Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 103303 - dev-util/cvs temp file issues (vendor-sec)
Summary: dev-util/cvs temp file issues (vendor-sec)
Status: RESOLVED DUPLICATE of bug 103661
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Security
URL: http://cvsweb.openwall.com/cgi/cvsweb...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-08-21 22:13 UTC by Sune Kloppenborg Jeppesen (RETIRED)
Modified: 2007-08-16 18:33 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2005-08-21 22:13:47 UTC
Marcus found that cvsbug still has a tmp file problem. Although it  
creates files using mktemp it removes one of them in the middle of  
the script and then writes to it again.  
  
This should fix it:  
  
Index: cvs-1.12.12/src/cvsbug.in  
===================================================================  
--- cvs-1.12.12.orig/src/cvsbug.in  
+++ cvs-1.12.12/src/cvsbug.in  
@@ -109,14 +109,14 @@ elif [ -f /bin/domainname ]; then  
     /usr/bin/ypcat passwd 2>/dev/null | cat - /etc/passwd | grep "^$LOGNAME:"  
|  
       cut -f5 -d':' | sed -e 's/,.*//' > $TEMP  
     ORIGINATOR="`cat $TEMP`"  
-    rm -f $TEMP  
+    > $TEMP  
   fi  
 fi  
   
 if [ "$ORIGINATOR" = "" ]; then  
   grep "^$LOGNAME:" /etc/passwd | cut -f5 -d':' | sed -e 's/,.*//' > $TEMP  
   ORIGINATOR="`cat $TEMP`"  
-  rm -f $TEMP  
+  > $TEMP  
 fi  
   
 if [ -n "$ORGANIZATION" ]; then  
  
We are not going to release security updates just for this and I  
don't think it justifies an embargo, anyone disagree?  
 
--- 
 
Full Owl patches in URL.
Comment 1 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2005-08-24 22:03:46 UTC
Opening new public bug. 

*** This bug has been marked as a duplicate of 103661 ***