there is a security issue with kdelibs < 3.0.4-r1.

3 files changed, 99 insertions, 1 deletions

diff --git a/kde-base/kdelibs/ChangeLog b/kde-base/kdelibs/ChangeLog
index 8b9c09e638fb..2b69e3f6a26f 100644
--- a/kde-base/kdelibs/ChangeLog
+++ b/kde-base/kdelibs/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for kde-base/kdelibs
 # Copyright 2002 Gentoo Technologies, Inc.; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/kde-base/kdelibs/ChangeLog,v 1.25 2002/11/13 20:55:15 hannes Exp $
+# $Header: /var/cvsroot/gentoo-x86/kde-base/kdelibs/ChangeLog,v 1.26 2002/11/14 07:38:44 hannes Exp $
+
+*kdelibs-3.0.4-r1 (14 Nov 2002)
+
+  14 Nov 2002; Hannes Mehnert <hannes@gentoo.org> kdelibs-3.0.4-r1.ebuild:
+  this fixes security bug #10707, thanks to n2uro@aol.com (Samuel Greenfeld)
+  for submission
 
   13 Nov 2002; Hannes Mehnert <hannes@gentoo.org> kdelibs-3.1_rc2.ebuild,
   kde-3.1_rc3.ebuild: fixed dependencies, they depend on libxml2-2.4.24,
diff --git a/kde-base/kdelibs/files/digest-kdelibs-3.0.4-r1 b/kde-base/kdelibs/files/digest-kdelibs-3.0.4-r1
new file mode 100644
index 000000000000..75b6d44bc785
--- /dev/null
+++ b/kde-base/kdelibs/files/digest-kdelibs-3.0.4-r1
@@ -0,0 +1,2 @@
+MD5 0b81f457a78c07978d2c973e0d7d7d49 kdelibs-3.0.4.tar.bz2 7643484
+MD5 5625501819f09510d542142aea7b85ab post-3.0.4-kdelibs-kio-misc.diff 2384
diff --git a/kde-base/kdelibs/kdelibs-3.0.4-r1.ebuild b/kde-base/kdelibs/kdelibs-3.0.4-r1.ebuild
new file mode 100644
index 000000000000..4818bf55db93
--- /dev/null
+++ b/kde-base/kdelibs/kdelibs-3.0.4-r1.ebuild
@@ -0,0 +1,90 @@
+# Copyright 1999-2002 Gentoo Technologies, Inc.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/kde-base/kdelibs/kdelibs-3.0.4-r1.ebuild,v 1.1 2002/11/14 07:38:44 hannes Exp $
+inherit kde kde.org
+#don't inherit  kde-base or kde-dist! it calls need-kde which adds kdelibs to depend!
+
+# check need for glib >=1.3.3 (we have 1.2.10 only; configure has no glib flag but searches for it)
+
+SRC_URI="mirror://kde/stable/3.0.4/src/${P}.tar.bz2
+	mirror://kde/security_patches/post-${PV}-${PN}-kio-misc.diff"
+
+DESCRIPTION="KDE $PV - base libraries needed by all kde programs"
+KEYWORDS="x86 ppc alpha"
+HOMEPAGE="http//www.kde.org/"
+
+SLOT="3.0"
+LICENSE="GPL-2 LGPL-2"
+
+# kde.eclass has kdelibs in DEPEND, and we can't have that in here. so we recreate the entire
+# DEPEND from scratch.
+DEPEND=""
+RDEPEND=""
+newdepend "sys-devel/perl
+	>=media-libs/audiofile-0.1.9
+	>=sys-apps/bzip2-1.0.1
+	>=dev-libs/libxslt-1.0.7
+	>=dev-libs/libpcre-3.5
+	>=dev-libs/libxml2-2.4.10
+	ssl? ( >=dev-libs/openssl-0.9.6 )
+	alsa? ( >=media-libs/alsa-lib-0.5.9 )
+	cups? ( >=net-print/cups-1.1.14 )
+	>=media-libs/tiff-3.5.5
+	app-admin/fam-oss
+	~kde-base/arts-1.0.4
+	app-text/ghostscript"
+
+newdepend "/c"
+newdepend "/autotools"
+
+RDEPEND="$RDEPEND
+	app-text/sgml-common
+	cups? ( net-print/cups )
+	dev-lang/python
+	>=sys-apps/portage-2.0.36" # for bug #7359
+
+set_enable_final
+myconf="$myconf --with-distribution=Gentoo"
+use ipv6	|| myconf="$myconf --with-ipv6-lookup=no"
+use ssl		&& myconf="$myconf --with-ssl-dir=/usr"		|| myconf="$myconf --without-ssl"
+use alsa	&& myconf="$myconf --with-alsa"			|| myconf="$myconf --without-alsa"
+use cups	&& myconf="$myconf --enable-cups"		|| myconf="$myconf --disable-cups"
+
+[ "$ARCH" != "ppc" ] && \
+    [ "$ARCH" != "sparc" ] && [ "$ARCH" != "sparc64" ] && \
+	[ "$ARCH" != "alpha" ] && \
+    myconf="$myconf --enable-fast-malloc=full"
+
+qtver-from-kdever ${PV}
+need-qt $selected_version
+
+set-kdedir $PV
+
+src_unpack() {
+	unpack ${P}.tar.bz2
+	cd ${S}
+	patch -p1 < ${DISTDIR}/post-${PV}-${PN}-kio-misc.diff
+    kde_sandbox_patch ${S}/kio/misc/kpac
+
+}
+
+
+src_install() {
+	
+	kde_src_install
+	
+	dohtml *.html
+	
+	dodir /etc/env.d
+
+	echo "PATH=${PREFIX}/bin
+ROOTPATH=${PREFIX}/bin
+LDPATH=${PREFIX}/lib
+KDEDIRS=$PREFIX
+CONFIG_PROTECT=${PREFIX}/share/config" > ${D}/etc/env.d/65kdelibs-${PV} # number goes down with version upgrade
+
+	echo "KDEDIR=$PREFIX" > ${D}/etc/env.d/50kdedir-${PV} # number goes up with version upgrade
+	
+}
+
+