diff options
Diffstat (limited to 'app-text/enscript')
| -rw-r--r-- | app-text/enscript/ChangeLog | 10 | ||||
| -rw-r--r-- | app-text/enscript/Manifest | 5 | ||||
| -rw-r--r-- | app-text/enscript/enscript-1.6.4-r4.ebuild | 55 | ||||
| -rw-r--r-- | app-text/enscript/files/enscript-1.6.4-CVE-2008-3863-CVE-2008-4306.patch | 91 | ||||
| -rw-r--r-- | app-text/enscript/files/enscript-1.6.4-config.patch | 95 |
5 files changed, 254 insertions, 2 deletions
diff --git a/app-text/enscript/ChangeLog b/app-text/enscript/ChangeLog index ae9c7c4db0b8..da6cdd4dfe2f 100644 --- a/app-text/enscript/ChangeLog +++ b/app-text/enscript/ChangeLog @@ -1,6 +1,14 @@ # ChangeLog for app-text/enscript # Copyright 2002-2008 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/app-text/enscript/ChangeLog,v 1.49 2008/03/04 03:07:51 jer Exp $ +# $Header: /var/cvsroot/gentoo-x86/app-text/enscript/ChangeLog,v 1.50 2008/11/07 16:43:25 tgurr Exp $ + +*enscript-1.6.4-r4 (07 Nov 2008) + + 07 Nov 2008; Timo Gurr <tgurr@gentoo.org> + +files/enscript-1.6.4-CVE-2008-3863-CVE-2008-4306.patch, + +files/enscript-1.6.4-config.patch, +enscript-1.6.4-r4.ebuild: + Revision bump fixing security issues, see bug #243228. Also fixes bug + #202348 and includes some more QA fixes. 04 Mar 2008; Jeroen Roovers <jer@gentoo.org> enscript-1.6.4-r2.ebuild, enscript-1.6.4-r3.ebuild: diff --git a/app-text/enscript/Manifest b/app-text/enscript/Manifest index c1896c11626f..a343d6496940 100644 --- a/app-text/enscript/Manifest +++ b/app-text/enscript/Manifest @@ -2,11 +2,14 @@ AUX ebuild.st 6113 RMD160 9d3aac83d40a3fca3d1cd7707973f6fdb275898a SHA1 0ffb5db7 AUX enscript-1.6.2-ruby.patch 661 RMD160 4d7069033a165587dbda17d2febe2ae84cc68af5 SHA1 3a10790c279e110115ec50ce70f2482a5cbd1bee SHA256 53bf90fa47841bcab742155d28f314ff5864c122b7f7d7fbb12177d43b3b60a7 AUX enscript-1.6.3-language.patch 456 RMD160 5bc06db3e9d3ff441f2b97e94255d93d7b827e9c SHA1 1ce2fd699b26c5773c2e2dbf67d28d0741fb1cfe SHA256 b4830bb18f98749724f1382ef8c47124ae134c707af5303103fead2343710642 AUX enscript-1.6.3-security.patch 5447 RMD160 d23a9a4eb478279bf56123d35fc7adc8fd292f30 SHA1 be2e586db2eaa58828556c9ecea710b9cd1df8b8 SHA256 bd9525903b9690f259f0bba8257a96b57681f03a65272d590796c796a8396052 +AUX enscript-1.6.4-CVE-2008-3863-CVE-2008-4306.patch 2799 RMD160 fbd77cf1cd861fb55f1df3bd311a9746f13ca91f SHA1 4443b1d66900a50b0b9a07a38d8bd7698f6c81be SHA256 6fcccba9d5447c5872fef3072d798cfcbdf7fc347e566126d0014d1b96f3f978 +AUX enscript-1.6.4-config.patch 3901 RMD160 45e5da8b141854b9568b565155247f3557f4c9c0 SHA1 c9a2ff14ed08c18c2a6f6c8fdea6691340a056dc SHA256 b49ea303616373ed2b72c329a7632bae589b62df18e0af149315a36977459188 AUX enscript-1.6.4-ebuild.st.patch 332 RMD160 e4b03bed2014baab7a25b3d1a9cc2a2f1d6e6721 SHA1 586758634018a2d6b90cbfecc9cba001bb1952b3 SHA256 fae2d59559a61a3d2f0fb25695c3dc5eab917e1eb22af61844e85584281728a6 AUX enscript-catmur.patch 604 RMD160 74dae25828a36028f877d7cec73f321f5354e4ad SHA1 572c173c8e93bb9c7eb0bae9acd750e7d86fc6f8 SHA256 23b2359b2ef4e9cf0f6b915fb9f326a0a9ebd3f43f4dcca5f4beb2602201d02c AUX ruby.st 3904 RMD160 a1e7228e4b508e73210d5054e4b66f8e6be4135f SHA1 8a8311ee734f1d3bc8baafb67f7cf7425e4469c9 SHA256 211d8a241d177c9c1c232eec514357b96b2d28554d63b72df3d72f79a41b25b0 DIST enscript-1.6.4.tar.gz 1036734 RMD160 9050728f14500f0360c5a4e258cba0646694bfeb SHA1 9dd7128a508d4c9671659b9520028d12add50cfa SHA256 45299a4db47c9c08c3649d4f62b211ae79ef5143360c264a40371a728f6ad99b EBUILD enscript-1.6.4-r2.ebuild 1150 RMD160 f2137ec664ea5c9b3d6f3059a677ab10fc7fcc37 SHA1 b5c0b295e25301db1bfb99b331bae8ae0c794be5 SHA256 4d659fd0519cf75eacfd09749e15956259cef383e9a284afb559baa33519dc47 EBUILD enscript-1.6.4-r3.ebuild 1260 RMD160 d9718968ec3b175ff5a777ff917de645e9e47a1b SHA1 2d99190c070a3cb89276056b4b0334ada5ad072b SHA256 dcbbb330957ee95d26e3ab24bef4bf3408b50367d9e7068c7b2b794130b54d26 -MISC ChangeLog 6083 RMD160 a93ea3129a0159ae7a87e15e74ebdcd3fc6072c0 SHA1 0e66885506229120c462e6c407f5b52e23d93ea9 SHA256 314a630c4195545ae94148932e5955a0be3b6834c0b2cd3d67da3eda0ff8831c +EBUILD enscript-1.6.4-r4.ebuild 1561 RMD160 3ec216054e7600e64c38720817014bc3aca648dd SHA1 c52018a6aa87376ab2f3b86ee00053f210de23ba SHA256 ad83bba037ee586173f566e1bc4d8f1688c3df8b5163e93cfe3006fdfe7aec6c +MISC ChangeLog 6403 RMD160 67e989c76979cdcdb7c951e2545c322a19242b4f SHA1 81b0395ea8108fa30a0563fd69a0f304aae4d866 SHA256 cf7a1c2aaadee9a7137566374b74c27f54d90b0a4e4d490ecac32375d15fc8e0 MISC metadata.xml 161 RMD160 1e5b1e42553c8869b93c4a5448e9a2a2ed9fe525 SHA1 209c6a46e4cdd891980115e42ba419e3799f8088 SHA256 7c85e6739a71f5bb23e8de36c88677d772946e61f7285892f7554e37bd2bca76 diff --git a/app-text/enscript/enscript-1.6.4-r4.ebuild b/app-text/enscript/enscript-1.6.4-r4.ebuild new file mode 100644 index 000000000000..bf9bf6ce1102 --- /dev/null +++ b/app-text/enscript/enscript-1.6.4-r4.ebuild @@ -0,0 +1,55 @@ +# Copyright 1999-2008 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/app-text/enscript/enscript-1.6.4-r4.ebuild,v 1.1 2008/11/07 16:43:25 tgurr Exp $ + +inherit eutils + +DESCRIPTION="powerful text-to-postscript converter" +SRC_URI="http://www.iki.fi/mtr/genscript/${P}.tar.gz" +HOMEPAGE="http://www.gnu.org/software/enscript/enscript.html" + +KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~mips ~ppc ~ppc64 ~sparc ~x86 ~x86-fbsd" +SLOT="0" +LICENSE="GPL-2" +IUSE="nls ruby" + +DEPEND="sys-devel/flex + sys-devel/bison + nls? ( sys-devel/gettext )" +RDEPEND="nls? ( virtual/libintl )" + +src_unpack() { + unpack ${A} + cd "${S}" + epatch "${FILESDIR}"/enscript-1.6.3-security.patch + epatch "${FILESDIR}"/enscript-1.6.3-language.patch + epatch "${FILESDIR}"/enscript-catmur.patch + epatch "${FILESDIR}"/enscript-1.6.4-ebuild.st.patch + epatch "${FILESDIR}"/enscript-1.6.4-config.patch + epatch "${FILESDIR}"/enscript-1.6.4-CVE-2008-3863-CVE-2008-4306.patch + use ruby && epatch "${FILESDIR}"/enscript-1.6.2-ruby.patch +} + +src_compile() { + unset CC + econf $(use_enable nls) + emake || die "emake failed" +} + +src_install() { + emake DESTDIR="${D}" install || die "install failed" + + dodoc AUTHORS ChangeLog NEWS README* THANKS TODO || die "dodoc failed" + + insinto /usr/share/enscript/hl + doins "${FILESDIR}"/ebuild.st || die "doins ebuild.st failed" + + if use ruby ; then + insinto /usr/share/enscript/hl + doins "${FILESDIR}"/ruby.st || die "doins ruby.st failed" + fi +} + +pkg_postinst() { + elog "Now, customize /etc/enscript.cfg." +} diff --git a/app-text/enscript/files/enscript-1.6.4-CVE-2008-3863-CVE-2008-4306.patch b/app-text/enscript/files/enscript-1.6.4-CVE-2008-3863-CVE-2008-4306.patch new file mode 100644 index 000000000000..2ee926b107af --- /dev/null +++ b/app-text/enscript/files/enscript-1.6.4-CVE-2008-3863-CVE-2008-4306.patch @@ -0,0 +1,91 @@ +--- src/psgen.c ++++ src/psgen.c 2008-10-29 10:43:08.512598143 +0100 +@@ -24,6 +24,7 @@ + * Boston, MA 02111-1307, USA. + */ + ++#include <limits.h> + #include "gsint.h" + + /* +@@ -124,7 +125,7 @@ struct gs_token_st + double xscale; + double yscale; + int llx, lly, urx, ury; /* Bounding box. */ +- char filename[512]; ++ char filename[PATH_MAX]; + char *skipbuf; + unsigned int skipbuf_len; + unsigned int skipbuf_pos; +@@ -135,11 +136,11 @@ struct gs_token_st + Color bgcolor; + struct + { +- char name[512]; ++ char name[PATH_MAX]; + FontPoint size; + InputEncoding encoding; + } font; +- char filename[512]; ++ char filename[PATH_MAX]; + } u; + }; + +@@ -248,7 +249,7 @@ static int do_print = 1; + static int user_fontp = 0; + + /* The user ^@font{}-defined font. */ +-static char user_font_name[256]; ++static char user_font_name[PATH_MAX]; + static FontPoint user_font_pt; + static InputEncoding user_font_encoding; + +@@ -978,7 +979,8 @@ large for page\n"), + FATAL ((stderr, + _("user font encoding can be only the system's default or `ps'"))); + +- strcpy (user_font_name, token.u.font.name); ++ memset (user_font_name, 0, sizeof(user_font_name)); ++ strncpy (user_font_name, token.u.font.name, sizeof(user_font_name) - 1); + user_font_pt.w = token.u.font.size.w; + user_font_pt.h = token.u.font.size.h; + user_font_encoding = token.u.font.encoding; +@@ -1444,7 +1446,7 @@ read_special_escape (InputStream *is, To + buf[i] = ch; + if (i + 1 >= sizeof (buf)) + FATAL ((stderr, _("too long argument for %s escape:\n%.*s"), +- escapes[i].name, i, buf)); ++ escapes[e].name, i, buf)); + } + buf[i] = '\0'; + +@@ -1452,7 +1454,8 @@ read_special_escape (InputStream *is, To + switch (escapes[e].escape) + { + case ESC_FONT: +- strcpy (token->u.font.name, buf); ++ memset (token->u.font.name, 0, sizeof(token->u.font.name)); ++ strncpy (token->u.font.name, buf, sizeof(token->u.font.name) - 1); + + /* Check for the default font. */ + if (strcmp (token->u.font.name, "default") == 0) +@@ -1465,7 +1468,8 @@ read_special_escape (InputStream *is, To + FATAL ((stderr, _("malformed font spec for ^@font escape: %s"), + token->u.font.name)); + +- strcpy (token->u.font.name, cp); ++ memset (token->u.font.name, 0, sizeof(token->u.font.name)); ++ strncpy (token->u.font.name, cp, sizeof(token->u.font.name) - 1); + xfree (cp); + } + token->type = tFONT; +@@ -1544,7 +1548,8 @@ read_special_escape (InputStream *is, To + break; + + case ESC_SETFILENAME: +- strcpy (token->u.filename, buf); ++ memset (token->u.filename, 0, sizeof(token->u.font.name)); ++ strncpy (token->u.filename, buf, sizeof(token->u.filename) - 1); + token->type = tSETFILENAME; + break; + diff --git a/app-text/enscript/files/enscript-1.6.4-config.patch b/app-text/enscript/files/enscript-1.6.4-config.patch new file mode 100644 index 000000000000..5823a9db5e96 --- /dev/null +++ b/app-text/enscript/files/enscript-1.6.4-config.patch @@ -0,0 +1,95 @@ +--- enscript-1.6.4/afm/Makefile.am.config 2003-03-05 07:26:16.000000000 +0000 ++++ enscript-1.6.4/afm/Makefile.am 2005-12-23 09:56:52.000000000 +0000 +@@ -36,11 +36,11 @@ + EXTRA_DIST = font.map $(default_afm) $(public_fonts) + + install-data-local: +- $(top_srcdir)/mkinstalldirs $(datadir)/enscript +- $(top_srcdir)/mkinstalldirs $(datadir)/enscript/afm ++ $(top_srcdir)/mkinstalldirs $(DESTDIR)/$(datadir)/enscript ++ $(top_srcdir)/mkinstalldirs $(DESTDIR)/$(datadir)/enscript/afm + for f in $(EXTRA_DIST); do \ +- $(INSTALL_DATA) $(srcdir)/$$f $(datadir)/enscript/afm/$$f; \ ++ $(INSTALL_DATA) $(srcdir)/$$f $(DESTDIR)/$(datadir)/enscript/afm/$$f; \ + done + + uninstall-local: +- rm -rf $(datadir)/enscript/afm ++ rm -rf $(DESTDIR)/$(datadir)/enscript/afm +--- enscript-1.6.4/afm/Makefile.in.config 2003-03-05 07:40:06.000000000 +0000 ++++ enscript-1.6.4/afm/Makefile.in 2005-12-23 09:56:52.000000000 +0000 +@@ -319,14 +319,14 @@ + + + install-data-local: +- $(top_srcdir)/mkinstalldirs $(datadir)/enscript +- $(top_srcdir)/mkinstalldirs $(datadir)/enscript/afm ++ $(top_srcdir)/mkinstalldirs $(DESTDIR)/$(datadir)/enscript ++ $(top_srcdir)/mkinstalldirs $(DESTDIR)/$(datadir)/enscript/afm + for f in $(EXTRA_DIST); do \ +- $(INSTALL_DATA) $(srcdir)/$$f $(datadir)/enscript/afm/$$f; \ ++ $(INSTALL_DATA) $(srcdir)/$$f $(DESTDIR)/$(datadir)/enscript/afm/$$f; \ + done + + uninstall-local: +- rm -rf $(datadir)/enscript/afm ++ rm -rf $(DESTDIR)/$(datadir)/enscript/afm + # Tell versions [3.59,3.63) of GNU make to not export all variables. + # Otherwise a system limit (for SysV at least) may be exceeded. + .NOEXPORT: +--- enscript-1.6.4/lib/Makefile.in.config 2003-03-05 07:40:07.000000000 +0000 ++++ enscript-1.6.4/lib/Makefile.in 2005-12-23 09:56:52.000000000 +0000 +@@ -345,15 +345,16 @@ + all-local: enscript.cfg + + install-data-local: enscript.cfg +- $(top_srcdir)/mkinstalldirs $(sysconfdir) +- if test -r $(sysconfdir)/enscript.cfg; then \ +- cp $(sysconfdir)/enscript.cfg $(sysconfdir)/enscript.cfg.old; \ ++ $(top_srcdir)/mkinstalldirs $(DESTDIR)$(sysconfdir) ++ if test -r $(DESTDIR)$(sysconfdir)/enscript.cfg; then \ ++ cp $(DESTDIR)$(sysconfdir)/enscript.cfg \ ++ $(DESTDIR)$(sysconfdir)/enscript.cfg.old; \ + else :; \ + fi +- $(INSTALL_DATA) enscript.cfg $(sysconfdir)/enscript.cfg ++ $(INSTALL_DATA) enscript.cfg $(DESTDIR)$(sysconfdir)/enscript.cfg + + uninstall-local: +- rm -f $(sysconfdir)/enscript.cfg ++ rm -f $(DESTDIR)$(sysconfdir)/enscript.cfg + + enscript.cfg: $(srcdir)/enscript.cfg.in Makefile + sed 's%@DATADIR@%$(datadir)%g; s%@media@%@MEDIA@%g; s%@BINDIR@%$(bindir)%g; s%@spooler@%@SPOOLER@%g; s%@pslevel@%@PSLEVEL@%g' \ +--- enscript-1.6.4/states/hl/Makefile.am.config 2005-12-23 09:59:55.000000000 +0000 ++++ enscript-1.6.4/states/hl/Makefile.am 2005-12-23 10:00:09.000000000 +0000 +@@ -45,10 +45,10 @@ + EXTRA_DIST = $(states) + + install-data-local: +- $(top_srcdir)/mkinstalldirs $(datadir)/enscript +- $(top_srcdir)/mkinstalldirs $(datadir)/enscript/hl ++ $(top_srcdir)/mkinstalldirs $(DESTDIR)/$(datadir)/enscript ++ $(top_srcdir)/mkinstalldirs $(DESTDIR)/$(datadir)/enscript/hl + for f in $(states); do \ +- $(INSTALL_DATA) $(srcdir)/$$f $(datadir)/enscript/hl/$$f; \ ++ $(INSTALL_DATA) $(srcdir)/$$f $(DESTDIR)/$(datadir)/enscript/hl/$$f; \ + done + + uninstall-local: +--- enscript-1.6.4/states/hl/Makefile.in.config 2005-12-23 10:00:13.000000000 +0000 ++++ enscript-1.6.4/states/hl/Makefile.in 2005-12-23 10:00:34.000000000 +0000 +@@ -330,10 +330,10 @@ + + + install-data-local: +- $(top_srcdir)/mkinstalldirs $(datadir)/enscript +- $(top_srcdir)/mkinstalldirs $(datadir)/enscript/hl ++ $(top_srcdir)/mkinstalldirs $(DESTDIR)/$(datadir)/enscript ++ $(top_srcdir)/mkinstalldirs $(DESTDIR)/$(datadir)/enscript/hl + for f in $(states); do \ +- $(INSTALL_DATA) $(srcdir)/$$f $(datadir)/enscript/hl/$$f; \ ++ $(INSTALL_DATA) $(srcdir)/$$f $(DESTDIR)/$(datadir)/enscript/hl/$$f; \ + done + + uninstall-local: |