Security update

4 files changed, 228 insertions, 1 deletions

diff --git a/app-text/tetex/ChangeLog b/app-text/tetex/ChangeLog
index c691ffd8767b..9c4f12a733b1 100644
--- a/app-text/tetex/ChangeLog
+++ b/app-text/tetex/ChangeLog
@@ -1,6 +1,11 @@
 # ChangeLog for app-text/tetex
 # Copyright 2002 Gentoo Technologies, Inc.; Distributed under the GPL
-# $Header: /var/cvsroot/gentoo-x86/app-text/tetex/ChangeLog,v 1.14 2002/09/21 10:19:33 azarah Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-text/tetex/ChangeLog,v 1.15 2002/10/18 20:23:26 aliz Exp $
+
+*tetex-1.0.7-r11 (18 Oct 2002)
+
+  18 Oct 2002; Daniel Ahlberg <aliz@gentoo.org> :
+  Security update.
 
   21 Sep 2002; Martin Schlemmer <azarah@gentoo.org> tetex-1.0.7-r10.ebuild :
 
diff --git a/app-text/tetex/files/digest-tetex-1.0.7-r11 b/app-text/tetex/files/digest-tetex-1.0.7-r11
new file mode 100644
index 000000000000..b0dad1273c70
--- /dev/null
+++ b/app-text/tetex/files/digest-tetex-1.0.7-r11
@@ -0,0 +1,4 @@
+MD5 2c6da2a45096c2fdc41b8de6a8af1a52 teTeX-src-1.0.7.tar.gz 8040192
+MD5 984530be5cc0dd73738de9d0067bc130 teTeX-texmf-gg-1.0.3.tar.bz2 35037546
+MD5 12925188fdadcd6a970c21bba3269fc2 ec-ready-mf-tfm.tar.gz 386630
+MD5 37393316b285926214c247acd55db743 teTeX-french.tar.gz 268161
diff --git a/app-text/tetex/files/tetex-1.0.7-r11-gentoo.diff b/app-text/tetex/files/tetex-1.0.7-r11-gentoo.diff
new file mode 100644
index 000000000000..b4ebc61103b8
--- /dev/null
+++ b/app-text/tetex/files/tetex-1.0.7-r11-gentoo.diff
@@ -0,0 +1,34 @@
+--- teTeX-1.0/texk/dvipsk/dvips.c.secure	2002-05-28 12:18:55.000000000 +0100
++++ teTeX-1.0/texk/dvipsk/dvips.c	2002-05-28 12:26:38.000000000 +0100
+@@ -64,7 +64,7 @@
+ Boolean cropmarks ;           /* add cropmarks? */
+ Boolean abspage = 0 ;         /* are page numbers absolute? */
+ Boolean tryepsf = 0 ;         /* should we try to make it espf? */
+-Boolean secure = 0 ;          /* make safe for suid */
++Boolean secure = 1 ;          /* make safe for suid */
+ int collatedcopies = 1 ;      /* how many collated copies? */
+ int sectioncopies = 1 ;       /* how many times to repeat each section? */
+ integer pagecopies = 1 ;          /* how many times to repeat each page? */
+@@ -280,7 +280,7 @@
+ "p # First page                     P s Load config.$s                  ",
+ #endif
+ "q*  Run quietly                                                        ",
+-"r*  Reverse order of pages         R   Run securely                    ",
++"r*  Reverse order of pages         R   Run securely (default)          ",
+ "s*  Enclose output in save/restore S # Max section size in pages       ",
+ "t s Paper format                   T c Specify desired page size       ",  
+ "u s PS mapfile                     U*  Disable string param trick      ",
+--- teTeX-1.0/texk/dvipsk/dvips.1.secure	2002-05-28 12:28:59.000000000 +0100
++++ teTeX-1.0/texk/dvipsk/dvips.1	2002-05-28 12:30:59.000000000 +0100
+@@ -328,7 +328,9 @@
+ .I \\\special{psfile="`zcat foo.ps.Z"}
+ or
+ .I \epsffile[72 72 540 720]{"`zcat screendump.ps.gz"}
+-are not executed.
++are not executed.  This is the default; to run insecurely use the
++.B -R0
++option.
+ .TP
+ .B -s
+ Causes the entire global output to be enclosed in a save/restore pair.
+
diff --git a/app-text/tetex/tetex-1.0.7-r11.ebuild b/app-text/tetex/tetex-1.0.7-r11.ebuild
new file mode 100644
index 000000000000..1a40989030b1
--- /dev/null
+++ b/app-text/tetex/tetex-1.0.7-r11.ebuild
@@ -0,0 +1,184 @@
+# Copyright 1999-2002 Gentoo Technologies, Inc.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/app-text/tetex/tetex-1.0.7-r11.ebuild,v 1.3 2002/10/18 20:23:26 aliz Exp $
+
+IUSE="ncurses X libwww png"
+
+TEXMFSRC="teTeX-texmf-gg-1.0.3.tar.bz2"
+
+S=${WORKDIR}/teTeX-1.0
+DESCRIPTION="teTeX is a complete TeX distribution"
+SRC_URI="ftp://sunsite.informatik.rwth-aachen.de/pub/comp/tex/teTeX/1.0/distrib/sources/teTeX-src-${PV}.tar.gz
+	 ftp://ftp.dante.de/pub/tex/systems/unix/teTeX/1.0/contrib/ghibo/${TEXMFSRC}
+	 http://www.ibiblio.org/gentoo/distfiles/ec-ready-mf-tfm.tar.gz
+	 http://www.ibiblio.org/gentoo/distfiles/teTeX-french.tar.gz"
+HOMEPAGE="http://tug.cs.umb.edu/tetex/"
+
+KEYWORDS="x86 ppc sparc sparc64"
+SLOT="0"
+LICENSE="GPL-2"
+
+DEPEND="sys-apps/ed
+	sys-libs/zlib 
+	X? ( virtual/x11 )
+	png? ( >=media-libs/libpng-1.2.1 )
+	ncurses? ( sys-libs/ncurses )
+	libwww? ( >=net-libs/libwww-5.3.2-r1 )"
+
+RDEPEND=">=sys-devel/perl-5.2
+	dev-util/dialog"
+
+
+src_unpack() {
+
+	unpack teTeX-src-1.0.7.tar.gz
+
+	cd ${S}
+	patch -p1 < ${FILESDIR}/${PF}-gentoo.diff
+	
+	mkdir ${S}/texmf
+	cd ${S}/texmf
+	umask 022
+	echo ">>> Unpacking ${TEXMFSRC}"
+	tar --no-same-owner -xjf ${DISTDIR}/${TEXMFSRC} || die
+	echo ">>> Unpacking ec-ready-mf-tfm.tar.gz"
+	tar --no-same-owner -xzf ${DISTDIR}/ec-ready-mf-tfm.tar.gz -C .. || die
+	echo ">>> Unpacking teTeX-french.tar.gz"
+	tar --no-same-owner -xzf ${DISTDIR}/teTeX-french.tar.gz || die
+
+	# Fixes from way back ... not sure even Achim will
+	# still know why :/
+	cd ${WORKDIR}
+	patch -p0 < ${FILESDIR}/teTeX-1.0-gentoo.diff || die
+	cd ${S}
+	patch -p0 < ${FILESDIR}/teTeX-1.0.dif || die
+
+	# Do not run config stuff
+	patch -p1 < ${FILESDIR}/${P}-dont-run-config.diff || die
+
+	# Fix problem where the *.fmt files are not generated due to the LaTeX
+	# source being older than a year.
+#        local x
+#        for x in `find ${S}/texmf/ -type f -name '*.ini'`
+#        do
+#                cp ${x} ${x}.orig
+#                sed -e '1i \\scrollmode' ${x}.orig > ${x}
+#                rm -f ${x}.orig
+#        done
+
+}
+
+src_compile() {
+
+	local myconf=""
+	use X \
+		&& myconf="--with-x" \
+		|| myconf="--without-x"
+
+	use libwww \
+		&& myconf="${myconf} --with-system-wwwlib \
+		                     --with-libwww-include=/usr/include"
+
+	use png \
+		&& myconf="${myconf} --with-system-pnglib"
+
+	
+	use ncurses \
+		&& myconf="${myconf} --with-system-ncurses"
+
+	
+	# Does it make sense to compile the included libwww with mysql ?
+
+	./configure --host=${CHOST} \
+		--prefix=/usr \
+		--bindir=/usr/bin \
+		--datadir=/usr/share \
+		--mandir=/usr/share/man \
+		--infodir=/usr/share/info \
+		--datadir=${S} \
+		--without-texinfo \
+		--without-dialog \
+		--with-system-zlib \
+		--disable-multiplatform \
+		--with-epsfwin \
+		--with-mftalkwin \
+		--with-regiswin \
+		--with-tektronixwin \
+		--with-unitermwin \
+		--with-ps=gs \
+		--enable-ipc \
+		--with-etex \
+		${myconf} || die
+
+	make texmf=/usr/share/texmf || die
+}
+
+src_install() {
+
+	dodir /usr/share/
+    # Install texmf files
+	einfo "Installing texmf..."
+    mv -f texmf ${D}/usr/share
+		
+	make prefix=${D}/usr \
+		bindir=${D}/usr/bin \
+		datadir=${D}/usr/share \
+		mandir=${D}/usr/share/man/man1 \
+		infodir=${D}/usr/share/info \
+		texmf=${D}/usr/share/texmf \
+		install || die
+
+	dodoc PROBLEMS README
+	docinto texk
+	dodoc texk/ChangeLog texk/README
+	docinto kpathesa
+	cd ${S}/texk/kpathsea
+	dodoc README* NEWS PROJECTS HIER
+	docinto dviljk
+	cd ${S}/texk/dviljk
+	dodoc AUTHORS README NEWS
+	docinto dvipsk
+	cd ${S}/texk/dvipsk
+	dodoc AUTHORS ChangeLog INSTALLATION README
+	docinto makeindexk
+	cd ${S}/texk/makeindexk
+	dodoc CONTRIB COPYING NEWS NOTES PORTING README
+	docinto ps2pkm
+	cd ${S}/texk/ps2pkm
+	dodoc ChangeLog CHANGES.type1 INSTALLATION README* 
+	docinto web2c
+	cd ${S}/texk/web2c
+	dodoc AUTHORS ChangeLog NEWS PROJECTS README
+	docinto xdvik
+	cd ${S}/texk/xdvik
+	dodoc BUGS FAQ README* 
+
+	#fix for conflicting readlink binary:
+	rm -f ${D}/bin/readlink
+	rm -f ${D}/usr/bin/readlink
+	#add /var/cache/fonts directory
+	dodir /var/cache/fonts
+
+	#fix for lousy upstream permisssions on /usr/share/texmf files
+	#NOTE: do not use fowners, as its not recursive ...
+	einfo "Fixing permissions..."
+	chown -R root.root ${D}/usr/share/texmf
+}
+
+pkg_postinst() {
+
+	if [ $ROOT = "/" ]
+	then
+		einfo "Configuring teTeX..."
+		mktexlsr &>/dev/null
+		texlinks &>/dev/null
+		texconfig init &>/dev/null
+		texconfig confall &>/dev/null
+		texconfig font vardir /var/cache/fonts &>/dev/null
+		
+		echo
+		einfo "*** use 'texconfig font rw' to allow all users to generate fonts ***"
+		echo
+	fi
+}
+