mirror of
git://slackware.nl/current.git
synced 2024-12-29 10:25:00 +01:00
c9881ad979
patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txz: Rebuilt.
If root's mailbox did not already exist, it would be created with insecure
permissions leading to possible local information disclosure. This update
ensures that a new mailbox will be created with proper permissions and
ownership, and corrects the permissions on an existing mailbox if they are
found to be incorrect. Thanks to Martin for the bug report.
(* Security fix *)
patches/packages/util-linux-2.37.4-x86_64-1_slack15.0.txz: Upgraded.
This release fixes a security issue in chsh(1) and chfn(8):
By default, these utilities had been linked with libreadline, which allows
the INPUTRC environment variable to be abused to produce an error message
containing data from an arbitrary file. So, don't link these utilities with
libreadline as it does not use secure_getenv() (or a similar concept), or
sanitize the config file path to avoid vulnerabilities that could occur in
set-user-ID or set-group-ID programs.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0563
(* Security fix *)
49 lines
1.4 KiB
Diff
49 lines
1.4 KiB
Diff
--- ./rc.serial.orig Thu Jan 27 07:47:30 2000
|
|
+++ ./rc.serial Sun May 13 13:27:57 2001
|
|
@@ -14,8 +14,6 @@
|
|
# XXXX For now, the autosave feature doesn't work if you are
|
|
# using the multiport feature; it doesn't save the multiport configuration
|
|
# (for now). Autosave also doesn't work for the hayes devices.
|
|
-# Will fix later...
|
|
-#
|
|
#
|
|
|
|
RCLOCKFILE=/var/lock/subsys/serial
|
|
@@ -87,7 +85,7 @@
|
|
mv /etc/.serial.conf.new /etc/serial.conf
|
|
echo "done."
|
|
fi
|
|
- if test -n $MODULE ; then
|
|
+ if test -n "$MODULE" ; then
|
|
module=`grep $MODULE_REGEXP /proc/modules | awk '{print $1}'`
|
|
if test -z "$module" ; then
|
|
echo "The $DRIVER_NAME driver is not loaded."
|
|
@@ -108,22 +106,22 @@
|
|
# If not stop, it must be a start....
|
|
#
|
|
|
|
-if test -n $MODULE -a "$LOADED" != "yes" ; then
|
|
- if insmod -fm $MODULE $DRIVER_ARG \
|
|
- > /tmp/$DRIVER.map 2> /tmp/$DRIVER.$$; then :;
|
|
+if test -n "$MODULE" -a "$LOADED" != "yes" ; then
|
|
+ if insmod -f $MODULE $DRIVER_ARG ; then
|
|
+ true
|
|
else
|
|
echo "Couldn't load $DRIVER_NAME driver."
|
|
- echo "See error logs in /tmp/$DRIVER.$$"
|
|
exit 1
|
|
fi
|
|
- /bin/rm -f /tmp/$DRIVER.$$
|
|
fi
|
|
|
|
if test -f /etc/serial.conf ; then
|
|
if test -n ${SETSERIAL} ; then
|
|
grep -v ^# < /etc/serial.conf | while read device args
|
|
do
|
|
- ${SETSERIAL} -z $device $args
|
|
+ if [ ! "$device" = "" -a ! "$args" = "" ]; then
|
|
+ ${SETSERIAL} -z $device $args
|
|
+ fi
|
|
done
|
|
fi
|
|
else
|