rpms/xorg-x11-xinit/F-7 Xsession, 1.3, 1.4 xorg-x11-xinit.spec, 1.41, 1.42

[Soren Sandmann Pedersen (ssp)]

Author: ssp

Update of /cvs/pkgs/rpms/xorg-x11-xinit/F-7
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv14268

Modified Files:
	Xsession xorg-x11-xinit.spec 
Log Message:
Fix bug 212167


Index: Xsession
===================================================================
RCS file: /cvs/pkgs/rpms/xorg-x11-xinit/F-7/Xsession,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -r1.3 -r1.4
--- Xsession	23 Oct 2006 18:04:35 -0000	1.3
+++ Xsession	2 Aug 2007 17:06:57 -0000	1.4
@@ -12,7 +12,7 @@
 if [ -z "$GDMSESSION" ]; then
     # GDM redirect output itself in a smarter fashion
     errfile="$HOME/.xsession-errors"
-    if cp /dev/null "$errfile" 2> /dev/null ; then
+    if ( unask 077 && cp /dev/null "$errfile" 2> /dev/null ); then
         chmod 600 "$errfile"
         exec > "$errfile" 2>&1
     else


Index: xorg-x11-xinit.spec
===================================================================
RCS file: /cvs/pkgs/rpms/xorg-x11-xinit/F-7/xorg-x11-xinit.spec,v
retrieving revision 1.41
retrieving revision 1.42
diff -u -r1.41 -r1.42
--- xorg-x11-xinit.spec	11 May 2007 14:12:51 -0000	1.41
+++ xorg-x11-xinit.spec	2 Aug 2007 17:06:57 -0000	1.42
@@ -3,7 +3,7 @@
 Summary:   X.Org X11 X Window System xinit startup scripts
 Name:      xorg-x11-%{pkgname}
 Version:   1.0.2
-Release:   20%{?dist}
+Release:   21%{?dist}
 License:   MIT/X11
 Group:     User Interface/X
 URL:       http://www.x.org
@@ -112,6 +112,9 @@
 %{_mandir}/man1/xinit.1*
 
 %changelog
+* Thu Aug 2 2007 Soren Sandmann <sandmann at redhat.com> 1.0.2-21
+- Fix bug 212167, CVE-2006-5214
+
 * Sat Apr 22 2007 Matthias Clasen <mclasen at redhat.com> 1.0.2-20
 - Don't install INSTALL