From 1743c76cacc1bbe1c7ff640e1432656b84723784 Mon Sep 17 00:00:00 2001 From: Miroslav Lichvar Date: Tue, 24 Oct 2006 15:42:34 +0000 Subject: [PATCH] - fix insecure temp file creation on NFS (#211085, CVE-2006-5297) --- mutt.spec | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/mutt.spec b/mutt.spec index 1208964..dfe923a 100644 --- a/mutt.spec +++ b/mutt.spec @@ -2,7 +2,7 @@ Summary: A text mode mail user agent. Name: mutt %define uversion 0.9 Version: 1.4.2.2 -Release: 2 +Release: 3%{?dist} Epoch: 5 License: GPL Group: Applications/Internet @@ -25,6 +25,7 @@ Patch20: mutt-166718.patch Patch21: mutt-sasl-log.patch Patch22: mutt-1.4-manual.patch Patch23: mutt-1.4-saslauth.patch +Patch24: mutt-safeopen.patch Url: http://www.mutt.org/ Requires: smtpdaemon, webclient, mailcap, gettext Obsoletes: urlview @@ -68,6 +69,7 @@ you are going to use. %patch21 -p1 %patch22 -p1 -b .manual %patch23 -p1 -b .saslauth +%patch24 -p0 -b .safeopen install -m644 %{SOURCE1} mutt_ldap_query @@ -152,6 +154,9 @@ rm -rf $RPM_BUILD_ROOT %{_mandir}/man5/muttrc.* %changelog +* Tue Oct 24 2006 Miroslav Lichvar 5:1.4.2.2-3 +- fix insecure temp file creation on NFS (#211085, CVE-2006-5297) + * Thu Aug 03 2006 Miroslav Lichvar 5:1.4.2.2-2 - fix a SASL authentication bug (#199591)