[packages/arpd] Rel 14

[arekm]

commit d286ef85c9e7fb2fc0463c4d0ff79a0e94e7ea81
Author: Arkadiusz Miśkiewicz <arekm at maven.pl>
Date:   Tue May 12 19:48:20 2026 +0200

    Rel 14

 arpd-format-security.patch | 23 +++++++++++++++++++++++
 arpd.spec                  |  4 +++-
 2 files changed, 26 insertions(+), 1 deletion(-)
---
diff --git a/arpd.spec b/arpd.spec
index 6f458c9..4d7fe47 100644
--- a/arpd.spec
+++ b/arpd.spec
@@ -3,7 +3,7 @@ Summary:	User-space arp daemon
 Summary(pl.UTF-8):	Demon arpd działający w przestrzeni użytkownika
 Name:		arpd
 Version:	1.0.2
-Release:	13
+Release:	14
 License:	GPL
 Group:		Daemons
 # origin, but 404
@@ -19,6 +19,7 @@ Patch1:		%{name}-%{version}.pld-patch
 Patch2:		%{name}-makefile-patch
 Patch3:		%{name}-more_tables.patch
 Patch4:		%{name}-uid.patch
+Patch5:		%{name}-format-security.patch
 #URL:		http://www.loran.com/~layes/arpd/
 BuildRequires:	rpmbuild(macros) >= 1.268
 Requires(post,preun):	/sbin/chkconfig
@@ -53,6 +54,7 @@ pozycji.
 %patch -P2 -p1
 %patch -P3 -p0
 %patch -P4 -p1
+%patch -P5 -p1
 
 %build
 %{__make} \
diff --git a/arpd-format-security.patch b/arpd-format-security.patch
new file mode 100644
index 0000000..223f633
--- /dev/null
+++ b/arpd-format-security.patch
@@ -0,0 +1,23 @@
+--- a/arpd.c	2026-05-12 19:18:07.549746377 +0200
++++ b/arpd.c	2026-05-12 19:18:13.199746377 +0200
+@@ -45,7 +45,7 @@
+ ";
+
+ void show_usage() {
+-	fprintf(stdout,usage);
++	fprintf(stdout, "%s", usage);
+ }
+
+ union arpd_triedef
+@@ -126,7 +126,10 @@
+ 	fd = open("/dev/arpd", O_RDWR);
+
+ 	/* Set proper UID */
+-	setuid(uid_num);
++	if (setuid(uid_num) < 0) {
++		syslog(LOG_CRIT, "cannot setuid to %u: %m", uid_num);
++		exit(-1);
++	}
+
+ 	if (fd < 0) {
+ 		syslog(LOG_CRIT, "cannot open /dev/arpd: %m");
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/arpd.git/commitdiff/d286ef85c9e7fb2fc0463c4d0ff79a0e94e7ea81