|
Lines 1-3
Link Here
|
|
|
1 |
qpopper (4.0.4-2.woody.5) stable-security; urgency=high |
| 2 |
|
| 3 |
* Non-maintainer upload by the Security Team |
| 4 |
* Applied upstream patch to ensure that no group- or world-readable |
| 5 |
files are created [popper/popauth.c, CAN-2005-1152] |
| 6 |
|
| 7 |
-- Martin Schulze <joey@infodrom.org> Wed, 20 Apr 2005 20:27:57 +0200 |
| 8 |
|
| 1 |
qpopper (4.0.4-2.woody.4) stable-security; urgency=medium |
9 |
qpopper (4.0.4-2.woody.4) stable-security; urgency=medium |
| 2 |
|
10 |
|
| 3 |
* Non-maintainer upload by the Security Team |
11 |
* Non-maintainer upload by the Security Team |
| 4 |
-- qpopper-4.0.4.orig/popper/popauth.c |
12 |
++ qpopper-4.0.4/popper/popauth.c |
|
Lines 669-674
Link Here
|
| 669 |
|
695 |
|
| 670 |
memset ( &pop_pw, 0, sizeof(pop_pw) ); |
696 |
memset ( &pop_pw, 0, sizeof(pop_pw) ); |
| 671 |
memset ( &my_pw, 0, sizeof(my_pw) ); |
697 |
memset ( &my_pw, 0, sizeof(my_pw) ); |
|
|
698 |
umask ( 0077 ); /* make sure we don't create group- or world-writable files */ |
| 672 |
srandom ( (unsigned int) time ( (TIME_T *) 0) ); /* seed random with the |
699 |
srandom ( (unsigned int) time ( (TIME_T *) 0) ); /* seed random with the |
| 673 |
current time */ |
700 |
current time */ |
| 674 |
|
701 |
|
