary File...

krolik krolik at pld-linux.org
Tue Sep 13 06:31:31 CEST 2005


Author: krolik                       Date: Tue Sep 13 04:31:30 2005 GMT
Module: SOURCES                       Tag: HEAD
---- Log message:
- fix Unsafe Temporary Files in 'cvsbug' (CAN-2005-2693)

---- Files affected:
SOURCES:
   cvs-CAN_2005_2693.patch (NONE -> 1.1)  (NEW)

---- Diffs:

================================================================
Index: SOURCES/cvs-CAN_2005_2693.patch
diff -u /dev/null SOURCES/cvs-CAN_2005_2693.patch:1.1
--- /dev/null	Tue Sep 13 06:31:30 2005
+++ SOURCES/cvs-CAN_2005_2693.patch	Tue Sep 13 06:31:25 2005
@@ -0,0 +1,20 @@
+diff -urN cvs-1.11.20.orig/src/cvsbug.in cvs-1.11.20/src/cvsbug.in
+--- cvs-1.11.20.orig/src/cvsbug.in	2005-09-13 06:20:26.000000000 +0200
++++ cvs-1.11.20/src/cvsbug.in	2005-09-13 06:21:36.000000000 +0200
+@@ -109,14 +109,14 @@
+     /usr/bin/ypcat passwd 2>/dev/null | cat - /etc/passwd | grep "^$LOGNAME:" |
+       cut -f5 -d':' | sed -e 's/,.*//' > $TEMP
+     ORIGINATOR="`cat $TEMP`"
+-    rm -f $TEMP
++    > $TEMP
+   fi
+ fi
+ 
+ if [ "$ORIGINATOR" = "" ]; then
+   grep "^$LOGNAME:" /etc/passwd | cut -f5 -d':' | sed -e 's/,.*//' > $TEMP
+   ORIGINATOR="`cat $TEMP`"
+-  rm -f $TEMP
++  > $TEMP
+ fi
+ 
+ if [ -n "$ORGANIZATION" ]; then
================================================================



More information about the pld-cvs-commit mailing list