diff --git a/STABLE/changelog.txt b/STABLE/changelog.txt index d7939c080..be8feb608 100644 --- a/STABLE/changelog.txt +++ b/STABLE/changelog.txt @@ -41,3 +41,5 @@ Changes since 1.4.9 19) Fix local exploit vulnerability. 20) Hack security fix so that it works under Slackware. + +21) Fix mktempfile() where there is no mktemp utility. diff --git a/STABLE/functions b/STABLE/functions index eb0e232d2..dd9725275 100644 --- a/STABLE/functions +++ b/STABLE/functions @@ -213,7 +213,7 @@ mktempfile() { mktemp -p $1 shorewall.XXXXXX ;; None) - mkdir $1/shorewall-$$ && echo $1/shorewall-$$ + > $1/shorewall-$$ && echo $1/shorewall-$$ ;; *) echo " ERROR:Internal error in mktempfile" diff --git a/STABLE/releasenotes.txt b/STABLE/releasenotes.txt index 64fabfa1e..3b12691d3 100644 --- a/STABLE/releasenotes.txt +++ b/STABLE/releasenotes.txt @@ -52,7 +52,9 @@ Problems Corrected since version 1.4.9: 14. An exploitable vulnerability that allows local non-root users to cause arbitrary files to be overwritten has been eliminated. -15) The security vulnerability fix failed under Slackware 9.1. +15) The security vulnerability fix failed under Slackware 9.1. + +16) The security vulnerability fix failed if mktemp was not installed. Migration Issues: diff --git a/STABLE2/changelog.txt b/STABLE2/changelog.txt index d7e984a78..fabd0faa6 100644 --- a/STABLE2/changelog.txt +++ b/STABLE2/changelog.txt @@ -40,3 +40,5 @@ Changes since 2.0.2 18) Fix security vulnerability involving temporary files/directories. 19) Hack security fix so that it works under Slackware. + +20) Fix mktempfile() where there is no mktemp utility. \ No newline at end of file diff --git a/STABLE2/functions b/STABLE2/functions index 55a971171..e3bbb5023 100755 --- a/STABLE2/functions +++ b/STABLE2/functions @@ -374,7 +374,7 @@ mktempfile() { mktemp -p $1 shorewall.XXXXXX ;; None) - mkdir $1/shorewall-$$ && echo $1/shorewall-$$ + > $1/shorewall-$$ && echo $1/shorewall-$$ ;; *) echo " ERROR:Internal error in mktempfile" diff --git a/STABLE2/releasenotes.txt b/STABLE2/releasenotes.txt index 78ff239bd..041e498d0 100644 --- a/STABLE2/releasenotes.txt +++ b/STABLE2/releasenotes.txt @@ -54,6 +54,8 @@ Problems Corrected since 2.0.3 3) The security vulnerability fix failed under Slackware 9.1. +4) The security vulnerability fix failed if mktemp was not installed. + ----------------------------------------------------------------------- Issues when migrating from Shorewall 2.0.2 to Shorewall 2.0.3: