aboutsummaryrefslogtreecommitdiffstats
path: root/recipes
diff options
context:
space:
mode:
authorHolger Hans Peter Freyther <zecke@selfish.org>2010-03-18 19:29:19 +0800
committerHolger Hans Peter Freyther <zecke@selfish.org>2010-03-18 19:29:19 +0800
commit75d85f77f336fb67b752f227f24351131b329924 (patch)
treeff620ea2fb0fd49b0f56cfdb66fd821acb72b62e /recipes
parent0331fa55449e686d0ecba81fdd9d3a1248461a41 (diff)
downloadopenembedded-75d85f77f336fb67b752f227f24351131b329924.tar.gz
ez-ipzpdate.bb: Address flaw in syslog handling
Address CVE-2004-0980.
Diffstat (limited to 'recipes')
-rw-r--r--recipes/ez-ipupdate/ez-ipupdate_3.0.10.bb3
-rw-r--r--recipes/ez-ipupdate/files/CVE-2004-0980.patch13
2 files changed, 15 insertions, 1 deletions
diff --git a/recipes/ez-ipupdate/ez-ipupdate_3.0.10.bb b/recipes/ez-ipupdate/ez-ipupdate_3.0.10.bb
index f3434e16f9..661ff96a48 100644
--- a/recipes/ez-ipupdate/ez-ipupdate_3.0.10.bb
+++ b/recipes/ez-ipupdate/ez-ipupdate_3.0.10.bb
@@ -4,12 +4,13 @@ HOMEPAGE = "http://www.ez-ipupdate.com/"
SECTION = "console/network"
PRIORITY = "optional"
LICENSE = "GPL"
-PR = "r1"
+PR = "r2"
SRC_URI = "http://www.ez-ipupdate.com/dist/ez-ipupdate-${PV}.tar.gz \
file://configure.patch;patch=1 \
file://conffile.patch;patch=1 \
file://zoneedit.patch;patch=1 \
+ file://CVE-2004-0980.patch;patch=1;pnum=0 \
file://init \
file://ipupdate.conf \
"
diff --git a/recipes/ez-ipupdate/files/CVE-2004-0980.patch b/recipes/ez-ipupdate/files/CVE-2004-0980.patch
new file mode 100644
index 0000000000..27b7ee9056
--- /dev/null
+++ b/recipes/ez-ipupdate/files/CVE-2004-0980.patch
@@ -0,0 +1,13 @@
+$FreeBSD: ports/dns/ez-ipupdate/files/patch-ez-ipupdate.c,v 1.1 2004/11/11 15:46:04 naddy Exp $
+
+--- ez-ipupdate.c.orig
++++ ez-ipupdate.c
+@@ -798,7 +798,7 @@
+ sprintf(buf, "message incomplete because your OS sucks: %s\n", fmt);
+ #endif
+
+- syslog(LOG_NOTICE, buf);
++ syslog(LOG_NOTICE, "%s", buf);
+ }
+ else
+ {