Security fix

Package-Manager: portage-2.1.3.9

9 files changed, 101 insertions, 33 deletions

diff --git a/app-emulation/xen-tools/ChangeLog b/app-emulation/xen-tools/ChangeLog
index 0748b4ff632f..ee98d7402a07 100644
--- a/app-emulation/xen-tools/ChangeLog
+++ b/app-emulation/xen-tools/ChangeLog
@@ -1,6 +1,17 @@
 # ChangeLog for app-emulation/xen-tools
 # Copyright 1999-2007 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-emulation/xen-tools/ChangeLog,v 1.31 2007/10/15 18:34:34 marineam Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-emulation/xen-tools/ChangeLog,v 1.32 2007/10/23 19:09:08 marineam Exp $
+
+*xen-tools-3.1.1-r1 (23 Oct 2007)
+*xen-tools-3.1.0-r2 (23 Oct 2007)
+*xen-tools-3.0.4_p1-r2 (23 Oct 2007)
+
+  23 Oct 2007; Michael Marineau <marineam@gentoo.org>
+  +files/xen-tools-3.1.1-insecure-file-creation-fix.patch,
+  -xen-tools-3.0.4_p1-r1.ebuild, +xen-tools-3.0.4_p1-r2.ebuild,
+  -xen-tools-3.1.0-r1.ebuild, +xen-tools-3.1.0-r2.ebuild,
+  -xen-tools-3.1.1.ebuild, +xen-tools-3.1.1-r1.ebuild:
+  Fix an insecure temp file creation, bug #196824, CVE-2007-3919
 
 *xen-tools-3.1.1 (15 Oct 2007)
 
diff --git a/app-emulation/xen-tools/Manifest b/app-emulation/xen-tools/Manifest
index a42bd9faeb57..09c0d0fce3a8 100644
--- a/app-emulation/xen-tools/Manifest
+++ b/app-emulation/xen-tools/Manifest
@@ -37,6 +37,10 @@ AUX xen-tools-3.1.0-xen-detect-nopie-fix.patch 385 RMD160 5ad84ac847c1eeeaa7aac2
 MD5 bd84228a8540517a0eb0353f6b5c28fa files/xen-tools-3.1.0-xen-detect-nopie-fix.patch 385
 RMD160 5ad84ac847c1eeeaa7aac2fbcfd3b476ee7c991d files/xen-tools-3.1.0-xen-detect-nopie-fix.patch 385
 SHA256 c8b7a0858001b15ff12cc652977eb7ada06b036a8c593fccac9015ce05c84816 files/xen-tools-3.1.0-xen-detect-nopie-fix.patch 385
+AUX xen-tools-3.1.1-insecure-file-creation-fix.patch 1574 RMD160 42e46f45d072d78849bc2ae802615ec5b5d440d0 SHA1 14303ee75c889aa5f3a399ca76f4728bb54fc15a SHA256 ddde8696cc6a8ed78a750e1cabe7d27eb47e19b21bf3e6288a5cc6d67afc513e
+MD5 510f5e62631e90a33afc31f0ac980dff files/xen-tools-3.1.1-insecure-file-creation-fix.patch 1574
+RMD160 42e46f45d072d78849bc2ae802615ec5b5d440d0 files/xen-tools-3.1.1-insecure-file-creation-fix.patch 1574
+SHA256 ddde8696cc6a8ed78a750e1cabe7d27eb47e19b21bf3e6288a5cc6d67afc513e files/xen-tools-3.1.1-insecure-file-creation-fix.patch 1574
 AUX xend.initd 1291 RMD160 96659d237688d0c42e5c30491ad883d4af0f1c0f SHA1 2ffe2b29df7014d1dbf69f850a23a95e1b294288 SHA256 41ae7f38565a477abc1fb8ac5af9d6285bf90d171b922c6413aa8aefe5b00889
 MD5 7f0fd3d9e324921b0ffabfb2b6e17945 files/xend.initd 1291
 RMD160 96659d237688d0c42e5c30491ad883d4af0f1c0f files/xend.initd 1291
@@ -56,39 +60,39 @@ SHA256 b0dd6c8e588ce76026488243dbe8d6adf9af7d8276fb268fcb439ba1ce59f756 files/xe
 DIST xen-3.0.4_1-src.tgz 6473636 RMD160 f869eec35f6afe0bc9824ce2eb4a600f789d423b SHA1 7ca5af70996215229e143c7563e69b3719284a95 SHA256 6b3842393e69a9c8fcdbc2789d05830aba6f1d108a6f97f1448de4a86f92a5cb
 DIST xen-3.1.0-src.tgz 6831094 RMD160 2fd65a3b81e522d0ed2d62fd11e5977167f1ceb3 SHA1 fa4b54c36626f2cce9b15dc99cafda0b42c54777 SHA256 b5d7cea6deeee1439e8883fed4b3f1a8e4f675b4af8148178721f99bd76676b7
 DIST xen-3.1.1.tgz 6868014 RMD160 23f522a76815a64ba18eaf9eec19f38ea01e8c32 SHA1 203b51946dbcbfbdac506a718727ac8fdb2d4683 SHA256 c6c986177e75e41e7412920d453b5b759568a90266b09e2fea6043f8890f75e2
-EBUILD xen-tools-3.0.4_p1-r1.ebuild 6335 RMD160 604727bab5b20e6b81c65113251f53dc7ba8449c SHA1 620348fdeb27c1dea6ccd8f99adacf98e20c3309 SHA256 685d5ddcdb7ddced972ea89386d039464eeda4574c8ce5bb8303cb2ddf38c2f3
-MD5 f0ce63096d22fbd5f8cc7e01adea1ed2 xen-tools-3.0.4_p1-r1.ebuild 6335
-RMD160 604727bab5b20e6b81c65113251f53dc7ba8449c xen-tools-3.0.4_p1-r1.ebuild 6335
-SHA256 685d5ddcdb7ddced972ea89386d039464eeda4574c8ce5bb8303cb2ddf38c2f3 xen-tools-3.0.4_p1-r1.ebuild 6335
-EBUILD xen-tools-3.1.0-r1.ebuild 6727 RMD160 3dcf37f8e54264284043e3770cc0f17ba3d8169e SHA1 7cc60ca5440134906c049bb936ef64dacb69a020 SHA256 390f6f8078f98e00ebedd5f77e2526d6d7c6a1da54861bc1abef72383b22e361
-MD5 a5828af91f8532b55eec7f3ed5020148 xen-tools-3.1.0-r1.ebuild 6727
-RMD160 3dcf37f8e54264284043e3770cc0f17ba3d8169e xen-tools-3.1.0-r1.ebuild 6727
-SHA256 390f6f8078f98e00ebedd5f77e2526d6d7c6a1da54861bc1abef72383b22e361 xen-tools-3.1.0-r1.ebuild 6727
-EBUILD xen-tools-3.1.1.ebuild 6595 RMD160 466f8aee1ad89628b4db2c86b743a4bb4850ef55 SHA1 dfc7cb0422e7c42e513806003f1a8f99a98b9160 SHA256 df7a30647e629a6b9454fbdba73648f91af9670c6814ac7a2faf83e201e8df1e
-MD5 ba72743f77dcfb597901e2ea5386cd46 xen-tools-3.1.1.ebuild 6595
-RMD160 466f8aee1ad89628b4db2c86b743a4bb4850ef55 xen-tools-3.1.1.ebuild 6595
-SHA256 df7a30647e629a6b9454fbdba73648f91af9670c6814ac7a2faf83e201e8df1e xen-tools-3.1.1.ebuild 6595
-MISC ChangeLog 9391 RMD160 6dc7ec766addb61c0a61a3178f3de14da17c2614 SHA1 ac81cb8322bd045a170e5d42ac1b3e8d75060afe SHA256 2dabd66fbb3c459bd71828a2f06f420b7eee682c8d28d6c4f7339494689de617
-MD5 49f95220ce8d88c3f7fa5787e8154ec9 ChangeLog 9391
-RMD160 6dc7ec766addb61c0a61a3178f3de14da17c2614 ChangeLog 9391
-SHA256 2dabd66fbb3c459bd71828a2f06f420b7eee682c8d28d6c4f7339494689de617 ChangeLog 9391
+EBUILD xen-tools-3.0.4_p1-r2.ebuild 6469 RMD160 87db257a55c67d1ea88a7d717e295d3b5fe0a7a8 SHA1 03eb89286d2ce7e9d67035e00497b70268b4d309 SHA256 6c65972b7a6def63493ae83c10d291de3d1637cb4f0da786428d7d1b0ff6a516
+MD5 98f217114f7bc995fec7260eabef4a23 xen-tools-3.0.4_p1-r2.ebuild 6469
+RMD160 87db257a55c67d1ea88a7d717e295d3b5fe0a7a8 xen-tools-3.0.4_p1-r2.ebuild 6469
+SHA256 6c65972b7a6def63493ae83c10d291de3d1637cb4f0da786428d7d1b0ff6a516 xen-tools-3.0.4_p1-r2.ebuild 6469
+EBUILD xen-tools-3.1.0-r2.ebuild 6861 RMD160 6be4e70d045e614485a27343c447c52694b5c325 SHA1 515b2015681d1159d850cd89ed8d0f7e08e2f0e8 SHA256 e7c66486a837fc165e80f8d7d210e38450f4900e72a5bd42b9ac0b63ea1285a1
+MD5 9004bfa217440e8b396e45eb5052d0d7 xen-tools-3.1.0-r2.ebuild 6861
+RMD160 6be4e70d045e614485a27343c447c52694b5c325 xen-tools-3.1.0-r2.ebuild 6861
+SHA256 e7c66486a837fc165e80f8d7d210e38450f4900e72a5bd42b9ac0b63ea1285a1 xen-tools-3.1.0-r2.ebuild 6861
+EBUILD xen-tools-3.1.1-r1.ebuild 6707 RMD160 c45f9cee6b90714cd5ecf6a24cd8c31ebffa22ac SHA1 699a48ee0b8dfffbba47cff423aa6dbf8ef64249 SHA256 599119def08218ef505efeeae0ab1464224fdd871a70908feb3d56b9e7621511
+MD5 a58da6f46b1aa1ff5dc1a4b4f1361fac xen-tools-3.1.1-r1.ebuild 6707
+RMD160 c45f9cee6b90714cd5ecf6a24cd8c31ebffa22ac xen-tools-3.1.1-r1.ebuild 6707
+SHA256 599119def08218ef505efeeae0ab1464224fdd871a70908feb3d56b9e7621511 xen-tools-3.1.1-r1.ebuild 6707
+MISC ChangeLog 9853 RMD160 da69066f5e225374a35b7a5c16b0c3e23803936e SHA1 2b80d41a6d5c40c45f3236f72f5ce230eeb9369d SHA256 81e9e19b6da5ab3bc4e352a94bcdb5e36539566e3fa6e000019743febb9a6c80
+MD5 c7d7d876d15cc870642edcb25e3730da ChangeLog 9853
+RMD160 da69066f5e225374a35b7a5c16b0c3e23803936e ChangeLog 9853
+SHA256 81e9e19b6da5ab3bc4e352a94bcdb5e36539566e3fa6e000019743febb9a6c80 ChangeLog 9853
 MISC metadata.xml 156 RMD160 bb062b1ba5554779dcfd0e73baf533ce9fbcdf68 SHA1 e6da014f2004758c7a806592ef9450489eebf593 SHA256 4a030777459245372bda9f7925f3a5ed3ef2b29b77e1a2971f3400ac2059b1e2
 MD5 559b4095659a2a2a489784de8a6ef95e metadata.xml 156
 RMD160 bb062b1ba5554779dcfd0e73baf533ce9fbcdf68 metadata.xml 156
 SHA256 4a030777459245372bda9f7925f3a5ed3ef2b29b77e1a2971f3400ac2059b1e2 metadata.xml 156
-MD5 de126addfd4101f35f8880ab0817ab03 files/digest-xen-tools-3.0.4_p1-r1 241
-RMD160 b65ff6928079bc0ee81b68ab27f3f4c9e1d36856 files/digest-xen-tools-3.0.4_p1-r1 241
-SHA256 66cfb008cc25de8a507359e492d6896908bc619901d901ae018fb135d2d91345 files/digest-xen-tools-3.0.4_p1-r1 241
-MD5 b2e86effae6681cbbecdbf864b193b4a files/digest-xen-tools-3.1.0-r1 235
-RMD160 2366b7298f0125f11d41aca0c6088c20863dbed1 files/digest-xen-tools-3.1.0-r1 235
-SHA256 12c130912c624791e6855ebeb932368fc8889371876db396055b02ac9a3b9892 files/digest-xen-tools-3.1.0-r1 235
-MD5 7a507c4f0b5864e5c1fc63947d75db65 files/digest-xen-tools-3.1.1 223
-RMD160 2c54489ac78687ede1e73b8949c1ad2d3a23da3c files/digest-xen-tools-3.1.1 223
-SHA256 fba65027f88a1e1a28e4a631bc4ba0b558fa5452d12aa10e6cda49a0a0c69f90 files/digest-xen-tools-3.1.1 223
+MD5 de126addfd4101f35f8880ab0817ab03 files/digest-xen-tools-3.0.4_p1-r2 241
+RMD160 b65ff6928079bc0ee81b68ab27f3f4c9e1d36856 files/digest-xen-tools-3.0.4_p1-r2 241
+SHA256 66cfb008cc25de8a507359e492d6896908bc619901d901ae018fb135d2d91345 files/digest-xen-tools-3.0.4_p1-r2 241
+MD5 b2e86effae6681cbbecdbf864b193b4a files/digest-xen-tools-3.1.0-r2 235
+RMD160 2366b7298f0125f11d41aca0c6088c20863dbed1 files/digest-xen-tools-3.1.0-r2 235
+SHA256 12c130912c624791e6855ebeb932368fc8889371876db396055b02ac9a3b9892 files/digest-xen-tools-3.1.0-r2 235
+MD5 7a507c4f0b5864e5c1fc63947d75db65 files/digest-xen-tools-3.1.1-r1 223
+RMD160 2c54489ac78687ede1e73b8949c1ad2d3a23da3c files/digest-xen-tools-3.1.1-r1 223
+SHA256 fba65027f88a1e1a28e4a631bc4ba0b558fa5452d12aa10e6cda49a0a0c69f90 files/digest-xen-tools-3.1.1-r1 223
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.4.7 (GNU/Linux)
 
-iD8DBQFHE7K+iP+LossGzjARAkYwAKDQUqbv+MWhFA+6pJrT8oqsrAM+fwCgmbGu
-DJJ9EkspZEiIFyQbCQls38E=
-=7pAC
+iD8DBQFHHkboiP+LossGzjARAkv8AJ9nqImRRhbAA4XcSQKEa6llfYvpqQCfXP73
+QAZ62Q2DRu2EcSy8l537lx8=
+=1g/D
 -----END PGP SIGNATURE-----
diff --git a/app-emulation/xen-tools/files/digest-xen-tools-3.0.4_p1-r1 b/app-emulation/xen-tools/files/digest-xen-tools-3.0.4_p1-r2
index 7aadef066796..7aadef066796 100644
--- a/app-emulation/xen-tools/files/digest-xen-tools-3.0.4_p1-r1
+++ b/app-emulation/xen-tools/files/digest-xen-tools-3.0.4_p1-r2
diff --git a/app-emulation/xen-tools/files/digest-xen-tools-3.1.0-r1 b/app-emulation/xen-tools/files/digest-xen-tools-3.1.0-r2
index e436de9ac59e..e436de9ac59e 100644
--- a/app-emulation/xen-tools/files/digest-xen-tools-3.1.0-r1
+++ b/app-emulation/xen-tools/files/digest-xen-tools-3.1.0-r2
diff --git a/app-emulation/xen-tools/files/digest-xen-tools-3.1.1 b/app-emulation/xen-tools/files/digest-xen-tools-3.1.1-r1
index e739866b2661..e739866b2661 100644
--- a/app-emulation/xen-tools/files/digest-xen-tools-3.1.1
+++ b/app-emulation/xen-tools/files/digest-xen-tools-3.1.1-r1
diff --git a/app-emulation/xen-tools/files/xen-tools-3.1.1-insecure-file-creation-fix.patch b/app-emulation/xen-tools/files/xen-tools-3.1.1-insecure-file-creation-fix.patch
new file mode 100644
index 000000000000..9746f6ffca64
--- /dev/null
+++ b/app-emulation/xen-tools/files/xen-tools-3.1.1-insecure-file-creation-fix.patch
@@ -0,0 +1,44 @@
+
+# HG changeset patch
+# User Keir Fraser <keir@xensource.com>
+# Date 1193128003 -3600
+# Node ID b28ae5f00553ea053bd4e4576634d8ea49e77bc3
+# Parent 118a21c66fd53a08d7191159e5b2888f8d9e4ad2
+xenmon: Fix security vulnerability CVE-2007-3919.
+
+The xenbaked daemon and xenmon utility communicate via a mmap'ed
+shared file. Since this file is located in /tmp, unprivileged users
+can cause arbitrary files to be truncated by creating a symlink from
+the well-known /tmp filename to e.g., /etc/passwd.
+
+The fix is to place the shared file in a directory to which only root
+should have access (in this case /var/run/).
+
+This bug was reported, and the fix suggested, by Steve Kemp
+<skx@debian.org>. Thanks!
+
+Signed-off-by: Keir Fraser <keir@xensource.com>
+
+--- a/tools/xenmon/xenbaked.c	Mon Oct 22 21:06:11 2007 +0100
++++ b/tools/xenmon/xenbaked.c	Tue Oct 23 09:26:43 2007 +0100
+@@ -589,7 +589,7 @@ error_t cmd_parser(int key, char *arg, s
+     return 0;
+ }
+ 
+-#define SHARED_MEM_FILE "/tmp/xenq-shm"
++#define SHARED_MEM_FILE "/var/run/xenq-shm"
+ void alloc_qos_data(int ncpu)
+ {
+     int i, n, pgsize, off=0;
+--- a/tools/xenmon/xenmon.py	Mon Oct 22 21:06:11 2007 +0100
++++ b/tools/xenmon/xenmon.py	Tue Oct 23 09:26:43 2007 +0100
+@@ -46,7 +46,7 @@ QOS_DATA_SIZE = struct.calcsize(ST_QDATA
+ QOS_DATA_SIZE = struct.calcsize(ST_QDATA)*NSAMPLES + struct.calcsize(ST_DOM_INFO)*NDOMAINS + struct.calcsize("4i")
+ 
+ # location of mmaped file, hard coded right now
+-SHM_FILE = "/tmp/xenq-shm"
++SHM_FILE = "/var/run/xenq-shm"
+ 
+ # format strings
+ TOTALS = 15*' ' + "%6.2f%%" + 35*' ' + "%6.2f%%"
+
diff --git a/app-emulation/xen-tools/xen-tools-3.0.4_p1-r1.ebuild b/app-emulation/xen-tools/xen-tools-3.0.4_p1-r2.ebuild
index 2585a9085bdd..9ebac3d1a9a6 100644
--- a/app-emulation/xen-tools/xen-tools-3.0.4_p1-r1.ebuild
+++ b/app-emulation/xen-tools/xen-tools-3.0.4_p1-r2.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2007 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/app-emulation/xen-tools/xen-tools-3.0.4_p1-r1.ebuild,v 1.1 2007/09/26 22:43:49 marineam Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-emulation/xen-tools/xen-tools-3.0.4_p1-r2.ebuild,v 1.1 2007/10/23 19:09:08 marineam Exp $
 
 inherit flag-o-matic distutils eutils multilib
 
@@ -123,6 +123,9 @@ src_unpack() {
 	# Security fix, CVE-2007-4993
 	# https://bugs.gentoo.org/show_bug.cgi?id=193808
 	epatch "${FILESDIR}/${P}-pygrub-security-fix.patch"
+
+	# Fix an insecure temp file creation, bug #196824, CVE-2007-3919
+	epatch "${FILESDIR}/${PN}-3.1.1-insecure-file-creation-fix.patch"
 }
 
 src_compile() {
diff --git a/app-emulation/xen-tools/xen-tools-3.1.0-r1.ebuild b/app-emulation/xen-tools/xen-tools-3.1.0-r2.ebuild
index 2cee7155ec73..cba90b808f63 100644
--- a/app-emulation/xen-tools/xen-tools-3.1.0-r1.ebuild
+++ b/app-emulation/xen-tools/xen-tools-3.1.0-r2.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2007 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/app-emulation/xen-tools/xen-tools-3.1.0-r1.ebuild,v 1.2 2007/10/02 00:44:19 marineam Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-emulation/xen-tools/xen-tools-3.1.0-r2.ebuild,v 1.1 2007/10/23 19:09:08 marineam Exp $
 
 inherit flag-o-matic eutils multilib
 
@@ -119,6 +119,9 @@ src_unpack() {
 	# Security fix, CVE-2007-4993
 	# https://bugs.gentoo.org/show_bug.cgi?id=193808
 	epatch "${FILESDIR}/${PN}-3.1.0-pygrub-security-fix.patch"
+
+	# Fix an insecure temp file creation, bug #196824, CVE-2007-3919
+	epatch "${FILESDIR}/${PN}-3.1.1-insecure-file-creation-fix.patch"
 }
 
 src_compile() {
diff --git a/app-emulation/xen-tools/xen-tools-3.1.1.ebuild b/app-emulation/xen-tools/xen-tools-3.1.1-r1.ebuild
index a025feb969c1..0e7494932720 100644
--- a/app-emulation/xen-tools/xen-tools-3.1.1.ebuild
+++ b/app-emulation/xen-tools/xen-tools-3.1.1-r1.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2007 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/app-emulation/xen-tools/xen-tools-3.1.1.ebuild,v 1.1 2007/10/15 18:34:34 marineam Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-emulation/xen-tools/xen-tools-3.1.1-r1.ebuild,v 1.1 2007/10/23 19:09:08 marineam Exp $
 
 inherit flag-o-matic eutils multilib
 
@@ -10,7 +10,7 @@ HOMEPAGE="http://www.xensource.com/xen/xen/"
 #S="${WORKDIR}/xen-${PV}-src"
 
 # Temporary while we wait on the upstream tarball
-SRC_URI="http://dev.gentoo.org/~marineam/files/xen/xen-${PV}.tgz"
+SRC_URI="mirror://gentoo//xen-${PV}.tgz"
 S="${WORKDIR}/xen-${PV}"
 
 LICENSE="GPL-2"
@@ -116,6 +116,9 @@ src_unpack() {
 
 	# Fix building small dumb utility called 'xen-detect' on hardened
 	epatch "${FILESDIR}/${PN}-3.1.0-xen-detect-nopie-fix.patch"
+
+	# Fix an insecure temp file creation, bug #196824, CVE-2007-3919
+	epatch "${FILESDIR}/${PN}-3.1.1-insecure-file-creation-fix.patch"
 }
 
 src_compile() {