Version bump for kernel attribute vulnerabilities, bug #56479.

4 files changed, 33 insertions, 2 deletions

diff --git a/sys-kernel/planet-ccrma-sources/ChangeLog b/sys-kernel/planet-ccrma-sources/ChangeLog
index 5f15c606f0f1..d1d6da7ac1e5 100644
--- a/sys-kernel/planet-ccrma-sources/ChangeLog
+++ b/sys-kernel/planet-ccrma-sources/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for sys-kernel/planet-ccrma-sources
 # Copyright 2000-2004 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/planet-ccrma-sources/ChangeLog,v 1.19 2004/07/02 08:43:44 eradicator Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/planet-ccrma-sources/ChangeLog,v 1.20 2004/07/09 15:52:25 plasmaroo Exp $
+
+*planet-ccrma-sources-2.4.21-r11 (09 Jul 2004)
+
+  09 Jul 2004; <plasmaroo@gentoo.org> -planet-ccrma-sources-2.4.21-r10.ebuild,
+  +planet-ccrma-sources-2.4.21-r11.ebuild,
+  +files/planet-ccrma-sources.CAN-2004-0497.patch:
+  Version bump for kernel attribute vulnerabilities, bug #56479.
 
   02 Jul 2004; Jeremy Huddleston <eradicator@gentoo.org>
   planet-ccrma-sources-2.4.21-r10.ebuild:
diff --git a/sys-kernel/planet-ccrma-sources/files/digest-planet-ccrma-sources-2.4.21-r10 b/sys-kernel/planet-ccrma-sources/files/digest-planet-ccrma-sources-2.4.21-r11
index d42092c1bc83..d42092c1bc83 100644
--- a/sys-kernel/planet-ccrma-sources/files/digest-planet-ccrma-sources-2.4.21-r10
+++ b/sys-kernel/planet-ccrma-sources/files/digest-planet-ccrma-sources-2.4.21-r11
diff --git a/sys-kernel/planet-ccrma-sources/files/planet-ccrma-sources.CAN-2004-0497.patch b/sys-kernel/planet-ccrma-sources/files/planet-ccrma-sources.CAN-2004-0497.patch
new file mode 100644
index 000000000000..9503e9efe57b
--- /dev/null
+++ b/sys-kernel/planet-ccrma-sources/files/planet-ccrma-sources.CAN-2004-0497.patch
@@ -0,0 +1,23 @@
+# ChangeSet
+#
+# fs/attr.c
+#   2004/07/03 18:28:30-03:00 marcelo@logos.cnet +1 -0
+#   Thomas Biege: Fix missing DAC check on sys_chown
+# 
+# fs/attr.c
+#   2004/07/03 19:28:29-03:00 marcelo@logos.cnet +1 -1
+#   Add missing bracket to inode_change_ok() fix
+# 
+diff -Nru a/fs/attr.c b.plasmaroo/fs/attr.c
+--- a/fs/attr.c	2004-07-08 17:05:20 -07:00
++++ b.plasmaroo/fs/attr.c	2004-07-08 17:05:20 -07:00
+@@ -35,7 +35,8 @@
+ 
+ 	/* Make sure caller can chgrp. */
+ 	if ((ia_valid & ATTR_GID) &&
+-	    (!in_group_p(attr->ia_gid) && attr->ia_gid != inode->i_gid) &&
++	    (current->fsuid != inode->i_uid ||
++	    (!in_group_p(attr->ia_gid) && attr->ia_gid != inode->i_gid)) &&
+ 	    !capable(CAP_CHOWN))
+ 		goto error;
+ 
diff --git a/sys-kernel/planet-ccrma-sources/planet-ccrma-sources-2.4.21-r10.ebuild b/sys-kernel/planet-ccrma-sources/planet-ccrma-sources-2.4.21-r11.ebuild
index 1bd83057ae35..0bd9c3e02a1c 100644
--- a/sys-kernel/planet-ccrma-sources/planet-ccrma-sources-2.4.21-r10.ebuild
+++ b/sys-kernel/planet-ccrma-sources/planet-ccrma-sources-2.4.21-r11.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2004 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/planet-ccrma-sources/planet-ccrma-sources-2.4.21-r10.ebuild,v 1.2 2004/07/02 08:43:44 eradicator Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/planet-ccrma-sources/planet-ccrma-sources-2.4.21-r11.ebuild,v 1.1 2004/07/09 15:52:25 plasmaroo Exp $
 #OKV=original kernel version, KV=patched kernel version.  They can be the same.
 
 ETYPE="sources"
@@ -61,6 +61,7 @@ src_unpack() {
 	epatch ${FILESDIR}/${PN}.CAN-2004-0394.patch || die "Failed to add the CAN-2004-0394 patch!"
 	epatch ${FILESDIR}/${PN}.CAN-2004-0427.patch || die "Failed to add the CAN-2004-0427 patch!"
 	epatch ${FILESDIR}/${PN}.CAN-2004-0495.patch || die "Failed to add the CAN-2004-0495 patch!"
+	epatch ${FILESDIR}/${PN}.CAN-2004-0497.patch || die "Failed to add the CAN-2004-0497 patch!"
 	epatch ${FILESDIR}/${PN}.CAN-2004-0535.patch || die "Failed to add the CAN-2004-0535 patch!"
 	epatch ${FILESDIR}/${PN}.FPULockup-53804.patch || die "Failed to apply FPU-lockup patch!"