merge 0.85g security upload:

fixes permissions of created device /dev/root for lilo boots:
brw------- 1 root root 8, 1 2007-04-06 09:28 /dev/root

note: this is on trunk aka master, need to create etch branch too.

2 files changed, 14 insertions, 3 deletions

diff --git a/debian/changelog b/debian/changelog
index 1f972ed..9e4031b 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -10,9 +10,8 @@ initramfs-tools (0.86) UNRELEASED; urgency=low
   * small trailing whitespace cleanup, display full path of kernel-img.conf
     in bug script.
 
-  * debian/control: change maintainer entry to new DD mail. :)
-    Add busybox-initramfs as Ubuntu busybox alternative to depends.
-    Dropp the sarge busybox-cvs-static entry.
+  * debian/control: Add busybox-initramfs as Ubuntu busybox alternative
+    to depends. Drop the sarge busybox-cvs-static entry.
 
   * scripts/local-top/mdrun: Drop, existed for partial upgrades from sarge.
 
@@ -50,6 +49,17 @@ initramfs-tools (0.86) UNRELEASED; urgency=low
 
  -- maximilian attems <maks@debian.org>  Thu,  5 Apr 2007 21:16:45 +0200
 
+initramfs-tools (0.85g) unstable; urgency=high
+
+  * SECURITY scripts/functions: Set permission of created root dev in
+    parse_numeric() to 600. This bug only affects lilo boots. Thanks
+    Fabian Pietsch <fabian@canvon.dyndns.org> and Goswin von Brederlow
+    <brederlo@informatik.uni-tuebingen.de> for patch input. (closes: 417995)
+
+  * debian/control: Change Uploaders email.
+
+ -- maximilian attems <maks@debian.org>  Fri,  6 Apr 2007 09:19:13 +0200
+
 initramfs-tools (0.85f) unstable; urgency=high
 
   Release "Au lieu d'aller voter Casse leur la margoulette"
diff --git a/scripts/functions b/scripts/functions
index d8e0411..183b9f2 100644
--- a/scripts/functions
+++ b/scripts/functions
@@ -244,5 +244,6 @@ parse_numeric() {
 	esac
 
 	mknod /dev/root b ${major} ${minor}
+	chmod 600 /dev/root
 	ROOT=/dev/root
 }