diff -u audacity-1.3.4/debian/patches/CVE-2007-6061.patch audacity-1.3.4/debian/patches/CVE-2007-6061.patch --- audacity-1.3.4/debian/patches/CVE-2007-6061.patch +++ audacity-1.3.4/debian/patches/CVE-2007-6061.patch @@ -1,11 +1,12 @@ ---- src/AudacityApp.cpp.orig 2007-11-13 23:01:37.000000000 +0100 -+++ src/AudacityApp.cpp 2008-01-21 19:05:13.000000000 +0100 +diff -Nur audacity-1.3.4/src/AudacityApp.cpp audacity-1.3.4.new/src/AudacityApp.cpp +--- audacity-1.3.4/src/AudacityApp.cpp 2007-11-13 23:01:37.000000000 +0100 ++++ audacity-1.3.4.new/src/AudacityApp.cpp 2008-01-23 17:02:45.000000000 +0100 @@ -573,7 +573,7 @@ // * The user's .audacity-files directory in their home directory // * The "share" and "share/doc" directories in their install path #ifdef __WXGTK__ - defaultTempDir.Printf(wxT("/tmp/audacity%d.%d-%s"), -+ defaultTempDir.Printf(wxT("%s/.audacity%d.%d-%s"), home.c_str(), ++ defaultTempDir.Printf(wxT("/%s/.audacity%d.%d-%s"), home.c_str(), AUDACITY_VERSION, AUDACITY_RELEASE, wxGetUserId().c_str()); wxString pathVar = wxGetenv(wxT("AUDACITY_PATH")); diff -u audacity-1.3.4/debian/changelog audacity-1.3.4/debian/changelog --- audacity-1.3.4/debian/changelog +++ audacity-1.3.4/debian/changelog @@ -1,3 +1,13 @@ +audacity (1.3.4-1.1ubuntu1.1) hardy-security; urgency=low + + * SECURITY UPDATE + - Fix insecure directory creation in /tmp by moving the directory + to the users home directory (CVE-2007-6061; LP: #173153). + - debian patch dont work fine, patched debian patch. + http://people.debian.org/~nion/nmu-diff/audacity-1.3.4-1_1.3.4-1.1.patch + + -- Emanuele Gentili Wed, 23 Jan 2008 17:03:22 +0100 + audacity (1.3.4-1.1ubuntu1) hardy; urgency=low [ Mario Bonino ]