diff options
| author | oliver <oliver@FreeBSD.org> | 2003-05-21 04:33:44 +0800 |
|---|---|---|
| committer | oliver <oliver@FreeBSD.org> | 2003-05-21 04:33:44 +0800 |
| commit | 09e813d382421d7dec6ab4e5e57795822937e3dc (patch) | |
| tree | e7b44a80da9d7cff8f87165d0d2eef68c50f8f05 /sysutils/cdrtools-devel | |
| parent | 6f6a203bffd5d4d3091c5e3f1e1652d6592acbff (diff) | |
| download | freebsd-ports-gnome-09e813d382421d7dec6ab4e5e57795822937e3dc.tar.gz freebsd-ports-gnome-09e813d382421d7dec6ab4e5e57795822937e3dc.tar.zst freebsd-ports-gnome-09e813d382421d7dec6ab4e5e57795822937e3dc.zip | |
Fix a securety issue which may cause a local root exploit
(if the cdrecord binary is suid 0).
For more information about this, feel free to take a look at
http://marc.theaimsgroup.com/?l=bugtraq&m=105285564307225&w=2
Approved by: maintainer hasn't responded within 3 days, alex (mentor)
Diffstat (limited to 'sysutils/cdrtools-devel')
| -rw-r--r-- | sysutils/cdrtools-devel/Makefile | 2 | ||||
| -rw-r--r-- | sysutils/cdrtools-devel/files/patch-libscg::scsiopen.c | 11 |
2 files changed, 12 insertions, 1 deletions
diff --git a/sysutils/cdrtools-devel/Makefile b/sysutils/cdrtools-devel/Makefile index a30f3fa25bf1..badd3187c73b 100644 --- a/sysutils/cdrtools-devel/Makefile +++ b/sysutils/cdrtools-devel/Makefile @@ -7,7 +7,7 @@ PORTNAME?= cdrtools PORTVERSION?= 2.0 -PORTREVISION?= 0 +PORTREVISION?= 1 CATEGORIES?= sysutils audio MASTER_SITES= ftp://ftp.berlios.de/pub/cdrecord/ \ ftp://ftp.cs.tu-berlin.de/pub/misc/cdrecord/ \ diff --git a/sysutils/cdrtools-devel/files/patch-libscg::scsiopen.c b/sysutils/cdrtools-devel/files/patch-libscg::scsiopen.c new file mode 100644 index 000000000000..2a4f44176f16 --- /dev/null +++ b/sysutils/cdrtools-devel/files/patch-libscg::scsiopen.c @@ -0,0 +1,11 @@ +--- libscg/scsiopen.c.orig Tue May 20 21:47:41 2003 ++++ libscg/scsiopen.c Tue May 20 21:48:28 2003 +@@ -270,7 +270,7 @@ + } + if (scg__open(scgp, devname) <= 0) { + if (errs && scgp->errstr) +- js_snprintf(errs, slen, scgp->errstr); ++ js_snprintf(errs, slen, "%s", scgp->errstr); + scg_sfree(scgp); + return ((SCSI *)0); + } |