Subject: CVS commit: pkgsrc/textproc/antiword
To: None <pkgsrc-changes@NetBSD.org>
From: Lubomir Sedlacik <salo@netbsd.org>
List: pkgsrc-changes
Date: 01/23/2006 14:23:56
Module Name: pkgsrc
Committed By: salo
Date: Mon Jan 23 14:23:56 UTC 2006
Modified Files:
pkgsrc/textproc/antiword: Makefile distinfo
Added Files:
pkgsrc/textproc/antiword/patches: patch-ab
Log Message:
Security fix for CVE-2005-3126:
"The kantiword script in antiword allow local users to overwrite arbitrary
files via a symlink attack on temporary output and error files."
Replace the naive mktemp usage with something that actually works.
To generate a diff of this commit:
cvs rdiff -r1.17 -r1.18 pkgsrc/textproc/antiword/Makefile
cvs rdiff -r1.16 -r1.17 pkgsrc/textproc/antiword/distinfo
cvs rdiff -r0 -r1.11 pkgsrc/textproc/antiword/patches/patch-ab
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.