diff options
| author |   Robert Buchholz <rbu@gentoo.org> | 2009-11-25 13:43:10 +0000 |
|---|---|---|
| committer | Robert Buchholz <rbu@gentoo.org> | 2009-11-25 13:43:10 +0000 |
| commit | a4597f90c1ad91950b42d7bf84a7201553619479 (patch) | |
| tree | 736219f3576f2f943c921b5a70e2e1a97c40c908 /sys-apps/dstat/files | |
| parent | Remove 2 masked old vers. (diff) | |
| download | gentoo-2-a4597f90c1ad91950b42d7bf84a7201553619479.tar.gz gentoo-2-a4597f90c1ad91950b42d7bf84a7201553619479.tar.bz2 gentoo-2-a4597f90c1ad91950b42d7bf84a7201553619479.zip | |
Fix Untrusted Search Path Vulnerability (CVE-2009-3894), bug 293497.
(Portage version: 2.1.7.1/cvs/Linux x86_64, RepoMan options: --force)
Diffstat (limited to 'sys-apps/dstat/files')
| -rw-r--r-- | sys-apps/dstat/files/dstat-0.6.9-CVE-2009-3894.patch | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/sys-apps/dstat/files/dstat-0.6.9-CVE-2009-3894.patch b/sys-apps/dstat/files/dstat-0.6.9-CVE-2009-3894.patch new file mode 100644 index 000000000000..042552b9a3bd --- /dev/null +++ b/sys-apps/dstat/files/dstat-0.6.9-CVE-2009-3894.patch @@ -0,0 +1,15 @@ +https://bugs.gentoo.org/show_bug.cgi?id=293497 + +Index: dstat-0.6.9/dstat +=================================================================== +--- dstat-0.6.9.orig/dstat ++++ dstat-0.6.9/dstat +@@ -28,8 +28,6 @@ try: + inspath('/usr/local/share/dstat/') + inspath('/usr/share/dstat/') + inspath(os.path.abspath(os.path.dirname(sys.argv[0])) + '/plugins/') # binary path + /plugins/ +- inspath(os.getcwd() + '/plugins/') # current path + /plugins/ +- inspath(os.getcwd()) # current path + inspath(os.path.expanduser('~/.dstat/')) # home + /.dstat/ + except KeyboardInterrupt, e: + pass |