mirror of
https://github.com/openwrt/packages.git
synced 2025-12-10 12:41:22 +00:00
Create kea state directories with mode 0750 per restrictions added in 2.6.3 Refresh patches Fixes the following CVEs: * CVE-2025-32803: Change the umask to no group write and no other access at the entry of Kea server/agent binaries * CVE-2025-32801: kea-dhcp4, kea-dhcp6, kea-dhcp-ddns, and kea-ctrl-agent will now only load hook libraries from the default installation directory Full upstream changelogs are available at: https://downloads.isc.org/isc/kea/2.6.1/Kea-2.6.1-ReleaseNotes.txt https://downloads.isc.org/isc/kea/2.6.2/Kea-2.6.2-ReleaseNotes.txt https://downloads.isc.org/isc/kea/2.6.3/Kea-2.6.3-ReleaseNotes.txt https://downloads.isc.org/isc/kea/2.6.4/Kea-2.6.4-ReleaseNotes.txt Signed-off-by: Noah Meyerhans <frodo@morgul.net>
19 lines
650 B
Diff
19 lines
650 B
Diff
commit 79f969979f2ac7ed73dbc2682a53c95ff84adb1a
|
|
Author: Philip Prindeville <philipp@redfish-solutions.com>
|
|
Date: Sat Aug 3 10:19:05 2024 -0600
|
|
|
|
[3533] do filename munging with variable expansions
|
|
|
|
--- a/src/bin/keactrl/keactrl.in
|
|
+++ b/src/bin/keactrl/keactrl.in
|
|
@@ -116,7 +116,8 @@ get_pid_from_file() {
|
|
|
|
# Extract the name portion (from last slash to last dot) of the config file name.
|
|
local conf_name
|
|
- conf_name=$(basename -- "${kea_config_file}" | rev | cut -f2- -d'.' | rev)
|
|
+ conf_name=${kea_config_file##*/}
|
|
+ conf_name=${conf_name%.*}
|
|
|
|
# Default the directory to --localstatedir / run
|
|
local pid_file_dir
|