rpms/xorg-x11-xinit/devel Xsession, 1.4, 1.5 xorg-x11-xinit.spec, 1.45, 1.46

[Soren Sandmann Pedersen (ssp)]

Author: ssp

Update of /cvs/pkgs/rpms/xorg-x11-xinit/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv15757

Modified Files:
	Xsession xorg-x11-xinit.spec 
Log Message:
Bug 212167


Index: Xsession
===================================================================
RCS file: /cvs/pkgs/rpms/xorg-x11-xinit/devel/Xsession,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -r1.4 -r1.5
--- Xsession	29 Jul 2007 23:09:50 -0000	1.4
+++ Xsession	2 Aug 2007 17:25:28 -0000	1.5
@@ -12,7 +12,7 @@
 if [ -z "$GDMSESSION" ]; then
     # GDM redirect output itself in a smarter fashion
     errfile="$HOME/.xsession-errors"
-    if cp /dev/null "$errfile" 2> /dev/null ; then
+    if ( unask 077 && cp /dev/null "$errfile" 2> /dev/null ); then
         chmod 600 "$errfile"
         exec > "$errfile" 2>&1
     else


Index: xorg-x11-xinit.spec
===================================================================
RCS file: /cvs/pkgs/rpms/xorg-x11-xinit/devel/xorg-x11-xinit.spec,v
retrieving revision 1.45
retrieving revision 1.46
diff -u -r1.45 -r1.46
--- xorg-x11-xinit.spec	29 Jul 2007 23:13:46 -0000	1.45
+++ xorg-x11-xinit.spec	2 Aug 2007 17:25:28 -0000	1.46
@@ -3,7 +3,7 @@
 Summary:   X.Org X11 X Window System xinit startup scripts
 Name:      xorg-x11-%{pkgname}
 Version:   1.0.2
-Release:   23%{?dist}
+Release:   24%{?dist}
 License:   MIT/X11
 Group:     User Interface/X
 URL:       http://www.x.org
@@ -110,6 +110,9 @@
 %{_mandir}/man1/xinit.1*
 
 %changelog
+* Thu Aug 2 2007 Soren Sandmann <sandmann at redhat.com> 1.0.2-24
+- Fix bug 212167, CVE-2006-5214
+
 * Sun Jul 29 2007 Soren Sandmann <sandmann at redhat.com> 1.0.2-23
 - Fix Xsession to run the login shell inside the setgid ssh-agent, rather
   than the other way around. This preserves LD_LIBRARY_PRELOAD.