rpms/sysstat/F-7 sysstat-7.0.4-cve_2007_3852.patch, NONE, 1.1 sysstat.spec, 1.50, 1.51
Ivana Varekova (varekova)
fedora-extras-commits at redhat.com
Mon Aug 20 08:56:58 UTC 2007
- Previous message (by thread): rpms/espeak/devel espeak-1.28-synthdata_strlen.patch, NONE, 1.1 .cvsignore, 1.10, 1.11 espeak.spec, 1.10, 1.11 sources, 1.10, 1.11
- Next message (by thread): rpms/smartmontools/F-7 smartmontools.spec,1.32,1.33
- Messages sorted by:
[ date ]
[ thread ]
[ subject ]
[ author ]
Author: varekova
Update of /cvs/pkgs/rpms/sysstat/F-7
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv30987
Modified Files:
sysstat.spec
Added Files:
sysstat-7.0.4-cve_2007_3852.patch
Log Message:
- fix cve-2007-3852 -
sysstat insecure temporary file usage
sysstat-7.0.4-cve_2007_3852.patch:
--- NEW FILE sysstat-7.0.4-cve_2007_3852.patch ---
--- sysstat-7.0.4/sysstat.in.cve3852 2007-08-15 15:15:04.000000000 +0200
+++ sysstat-7.0.4/sysstat.in 2007-08-15 15:17:31.000000000 +0200
@@ -20,13 +20,11 @@
RETVAL=0
HISTORY=0
-TMPDIR=/var/run/
-# Remove flag indicating that sadc was successfully launched
-rm -f ${TMPDIR}sysstat.run
# See how we were called.
case "$1" in
start)
+ exitCodeIndicator="$(mktemp /tmp/sysstat-XXXXXX)" || exit 1
[ -r /etc/sysconfig/sysstat ] && . /etc/sysconfig/sysstat
if [ ${HISTORY} -gt 28 ]
then
@@ -43,15 +41,15 @@ case "$1" in
CHOWN ${CURRENTDIR} ${CURRENTFILE} ${CURRENTDIR}/${CURRENTFILE}
fi
echo -n "Calling the system activity data collector (sadc): "
- SU SA_LIB_DIR/sadc -F -L - && touch ${TMPDIR}sysstat.run QUOTE
+ SU SA_LIB_DIR/sadc -F -L - || rm -f ${exitCodeIndicator} QUOTE
# Try to guess if sadc was successfully launched. The difficulty
# here is that the exit code is lost when the above command is
# run via "su foo -c ..."
- if [ ! -f ${TMPDIR}sysstat.run ]; then
- RETVAL=1
+ if [ -f "${exitCodeIndicator}" ]; then
+ rm -f ${exitCodeIndicator}
else
- rm -f ${TMPDIR}sysstat.run
+ RETVAL=1
fi
echo
;;
Index: sysstat.spec
===================================================================
RCS file: /cvs/pkgs/rpms/sysstat/F-7/sysstat.spec,v
retrieving revision 1.50
retrieving revision 1.51
diff -u -r1.50 -r1.51
--- sysstat.spec 23 Mar 2007 10:54:28 -0000 1.50
+++ sysstat.spec 20 Aug 2007 08:56:26 -0000 1.51
@@ -1,6 +1,6 @@
Name: sysstat
Version: 7.0.4
-Release: 2%{?dist}
+Release: 3%{?dist}
Summary: The sar and iostat system monitoring commands
License: GPL
Group: Applications/System
@@ -15,6 +15,7 @@
Patch9: sysstat-7.0.4-tmp.patch
Patch10: sysstat-7.0.3-debuginfo.patch
Patch11: sysstat-7.0.4-links.patch
+Patch12: sysstat-7.0.4-cve_2007_3852.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -36,6 +37,7 @@
%patch9 -p1 -b .tmp
%patch10 -p1 -b .db
%patch11 -p1 -b .link
+%patch12 -p1 -b .cve3852
%build
# FIXME: I need to fix the upstream Makefile to use LIBDIR et al. properly and
@@ -114,6 +116,10 @@
/var/log/sa
%changelog
+* Mon Aug 20 2007 Ivana Varekova <varekova at redhat.com> - 7.0.4-3
+- fix cve-2007-3852 -
+ sysstat insecure temporary file usage
+
* Fri Mar 23 2007 Ivana Varekova <varekova at redhat.com> - 7.0.4-2
- fix sa2 problem (sa2 works wrong when the /var/log/sa file is
a link to another directory)
- Previous message (by thread): rpms/espeak/devel espeak-1.28-synthdata_strlen.patch, NONE, 1.1 .cvsignore, 1.10, 1.11 espeak.spec, 1.10, 1.11 sources, 1.10, 1.11
- Next message (by thread): rpms/smartmontools/F-7 smartmontools.spec,1.32,1.33
- Messages sorted by:
[ date ]
[ thread ]
[ subject ]
[ author ]
More information about the fedora-extras-commits
mailing list