summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorFernando J. Pereda <ferdy@gentoo.org>2005-05-23 19:23:38 +0000
committerFernando J. Pereda <ferdy@gentoo.org>2005-05-23 19:23:38 +0000
commit46f6cbe094748f7e273c502d319162e453bc148c (patch)
tree357b5f29dae16972c808f3e8499370366def746d /net-mail/qpopper/files/qpopper-CAN-2005-1152.patch
parentStable on x86. (diff)
downloadhistorical-46f6cbe094748f7e273c502d319162e453bc148c.tar.gz
historical-46f6cbe094748f7e273c502d319162e453bc148c.tar.bz2
historical-46f6cbe094748f7e273c502d319162e453bc148c.zip
security bump, wrt #90622
Package-Manager: portage-2.0.51.19
Diffstat (limited to 'net-mail/qpopper/files/qpopper-CAN-2005-1152.patch')
-rw-r--r--net-mail/qpopper/files/qpopper-CAN-2005-1152.patch9
1 files changed, 9 insertions, 0 deletions
diff --git a/net-mail/qpopper/files/qpopper-CAN-2005-1152.patch b/net-mail/qpopper/files/qpopper-CAN-2005-1152.patch
new file mode 100644
index 000000000000..73b6f245c458
--- /dev/null
+++ b/net-mail/qpopper/files/qpopper-CAN-2005-1152.patch
@@ -0,0 +1,9 @@
+--- qpopper-4.0.4.orig/popper/popauth.c
++++ qpopper-4.0.4/popper/popauth.c
+@@ -669,6 +695,7 @@
+
+ memset ( &pop_pw, 0, sizeof(pop_pw) );
+ memset ( &my_pw, 0, sizeof(my_pw) );
++ umask ( 0077 ); /* make sure we don't create group- or world-writable files */
+ srandom ( (unsigned int) time ( (TIME_T *) 0) ); /* seed random with the
+ current time */