Version bump, fixes path traversal vulnerability (bug #476766, CVE-2013-4668, thanks to Agostino Sarubbo).

Package-Manager: portage-2.2.0_alpha188/cvs/Linux x86_64
Manifest-Sign-Key: 0xCF0ADD61

3 files changed, 110 insertions, 5 deletions

diff --git a/app-arch/file-roller/ChangeLog b/app-arch/file-roller/ChangeLog
index b4e47d814a90..54008a934443 100644
--- a/app-arch/file-roller/ChangeLog
+++ b/app-arch/file-roller/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for app-arch/file-roller
 # Copyright 1999-2013 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-arch/file-roller/ChangeLog,v 1.321 2013/07/02 20:46:32 pacho Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-arch/file-roller/ChangeLog,v 1.322 2013/07/15 00:52:27 tetromino Exp $
+
+*file-roller-3.6.4 (15 Jul 2013)
+
+  15 Jul 2013; Alexandre Rostovtsev <tetromino@gentoo.org>
+  +file-roller-3.6.4.ebuild:
+  Version bump, fixes path traversal vulnerability (bug #476766, CVE-2013-4668,
+  thanks to Agostino Sarubbo).
 
 *file-roller-3.8.3 (02 Jul 2013)
 
diff --git a/app-arch/file-roller/Manifest b/app-arch/file-roller/Manifest
index 7693186b3c00..99afce7d78d4 100644
--- a/app-arch/file-roller/Manifest
+++ b/app-arch/file-roller/Manifest
@@ -6,18 +6,24 @@ AUX 3.6.0-packages.match 571 SHA256 3888ee8a6cb163d0e7813fde1d0ea028f2e47410aff8
 AUX file-roller-2.10.3-use_bin_tar.patch 504 SHA256 c22e742893800c4302df40af66b1eabeab700fea7326eada849f919bdd76c052 SHA512 e93b69af0e281590a362930580f13f2b85efec98d9a40c6b8becf3731c70713be106dbfbff9f4a7e783fc0dc0f72fdb78a063d5ab7d0c9c280a90fc58b778667 WHIRLPOOL 13e8bfa47665be629119adaeaa0b31092aa409916410bdf39caca11b2f87c4f949e2153037d0d52d51ee88c1009dd1b6265a4cc525da8f7e9621d4931d15887c
 DIST file-roller-2.32.2.tar.bz2 1901661 SHA256 3ddbe4e4134eab4ff8e97789a1626aec6cbc588190f2f520850d0697037e5755 SHA512 c62153871ed0210972d45ed0fa71eb177602cbc48894907c50ff45e8798d07979377ce4cbe1fbc1c37e5762cd005c5846dd9ac9f5ee93fe860de2babdc0933f0 WHIRLPOOL ea0af0538616532fc644f019d133bf5bfff876c95a3998d63ef58b3fa1b5b3d449c29589125ccdaeea18a1c0c1cafb872e996dd2b174b507c2c804d9c73e32dc
 DIST file-roller-3.6.3.tar.xz 1488432 SHA256 6d99d7be243d442484ba46505df5e52ffb4e46ea5cd754daba865eccc22c8402 SHA512 61fe0f0a3a28320d2bd1ef5ff464551f697f748c846e4d36fc183b8d1008059e6c801e4591348db86883f564c1a3f6a42006501c06202121c12450994777d9f4 WHIRLPOOL b3585aa514a1b2be8e5a3de2c39f01afd89b0d0423921f870d9a754cba93fe05069654fcbaaa4e9b53ef1de68c9bf9aaf5bf29aedeff2f33aaf1382f805d4b97
+DIST file-roller-3.6.4.tar.xz 1504200 SHA256 ebaf0e304a02c8799d492e152e4349180705256c101b8bfbe6d091982ec7cb67 SHA512 71d10a02a42ea219db97ec5f0042c332d224d168f5426dfce302871897e5cc379d1c766a2b04f7d429b954d2a15f6ee84e087584fe4aabb7f5321e4bd6826205 WHIRLPOOL 33435e84e09bbd911cf84d2129cbaf29b79d51a8ddf9662bdcbcc2d3f103257c470f6f11c60e44b4dfc1a1558791003c181a8bcb77cc15ef7b119e2995a023bb
 DIST file-roller-3.8.2.tar.xz 1510532 SHA256 b251b146d7966d770c98546e2152dbc17785ef3b8cf460f692829d0ac1cbe79e SHA512 bb9b3de59f377b3fcb09be29c26a6528f750ae63a0eb0eae9772d44155dd8944e106b2b01cb018f70e925da5077a5b5786b675040fb5438bf15808e4a88c1d1d WHIRLPOOL 43a6f48ed4f88034f5a87dff683704c2bc48b378c389d0450eef923efbcfd97dcb885bc6c4e695d479c53b98e69f72e1afe4abb2f69a3a803dbaf28dad228363
 DIST file-roller-3.8.3.tar.xz 1512364 SHA256 55caac832ed0bab89085fdf7a3c3fa1afaf8ae6fb05aeb2a872e42cb6c52894e SHA512 e1b0470d34f5d1152eb94b09bf262a4388ad01b07308401b54edd9d24792aea5eb5b32eab95fa6e49a7c1e3ffbcd0651e7be2c4a0dcba1ffe28035e4262e929e WHIRLPOOL 86e6e07d4b88499bcc39774ecb0fe7f128054371379884c3dedef5e7dd7c31d71f89acdce081fac24b08692aa095c67a0fc80870981fb6973421e8ab3b759fd3
 EBUILD file-roller-2.32.2.ebuild 2439 SHA256 e831af3708694be41a1f51130d4779490493ae6515ce07fcb055cada4453b26a SHA512 b4089c5dc7193b47de92fc22fd276470219d66e24df31e05b7bf2bade64ed92ff41280957d387db7a2ed0c12fa02cb3bc27f752f0a3f0ed1f16b361d0df6aa67 WHIRLPOOL b1bb0dc560ccc9313c1d397323aa375e5055cc65dfeeb7691f7110d7b5e84f07b17d133f737c9f4f725bf7e7d0853a17d18310598a6e762f273a911f99acac28
 EBUILD file-roller-3.6.3.ebuild 2608 SHA256 c0ce0651f945176ffb112c6d39af1ab74abd30147266605751df09987d059867 SHA512 f39bf15bbcb5b62e9aee71798377d8c3b3ed4eedf644404f9e2a523568bea81df5e5153549c87ca5e819104aaa8990dba4b7364d19c484beb2559829a2bd1447 WHIRLPOOL ee595d163f9c4c076ae3b2ac588dee5d1cf390346d33ffd412eea331388b3e87f14cf0da68cb70e3647e36c81d9d6558b6f2770c228150ea819072d3e237304a
+EBUILD file-roller-3.6.4.ebuild 2614 SHA256 0039299ed038893824cd4bc151580c81f4ffd869906b665714773ce8f2f11e11 SHA512 f08706f2888811e6b9076aabb214707f9d7f7f520542af6b09722df6030dd282b2c378aa485ee5921136b31e907acfc47b0f5333ea64e003ba193b036491f4b1 WHIRLPOOL df767536c3220cdd52ae590e7b7b9d05b7a13ba8e50635f908342326c0094b91bdf23029b5be2596b3d272a124abbe095236be52792e6f51205d62b6a305676e
 EBUILD file-roller-3.8.2.ebuild 2610 SHA256 5134d1f32e63e0d05fe6d182f6c608bb3481aea8898ca4e9768b8c4ee46c17b2 SHA512 0c5cbe5abe36db2cda426434e0b0c1c28d7a0ca09a7bb83503110ab253cbc78b345fff45f18bc0d08e3c0bdb789188e033b6ee1c0b5624e65c0d3e1eb930bede WHIRLPOOL 3c6a02f0bcd25324ce8e4143c54a754bab9f627b76ee50a36d9a8128b8a4128ec4a8d1df2c5fff4d2bcd220e146967b21467868a1a8316fac7a180a18da06e28
 EBUILD file-roller-3.8.3.ebuild 2592 SHA256 f9e4470c61b627cd1d671019231fbed7b963aec28bd7a6bd1dec0655cf916ed5 SHA512 6c2f5b931acd207796c32a47118e97c13b39b55d426613a7903d2207798395ff00123bc23b538220da899d700776ddbc06ed863ba56a941d562081af7fc879fc WHIRLPOOL 9d0d3798016023f78a3d40dfaecda9a39dfecb3026f4d6a08869f51ab4ce06f24a3e9a927f558771cf5684789a36e1269ab18b52ac77be2f1787f876101c77f9
-MISC ChangeLog 43095 SHA256 1929bb9c44f503614e9395dd41cc7bd9a86f3c71bf53e1c1f8151817b22de67d SHA512 e7129de549560cc34cbdef694dec478c81d1f6ed948056d9c49f542cb0852beee7be0b236c4af3cc7dec216ad259835dcd811be7d982d005bb198ba6f26d8c2d WHIRLPOOL 78db4c815d90a4848a4c87571b79447aa59b86fcb5282e035054f506337da2606cd4571e598ffac28277000eadc0fd8e4fe58ef596269043dd2efb96ac7c4288
+MISC ChangeLog 43333 SHA256 a2412bbd1a37197b2f529646e0d7d685461a9afd4e3475404f7b9ee358f290be SHA512 69ff2382645264796d106b156e16cf950ada0701e5a134be59ad8913751c38b7d84565b3026975c9bc4fb299f521367d91448e8320e7cf73bff18c61a76b37dc WHIRLPOOL 0c275b1438073a91a0be85ae258c5f6721c5fb8ed25dfce05909185ab62ff43503ac7b65d77b80b1cc7a7114dd973e4c20512b3309203f9edea3b8e6d93e8a12
 MISC metadata.xml 446 SHA256 855d22d9ec6384bbec09562c5aebd68e043a50f002ba277818e3b7755b824f50 SHA512 fb6974a3cc457bfc0c9a17d8c160ff6997e9dafe5f4a4f863316e8e8b7b7a7d246612411eeaf890dce783b01ae74abb15bbda3a095dc3a9ad0c8c9118ee19931 WHIRLPOOL f65ab1874181cbb6c71e145f6ba51562899876bcfcf8bd93624f725455a4731090f64611ef122f6c777cce9a701af73d858ac53f3a90ca3a4ee61abd778a8026
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.20 (GNU/Linux)
 
-iEYEAREIAAYFAlHTPCkACgkQCaWpQKGI+9TXXwCfbJgDu/5jPaWzk9e2e621xDMO
-ySoAn1YMQ152w6VDbFb0UqH2QDhSSNVH
-=fytx
+iQEcBAEBCAAGBQJR40fMAAoJEJ0WA1zPCt1hlnYH/39+d04l5TDDbyaCxkrw9JA/
+V4ytIsE07Be0Z1VNPfEukZzRRNod+oPDI6iaLCLgV5Djr89rviRZudvvQQ4mKCSP
+NnAXNcrkJcfhatt4BWW/CC+B4VaD5xRScGU3mSCDPl+ZoB91nnocEn3Dp4TqdAtM
+YXOVUsKa47FsERsmRYS7yiLpCUEMguZ8kSnerCd7SfagytBL+PzjqAdFWtcJa2ZH
+fDyiHRJuUs1+Kj3rCwTUgGHSDmNhgW7Bz/wfnLUro3JHVgju3ISQ1p+PUThxx7gE
+eadsP1UQM1J27aRlk+7zvsxMJoPENJ3MLLHO02tRw1YFs1N2hhub9LGPRfSI1Cs=
+=pi9G
 -----END PGP SIGNATURE-----
diff --git a/app-arch/file-roller/file-roller-3.6.4.ebuild b/app-arch/file-roller/file-roller-3.6.4.ebuild
new file mode 100644
index 000000000000..abe0c876f1e6
--- /dev/null
+++ b/app-arch/file-roller/file-roller-3.6.4.ebuild
@@ -0,0 +1,92 @@
+# Copyright 1999-2013 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/app-arch/file-roller/file-roller-3.6.4.ebuild,v 1.1 2013/07/15 00:52:27 tetromino Exp $
+
+EAPI="5"
+GCONF_DEBUG="no"
+GNOME2_LA_PUNT="yes"
+
+inherit eutils gnome2
+
+DESCRIPTION="Archive manager for GNOME"
+HOMEPAGE="http://fileroller.sourceforge.net/"
+
+LICENSE="GPL-2+ CC-BY-SA-3.0"
+SLOT="0"
+IUSE="nautilus packagekit"
+KEYWORDS="~alpha ~amd64 ~arm ~ia64 ~ppc ~ppc64 ~sparc ~x86 ~x86-fbsd ~x86-freebsd ~amd64-linux ~x86-linux"
+
+# gdk-pixbuf used extensively in the source
+# cairo used in eggtreemultidnd.c
+# pango used in fr-window
+RDEPEND="
+	>=app-arch/libarchive-3:=
+	>=dev-libs/glib-2.29.14:2
+	>=dev-libs/json-glib-0.14
+	>=x11-libs/gtk+-3.4:3
+	>=x11-libs/libnotify-0.4.3:=
+	sys-apps/file
+	x11-libs/cairo
+	x11-libs/gdk-pixbuf:2
+	x11-libs/libICE
+	x11-libs/libSM
+	x11-libs/pango
+	nautilus? ( >=gnome-base/nautilus-3 )
+	packagekit? ( app-admin/packagekit-base )
+"
+DEPEND="${RDEPEND}
+	>=dev-util/intltool-0.40.0
+	sys-devel/gettext
+	virtual/pkgconfig
+"
+# eautoreconf needs:
+#	gnome-base/gnome-common
+
+src_prepare() {
+	# Use absolute path to GNU tar since star doesn't have the same
+	# options. On Gentoo, star is /usr/bin/tar, GNU tar is /bin/tar
+	epatch "${FILESDIR}"/${PN}-2.10.3-use_bin_tar.patch
+
+	# File providing Gentoo package names for various archivers
+	cp -f "${FILESDIR}/3.6.0-packages.match" data/packages.match || die
+
+	gnome2_src_prepare
+}
+
+src_configure() {
+	DOCS="AUTHORS ChangeLog HACKING MAINTAINERS NEWS README* TODO"
+	# --disable-debug because enabling it adds -O0 to CFLAGS
+	gnome2_src_configure \
+		--disable-run-in-place \
+		--disable-static \
+		--disable-debug \
+		--enable-magic \
+		--enable-libarchive \
+		--with-smclient=xsmp \
+		$(use_enable nautilus nautilus-actions) \
+		$(use_enable packagekit) \
+		ITSTOOL=$(type -P true)
+}
+
+pkg_postinst() {
+	gnome2_pkg_postinst
+
+	elog "${PN} is a frontend for several archiving utilities. If you want a"
+	elog "particular achive format support, see ${HOMEPAGE}"
+	elog "and install the relevant package."
+	elog
+	elog "for example:"
+	elog "  7-zip   - app-arch/p7zip"
+	elog "  ace     - app-arch/unace"
+	elog "  arj     - app-arch/arj"
+	elog "  cpio    - app-arch/cpio"
+	elog "  deb     - app-arch/dpkg"
+	elog "  iso     - app-cdr/cdrtools"
+	elog "  jar,zip - app-arch/zip and app-arch/unzip"
+	elog "  lha     - app-arch/lha"
+	elog "  lzop    - app-arch/lzop"
+	elog "  rar     - app-arch/unrar or app-arch/unar"
+	elog "  rpm     - app-arch/rpm"
+	elog "  unstuff - app-arch/stuffit"
+	elog "  zoo     - app-arch/zoo"
+}