Subject: CVS commit: [pkgsrc-2005Q4] pkgsrc/textproc/antiword
To: None <pkgsrc-changes@NetBSD.org>
From: Soren Jacobsen <snj@netbsd.org>
List: pkgsrc-changes
Date: 01/25/2006 05:44:55
Module Name: pkgsrc
Committed By: snj
Date: Wed Jan 25 05:44:55 UTC 2006
Modified Files:
pkgsrc/textproc/antiword [pkgsrc-2005Q4]: Makefile distinfo
Added Files:
pkgsrc/textproc/antiword/patches [pkgsrc-2005Q4]: patch-ab
Log Message:
Pullup ticket 1055 - requested by Lubomir Sedlacik
security fix for antiword
Revisions pulled up:
- pkgsrc/textproc/antiword/Makefile 1.18
- pkgsrc/textproc/antiword/distinfo 1.17
- pkgsrc/textproc/antiword/patches/patch-ab 1.11
Module Name: pkgsrc
Committed By: salo
Date: Mon Jan 23 14:23:56 UTC 2006
Modified Files:
pkgsrc/textproc/antiword: Makefile distinfo
Added Files:
pkgsrc/textproc/antiword/patches: patch-ab
Log Message:
Security fix for CVE-2005-3126:
"The kantiword script in antiword allow local users to overwrite arbitrary
files via a symlink attack on temporary output and error files."
Replace the naive mktemp usage with something that actually works.
To generate a diff of this commit:
cvs rdiff -r1.17 -r1.17.2.1 pkgsrc/textproc/antiword/Makefile
cvs rdiff -r1.16 -r1.16.2.1 pkgsrc/textproc/antiword/distinfo
cvs rdiff -r0 -r1.10.2.1 pkgsrc/textproc/antiword/patches/patch-ab
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.