Add security patch from the FreeBSD ports collection:
Drop setgid kmem privs before executing external programs. Reported by: Christer Oberg <christer.oberg@gmx.net> Bump the package revision to 3.
This commit is contained in:
parent
0098eba49c
commit
6fc1051e41
3 changed files with 13 additions and 5 deletions
|
@ -1,7 +1,7 @@
|
|||
# $NetBSD: Makefile,v 1.6 2001/11/29 01:12:44 hubertf Exp $
|
||||
# $NetBSD: Makefile,v 1.7 2002/09/18 10:40:12 tron Exp $
|
||||
|
||||
DISTNAME= wmnet-1.06
|
||||
PKGREVISION= 2
|
||||
PKGREVISION= 3
|
||||
CATEGORIES= net x11
|
||||
MASTER_SITES= http://www.digitalkaos.net/linux/wmnet/download/
|
||||
|
||||
|
|
|
@ -1,10 +1,10 @@
|
|||
$NetBSD: distinfo,v 1.4 2002/07/18 12:57:56 seb Exp $
|
||||
$NetBSD: distinfo,v 1.5 2002/09/18 10:40:12 tron Exp $
|
||||
|
||||
SHA1 (wmnet-1.06.tar.gz) = 978364e0ab45c71730c196334e8fced4ac0a7853
|
||||
Size (wmnet-1.06.tar.gz) = 27506 bytes
|
||||
SHA1 (patch-aa) = d999f66818c05f2f9a58571abc0e548bb2938a4b
|
||||
SHA1 (patch-ab) = 2c2fbc065a49bc27dd42660dda23393e02269714
|
||||
SHA1 (patch-ac) = f8793a06cdf4ffd9e852dd802054734a566edb30
|
||||
SHA1 (patch-ad) = 7a420d0dcef977549ba35a1046a0e5509a0c3643
|
||||
SHA1 (patch-ad) = f66a39da4381feca668bde9bd5768c2e214868f6
|
||||
SHA1 (patch-ae) = 09d413422b0074c29da7c8a9c271d9ddb2be04fb
|
||||
SHA1 (patch-af) = 70c0917b465acf778b6b744bef587bc8e41e49fb
|
||||
|
|
|
@ -1,4 +1,4 @@
|
|||
$NetBSD: patch-ad,v 1.3 2002/07/18 12:57:58 seb Exp $
|
||||
$NetBSD: patch-ad,v 1.4 2002/09/18 10:40:13 tron Exp $
|
||||
|
||||
--- wmnet.c.orig Fri May 5 03:01:14 2000
|
||||
+++ wmnet.c Mon Jul 8 16:52:30 2002
|
||||
|
@ -181,3 +181,11 @@ $NetBSD: patch-ad,v 1.3 2002/07/18 12:57:58 seb Exp $
|
|||
XFillRectangle(dpy, *visible_window, graphics_context, 4, 5, 37, 9);
|
||||
}
|
||||
if (rate < .1) {
|
||||
@@ -732,6 +732,7 @@
|
||||
case ButtonPress:
|
||||
if(event.xbutton.button == Button1 && click_command != NULL) {
|
||||
if (fork() == 0) {
|
||||
+ setgid(getgid());
|
||||
execl("/bin/sh", "sh", "-c", click_command, NULL);
|
||||
perror("wmnet: execl()");
|
||||
exit(15);
|
||||
|
|
Loading…
Reference in a new issue