security bump. - Format string vulnerability in syslog handling. - bug #69658

diff --git a/net-dns/ez-ipupdate/ChangeLog b/net-dns/ez-ipupdate/ChangeLog
index 555f73b9a03ad70995624d5602a07825be144b8b..f48f67270f8aff50a13eab3e638980557825a48a 100644 (file)
--- a/net-dns/ez-ipupdate/ChangeLog
+++ b/net-dns/ez-ipupdate/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for net-dns/ez-ipupdate
 # Copyright 2002-2004 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-dns/ez-ipupdate/ChangeLog,v 1.10 2004/08/15 11:06:00 aliz Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-dns/ez-ipupdate/ChangeLog,v 1.11 2004/11/09 16:17:23 solar Exp $
+
+*ez-ipupdate-3.0.11_beta8-r1 (09 Nov 2004)
+
+  09 Nov 2004; <solar@gentoo.org>
+  +files/ez-ipupdate-3.0.11_beta8-syslog.patch,
+  +ez-ipupdate-3.0.11_beta8-r1.ebuild, -ez-ipupdate-3.0.11_beta8.ebuild:
+  security bump. - Format string vulnerability in syslog handling. - bug #69658
 
   15 Aug 2004; Daniel Ahlberg <aliz@gentoo.org>
   ez-ipupdate-3.0.11_beta8.ebuild, files/ez-ipupdate.rc6:

diff --git a/net-dns/ez-ipupdate/Manifest b/net-dns/ez-ipupdate/Manifest
index a23a66b4e7ff229e0eff492bb3c281106e1a2358..34947896b05f46a6c9fcf48fca8451a0f7f4333e 100644 (file)
--- a/net-dns/ez-ipupdate/Manifest
+++ b/net-dns/ez-ipupdate/Manifest
@@ -1,4 +1,15 @@
-MD5 11167a67d84e335dd2398694a4a2563c ez-ipupdate-3.0.11_beta8.ebuild 802
-MD5 9e763c59243fb7796e36e4227a6faf3a ChangeLog 1642
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA1
+
+MD5 d2f3e8f358560a2268ef93ebf23caeb9 ez-ipupdate-3.0.11_beta8-r1.ebuild 912
+MD5 3c02f41ed1ecbd7b1f48e08ffbadbe82 ChangeLog 1923
 MD5 cce1451ebc90d2c8a8068f6fe7d7a875 files/ez-ipupdate.rc6 1226
-MD5 fc53ff461d5187c04a36e96c42f0d7e2 files/digest-ez-ipupdate-3.0.11_beta8 71
+MD5 fc53ff461d5187c04a36e96c42f0d7e2 files/digest-ez-ipupdate-3.0.11_beta8-r1 71
+MD5 a4f8cd6940114080f701918bd00b1800 files/ez-ipupdate-3.0.11_beta8-syslog.patch 300
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.2.4 (GNU/Linux)
+
+iD8DBQFBkO2W94CCfB4KcwwRAnzlAJ4tmTM0rt8F0HgY90dunRR2fSup1wCgi+xU
+wc2cow6/LK+fuaFgdfJ3e2I=
+=NwMw
+-----END PGP SIGNATURE-----

diff --git a/net-dns/ez-ipupdate/ez-ipupdate-3.0.11_beta8.ebuild b/net-dns/ez-ipupdate/ez-ipupdate-3.0.11_beta8-r1.ebuild
similarity index 81%
rename from net-dns/ez-ipupdate/ez-ipupdate-3.0.11_beta8.ebuild
rename to net-dns/ez-ipupdate/ez-ipupdate-3.0.11_beta8-r1.ebuild
index 74209b86e0eeefb8a2fa6b8f6d6f04322a208a0b..da66fb772799a99bc683a6c9b7540f415b8e9a5c 100644 (file)
--- a/net-dns/ez-ipupdate/ez-ipupdate-3.0.11_beta8.ebuild
+++ b/net-dns/ez-ipupdate/ez-ipupdate-3.0.11_beta8-r1.ebuild
@@ -1,6 +1,8 @@
 # Copyright 1999-2004 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-dns/ez-ipupdate/ez-ipupdate-3.0.11_beta8.ebuild,v 1.7 2004/08/15 11:06:00 aliz Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-dns/ez-ipupdate/ez-ipupdate-3.0.11_beta8-r1.ebuild,v 1.1 2004/11/09 16:17:23 solar Exp $
+
+inherit eutils
 
 MY_PV=${PV/_beta/b}
 S="${WORKDIR}/${PN}-${MY_PV}"
@@ -16,6 +18,12 @@ IUSE=""
 
 DEPEND="virtual/libc"
 
+src_unpack() {
+       unpack ${A}
+       cd ${S}
+       epatch $FILESDIR/${PN}-3.0.11_beta8-syslog.patch
+}
+
 src_install() {
        make DESTDIR=${D} install || die
        sed -i 's#/usr/local/bin/ez-ipupdate#/usr/bin/ez-ipupdate#g' *.conf

diff --git a/net-dns/ez-ipupdate/files/digest-ez-ipupdate-3.0.11_beta8 b/net-dns/ez-ipupdate/files/digest-ez-ipupdate-3.0.11_beta8-r1
similarity index 100%
rename from net-dns/ez-ipupdate/files/digest-ez-ipupdate-3.0.11_beta8
rename to net-dns/ez-ipupdate/files/digest-ez-ipupdate-3.0.11_beta8-r1

diff --git a/net-dns/ez-ipupdate/files/ez-ipupdate-3.0.11_beta8-syslog.patch b/net-dns/ez-ipupdate/files/ez-ipupdate-3.0.11_beta8-syslog.patch
new file mode 100644 (file)
index 0000000..48153e1
--- /dev/null
+++ b/net-dns/ez-ipupdate/files/ez-ipupdate-3.0.11_beta8-syslog.patch
@@ -0,0 +1,11 @@
+--- ez-ipupdate.c.old  2004-10-21 23:44:57.000000000 +0200
++++ ez-ipupdate.c      2004-10-22 23:56:05.000000000 +0200
+@@ -805,7 +805,7 @@
+     sprintf(buf, "message incomplete because your OS sucks: %s\n", fmt);
+ #endif
+ 
+-    syslog(LOG_NOTICE, buf);
++    syslog(LOG_NOTICE, "%s", buf);
+   }
+   else
+   {