Revision bump, security bug #94587.

Package-Manager: portage-2.0.51.22-r2

5 files changed, 36 insertions, 11 deletions

diff --git a/net-im/silc-server/ChangeLog b/net-im/silc-server/ChangeLog
index b72a3b826927..db9a0621f593 100644
--- a/net-im/silc-server/ChangeLog
+++ b/net-im/silc-server/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for net-im/silc-server
 # Copyright 1999-2005 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-im/silc-server/ChangeLog,v 1.9 2005/08/10 21:40:09 swegener Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-im/silc-server/ChangeLog,v 1.10 2005/09/08 13:31:27 swegener Exp $
+
+*silc-server-1.0-r1 (08 Sep 2005)
+
+  08 Sep 2005; Sven Wegener <swegener@gentoo.org>
+  +files/1.0-tempfile-vuln.patch, -silc-server-1.0.ebuild,
+  +silc-server-1.0-r1.ebuild:
+  Revision bump, security bug #94587.
 
   10 Aug 2005; Sven Wegener <swegener@gentoo.org> silc-server-1.0.ebuild:
   Fix the version mismatch problem, bug #99952.
diff --git a/net-im/silc-server/Manifest b/net-im/silc-server/Manifest
index bba68fba820a..6ce454c83eae 100644
--- a/net-im/silc-server/Manifest
+++ b/net-im/silc-server/Manifest
@@ -1,17 +1,18 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA1
 
-MD5 12efb1a14928b8b4e51d9369c2a8bcd3 ChangeLog 1806
+MD5 4850a13089239174d7221c92e2f510ca ChangeLog 2020
 MD5 bc8dbf4b64aee6fb4265bc1834e8fc6f files/1.0-banlist-fix.patch 428
 MD5 1d2c979312a0f446a2c84f2b3a98f76b files/1.0-fPIC.patch 296
-MD5 16f7bf5863b8fe1ce3293e158882ee35 files/digest-silc-server-1.0 68
+MD5 4cf5e0d2734feda88b77fecd650ef181 files/1.0-tempfile-vuln.patch 509
+MD5 16f7bf5863b8fe1ce3293e158882ee35 files/digest-silc-server-1.0-r1 68
 MD5 e6e284a15d071cfdf8df8a2b7bff775a files/silcd.rc6 519
 MD5 44c39c6ad372a8e5a5e7ee3311f703a7 metadata.xml 160
-MD5 f0ed44b61dfeb4c69d59c8d9a9d149ec silc-server-1.0.ebuild 1825
+MD5 8cc57cf62f2c65e8bbfb9b3edef407f6 silc-server-1.0-r1.ebuild 1806
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.4.2 (GNU/Linux)
 
-iD8DBQFC+nRGI1lqEGTUzyQRAreNAKCMeOHznvLpA2aBWamWZ6Laefo5JgCgnaBq
-/Uz83Yubi6fQTTIXTHHYYbw=
-=H+wC
+iD8DBQFDID1EI1lqEGTUzyQRArA8AKCr7NLj9BK8yfqqWEiRXPs02FWqJgCdGyt3
+NlWaaLijPKbrMAEeytXlIIw=
+=9RuV
 -----END PGP SIGNATURE-----
diff --git a/net-im/silc-server/files/1.0-tempfile-vuln.patch b/net-im/silc-server/files/1.0-tempfile-vuln.patch
new file mode 100644
index 000000000000..46acb32c4404
--- /dev/null
+++ b/net-im/silc-server/files/1.0-tempfile-vuln.patch
@@ -0,0 +1,17 @@
+--- apps/silcd/silcd.c.orig	2004-02-27 15:29:51.000000000 +0000
++++ apps/silcd/silcd.c	2005-06-20 13:49:34.511237224 +0100
+@@ -260,11 +260,13 @@
+ SILC_TASK_CALLBACK(dump_stats)
+ {
+   FILE *fdd;
++  int fdes;
+   char filename[256];
+ 
+   memset(filename, 0, sizeof(filename));
+   snprintf(filename, sizeof(filename) - 1, "/tmp/silcd.%d.stats", getpid());
+-  fdd = fopen(filename, "w+");
++  fdes = open (filename, O_CREAT|O_EXCL|O_WRONLY, S_IRUSR|S_IWUSR);
++  fdd = fdopen(fdes, "w");
+   if (!fdd)
+     return;
+ 
diff --git a/net-im/silc-server/files/digest-silc-server-1.0 b/net-im/silc-server/files/digest-silc-server-1.0-r1
index 164ebf8878e0..164ebf8878e0 100644
--- a/net-im/silc-server/files/digest-silc-server-1.0
+++ b/net-im/silc-server/files/digest-silc-server-1.0-r1
diff --git a/net-im/silc-server/silc-server-1.0.ebuild b/net-im/silc-server/silc-server-1.0-r1.ebuild
index f6e411651bc1..871610110646 100644
--- a/net-im/silc-server/silc-server-1.0.ebuild
+++ b/net-im/silc-server/silc-server-1.0-r1.ebuild
@@ -1,8 +1,8 @@
 # Copyright 1999-2005 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-im/silc-server/silc-server-1.0.ebuild,v 1.2 2005/08/10 21:40:09 swegener Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-im/silc-server/silc-server-1.0-r1.ebuild,v 1.1 2005/09/08 13:31:27 swegener Exp $
 
-inherit eutils
+inherit eutils autotools
 
 DESCRIPTION="Server for Secure Internet Live Conferencing"
 SRC_URI="http://www.silcnet.org/download/server/sources/${P}.tar.bz2"
@@ -24,9 +24,9 @@ src_unpack() {
 
 	epatch "${FILESDIR}"/${PV}-banlist-fix.patch
 	epatch "${FILESDIR}"/${PV}-fPIC.patch
+	epatch "${FILESDIR}"/${PV}-tempfile-vuln.patch
 
-	autoreconf || die "autoreconf failed"
-	libtoolize --copy --force || die "libtoolize failed"
+	eautoreconf
 }
 
 src_compile() {