From 6a6c05eb4b3c61703af47d55eaf7515f264a22c0 Mon Sep 17 00:00:00 2001 From: Than Ngo Date: Mon, 11 Apr 2005 16:00:59 +0000 Subject: [PATCH] - apply debian patch to fix insecure temporary file creation in unshar #154049, CAN-2005-0990 --- sharutils.spec | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/sharutils.spec b/sharutils.spec index e41b0ce..cd43315 100644 --- a/sharutils.spec +++ b/sharutils.spec @@ -1,7 +1,7 @@ Summary: The GNU shar utilities for packaging and unpackaging shell archives. Name: sharutils Version: 4.2.1 -Release: 26 +Release: 27 License: GPL Group: Applications/Archiving Source: ftp://prep.ai.mit.edu/pub/gnu/sharutils/sharutils-%{version}.tar.gz @@ -15,6 +15,8 @@ Patch7: sharutils-4.2.1-uudecode.patch Patch8: sharutils-opto.dif Patch9: sharutils-4.2.1-sec.patch Patch10: sharutils-4.2.1-getcwd.patch +Patch11: sharutils-4.2.1-CAN-2005-0990.patch + BuildRequires: gettext Prereq: /sbin/install-info Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root @@ -46,6 +48,7 @@ Install sharutils if you send binary files through e-mail. %patch8 -p0 -b .ooption %patch9 -p1 %patch10 -p1 -b .getcwd +%patch11 -p1 -b .CAN-2005-0990 %build %configure @@ -81,6 +84,10 @@ rm -rf ${RPM_BUILD_ROOT} %{_mandir}/*/* %changelog +* Mon Apr 11 2005 Than Ngo 4.2.1-27 +- apply debian patch to fix insecure temporary file creation + in unshar #154049, CAN-2005-0990 + * Thu Mar 31 2005 Than Ngo 4.2.1-26 - apply patch to fix multiple buffer overflows #152571