rpms/kphone/devel kphone-perms.patch, NONE, 1.1 kphone.spec, 1.24, 1.25

[Dennis Gilmore (ausil)]

Author: ausil

Update of /cvs/extras/rpms/kphone/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv6027

Modified Files:
	kphone.spec 
Added Files:
	kphone-perms.patch 
Log Message:
apply patch for CVE-2006-2442


kphone-perms.patch:

--- NEW FILE kphone-perms.patch ---
--- kphone-orig/kphone/kphone.cpp	2005-06-21 06:14:49.000000000 -0500
+++ kphone/kphone/kphone.cpp	2006-05-18 23:27:09.000000000 -0500
@@ -1,5 +1,8 @@
 #include <stdio.h>
 #include <stdlib.h>
+#include <sys/types.h>
+#include <sys/stat.h>
+
 #include <qtimer.h>
 #include <qsettings.h>
 #include <qmenubar.h>
@@ -32,6 +35,8 @@
 		userPrefix = "_" + prefix + "_";
 	}
 	QSettings settings;
+	
+	umask(077);
 	Sip::setLocalAddress( settings.readEntry(
 		"/kphone/dissipate_addr", Sip::getLocalAddress() ) );
 	QString socketStr = settings.readEntry( "/kphone/General/SocketMode", "UDP" );


Index: kphone.spec
===================================================================
RCS file: /cvs/extras/rpms/kphone/devel/kphone.spec,v
retrieving revision 1.24
retrieving revision 1.25
diff -u -r1.24 -r1.25
--- kphone.spec	15 Feb 2006 01:48:41 -0000	1.24
+++ kphone.spec	19 May 2006 04:40:42 -0000	1.25
@@ -1,6 +1,6 @@
 Name:           kphone
 Version:        4.2
-Release:        8%{?dist}
+Release:        9%{?dist}
 Summary:        A SIP (Session Initiation Protocol) user agent for Linux
 
 Group:          Applications/Communications
@@ -14,6 +14,7 @@
 Patch3:         kphone-4.2-callaudio-stun-init.patch
 Patch4:		kphone-gcc41.patch
 Patch5:		kphone-4.2-configure.patch
+Patch6:		kphone-perms.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 
 BuildRequires:  qt-devel alsa-lib-devel desktop-file-utils openssl-devel
@@ -31,6 +32,7 @@
 %patch3 -p1 -b .stun
 %patch4 -p1 -b .gcc41
 %patch5 -p1 -b .configure
+%patch6 -p1 -b .perms
 
 %build
 unset QTDIR || : ; . /etc/profile.d/qt.sh