- security fix for #200321

fbida.CVE-2006-1695.patch

@@ -0,0 +1,14 @@
+diff -ru fbida-2.01.orig/fbgs fbida-2.01/fbgs
+--- fbida-2.01.orig/fbgs	2004-03-28 13:32:16.000000000 +0200
++++ fbida-2.01/fbgs	2006-04-08 02:49:37.000000000 +0200
+@@ -1,8 +1,8 @@
+ #!/bin/bash
+ 
+ # tmp dir
+-DIR="${TMPDIR-/var/tmp}/fbps-$$"
+-mkdir -p $DIR	|| exit 1
++DIR=`mktemp -dtp /tmp fbgs-XXXXXX`
++[ -d $DIR ]  || exit 1
+ trap "rm -rf $DIR" EXIT
+ 
+ # parse options

fbida.spec

@@ -1,11 +1,12 @@
 Summary:        FrameBuffer Imageviewer
 Name:           fbida
 Version:        2.03
-Release:        10%{?dist}
+Release:        12%{?dist}
 License:        GPL
 Group:          Applications/Multimedia
 URL:            http://linux.bytesex.org/fbida/
 Source:         http://dl.bytesex.org/releases/fbida/fbida-2.03.tar.gz
+Patch:          fbida.CVE-2006-1695.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 BuildRequires:  libexif-devel fontconfig-devel libjpeg-devel
 BuildRequires:  libpng-devel libtiff-devel pkgconfig
@@ -38,9 +39,11 @@ A wrapper script for viewing ps/pdf files on the framebuffer console using fbi
 
 %prep
 %setup -q
+%patch -p1
 %{__sed} -i -e "s,(INSTALL) -s,(INSTALL) ," mk/Variables.mk
 %{__sed} -i -e "s,/X11R6,,g" GNUmakefile
 %{__sed} -i -e "s,/usr/X11R6/lib/X11,%{_datadir}/X11,g" mk/Autoconf.mk
+%{__sed} -i -e "s,-dSAVER,-dSAFER," fbgs
 
 %build
 LIB=%{_lib} prefix=%{_prefix} CFLAGS=$RPM_OPT_FLAGS %{__make} %{?_smp_mflags}
@@ -80,6 +83,12 @@ lib=%{_lib} prefix=%{_prefix} %{__make} DESTDIR=%{buildroot} install
 %{_bindir}/fbgs
 
 %changelog
+* Thu Jul 27 2006 Adrian Reber <adrian@lisas.de> - 2.03-12
+- security fix for #200321
+
+* Mon Apr 24 2006 Adrian Reber <adrian@lisas.de> - 2.03-11
+- security fix for #189721
+
 * Mon Feb 13 2006 Adrian Reber <adrian@lisas.de> - 2.03-10
 - rebuilt