cvs commit: ports/sysutils/cdrtools Makefile ports/sysutils/cdrtools/files patch-libscg::scsiopen.c

Tue May 20 14:27:03 PDT 2003

On Tue, May 20, 2003 at 01:33:44PM -0700, Oliver Lehmann wrote:
>   FreeBSD ports repository
>   Modified files:
>     sysutils/cdrtools    Makefile 
>   Added files:
>     sysutils/cdrtools/files patch-libscg::scsiopen.c 
>   Log:
>   Fix a securety issue which may cause a local root exploit
>   (if the cdrecord binary is suid 0).
>   For more information about this, feel free to take a look at
>   http://marc.theaimsgroup.com/?l=bugtraq&m=105285564307225&w=2

Why not just updated the port to use
ftp://ftp.berlios.de/pub/cdrecord/alpha/cdrtools-2.01a14.tar.gz