CVS: tmda-cgi ChangeLog,1.30,1.31 configure,1.4,1.5 tmda-cgi.c,1.13,1.14 tmda-cgi.py,1.35,1.36

Update of /cvsroot/tmda/tmda-cgi
In directory sc8-pr-cvs1:/tmp/cvs-serv3815

Modified Files:
	ChangeLog configure tmda-cgi.c tmda-cgi.py 
Log Message:
Closed a security hole.  We strongly recommend that any system using "default"
authentication be upgraded.


Index: ChangeLog
===================================================================
RCS file: /cvsroot/tmda/tmda-cgi/ChangeLog,v
retrieving revision 1.30
retrieving revision 1.31
diff -u -r1.30 -r1.31
--- ChangeLog	21 May 2003 05:09:31 -0000	1.30
+++ ChangeLog	21 May 2003 16:07:58 -0000	1.31
@@ -1,3 +1,8 @@
+2003-05-21  Gre7g Luterman  <[email protected]>
+
+	* Closed a security hole.  We strongly recommend that any system using
+	  "default" authentication be upgraded.
+
 2003-05-20  Gre7g Luterman  <[email protected]>
 
 	* Removed Python 2.2 dependency.

Index: configure
===================================================================
RCS file: /cvsroot/tmda/tmda-cgi/configure,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -r1.4 -r1.5
--- configure	14 May 2003 16:19:55 -0000	1.4
+++ configure	21 May 2003 16:07:59 -0000	1.5
@@ -414,7 +414,7 @@
 tmda-cgi will look for config files at: %s
 Where <user> will be replaced by the user's login name.
 """ % string.replace(OptD["Config"], "/~/", "/<user>/")
-  F.write('#define TMDARC "TMDARC=%(Config)s"\n' % OptD)
+F.write('#define TMDARC "TMDARC=%(Config)s"\n' % OptD)
 if OptD["AuthArg"] != "None":
   F.write("""#define AUTH_TYPE "TMDA_AUTH_TYPE=%(AuthType)s"
 #define AUTH_ARG "TMDA_AUTH_ARG=%(AuthArg)s"

Index: tmda-cgi.c
===================================================================
RCS file: /cvsroot/tmda/tmda-cgi/tmda-cgi.c,v
retrieving revision 1.13
retrieving revision 1.14
diff -u -r1.13 -r1.14
--- tmda-cgi.c	3 May 2003 17:29:39 -0000	1.13
+++ tmda-cgi.c	21 May 2003 16:07:59 -0000	1.14
@@ -26,9 +26,7 @@
 int main(int argc, char *argv[])
 {
   int fd;
-#ifdef TMDARC
   putenv(TMDARC);
-#endif
 #ifdef AUTH_ARG
   putenv(AUTH_TYPE);
   putenv(AUTH_ARG);

Index: tmda-cgi.py
===================================================================
RCS file: /cvsroot/tmda/tmda-cgi/tmda-cgi.py,v
retrieving revision 1.35
retrieving revision 1.36
diff -u -r1.35 -r1.36
--- tmda-cgi.py	21 May 2003 05:09:31 -0000	1.35
+++ tmda-cgi.py	21 May 2003 16:07:59 -0000	1.36
@@ -46,6 +46,7 @@
 import CharSetAlias
 import Session
 import Unicode
+
 def Call(Library, Str = None):
   "Launch a library with the appropriate globals."
   Library.Form  = Form
@@ -57,6 +58,10 @@
 
 # Capture WebUID
 Session.WebUID = os.getuid()
+
+# Clear out blank TMDARC
+if os.environ["TMDARC"] == "None":
+  del os.environ["TMDARC"]
 
 # Make some global stuff available to all
 Template.Template.Dict["Script"]   = os.environ["SCRIPT_NAME"]

_______________________________________
tmda-cvs mailing list
http://tmda.net/lists/listinfo/tmda-cvs