Security update.

diff --git a/sys-apps/tar/ChangeLog b/sys-apps/tar/ChangeLog
index 3b4f6f2314cbbab46a3414a2fd072a1139a23284..8870802d6883a3566533051032b74969ee3dcbb9 100644 (file)
--- a/sys-apps/tar/ChangeLog
+++ b/sys-apps/tar/ChangeLog
@@ -1,6 +1,11 @@
 # ChangeLog for sys-apps/tar
 # Copyright 2002 Gentoo Technologies, Inc.; Distributed under the GPL
-# $Header: /var/cvsroot/gentoo-x86/sys-apps/tar/ChangeLog,v 1.6 2002/08/20 12:20:10 spider Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/tar/ChangeLog,v 1.7 2002/10/01 12:17:56 aliz Exp $
+
+*tar-1-13-25-r3 (01 Oct 2002)
+
+  01 Oct 2002; Daniel Ahlberg <aliz@gentoo.org> :
+  Security update. Added patch developed by Redhat to fix directory traversals.
 
 *tar-1.13.19-r1.ebuild (14 July 2002)
 

diff --git a/sys-apps/tar/files/digest-tar-1.13.25-r3 b/sys-apps/tar/files/digest-tar-1.13.25-r3
new file mode 100644 (file)
index 0000000..467f114
--- /dev/null
+++ b/sys-apps/tar/files/digest-tar-1.13.25-r3
@@ -0,0 +1 @@
+MD5 6ef8c906e81eee441f8335652670ac4a tar-1.13.25.tar.gz 1312227

diff --git a/sys-apps/tar/files/tar-1.13.25-r3.gentoo.diff b/sys-apps/tar/files/tar-1.13.25-r3.gentoo.diff
new file mode 100644 (file)
index 0000000..9d4e6b3
--- /dev/null
+++ b/sys-apps/tar/files/tar-1.13.25-r3.gentoo.diff
@@ -0,0 +1,15 @@
+--- tar-1.13.25/src/misc.c.orig Mon Aug 27 00:14:26 2001
++++ tar-1.13.25/src/misc.c      Mon May 27 11:29:31 2002
+@@ -214,6 +214,13 @@
+            return 0;
+        }
+       while (! ISSLASH (*p));
++
++      do
++       {
++         if (! *p++)
++           return 0;
++       }
++      while ( ISSLASH (*p));
+     }
+ }

diff --git a/sys-apps/tar/tar-1.13.25-r3.ebuild b/sys-apps/tar/tar-1.13.25-r3.ebuild
new file mode 100644 (file)
index 0000000..8f71234
--- /dev/null
+++ b/sys-apps/tar/tar-1.13.25-r3.ebuild
@@ -0,0 +1,60 @@
+# Copyright 1999-2002 Gentoo Technologies, Inc.
+# Distributed under the terms of the GNU General Public License, v2 or later
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/tar/tar-1.13.25-r3.ebuild,v 1.1 2002/10/01 12:17:56 aliz Exp $
+
+S=${WORKDIR}/${P}
+DESCRIPTION="Use this to try make tarballs :)"
+SRC_URI="ftp://alpha.gnu.org/gnu/tar/${P}.tar.gz"
+HOMEPAGE="http://www.gnu.org/software/tar/"
+
+SLOT="0"
+LICENSE="GPL-2"
+KEYWORDS="x86"
+
+DEPEND="sys-apps/gzip
+       sys-apps/bzip2
+       app-arch/ncompress"
+
+RDEPEND="nls? ( >=sys-devel/gettext-0.10.35 )"
+
+src_unpack() {
+       unpack ${A}
+       cd ${S}
+       patch -p1 < ${FILESDIR}/${PF}.gentoo.diff
+}
+
+src_compile() {
+       local myconf
+       [ -z "`use nls`" ] && myconf="--disable-nls"
+       econf \
+               --bindir=/bin \
+               --libexecdir=/usr/lib/misc \
+               ${myconf} || die
+
+       if [ -z "`use static`" ]
+       then
+               emake || die
+       else
+               emake LDFLAGS=-static || die
+       fi
+}
+
+src_install() {
+       make DESTDIR=${D} install || die
+       #FHS 2.1 stuff
+       dodir /usr/sbin
+       cd ${D}
+       mv usr/lib/misc/rmt usr/sbin/rmt.gnu
+       dosym rmt.gnu /usr/sbin/rmt
+       # a nasty yet required symlink: 
+       dodir /etc 
+       dosym /usr/sbin/rmt /etc/rmt 
+       cd ${S}
+       if [ -z "`use build`" ] 
+       then
+               dodoc AUTHORS ChangeLog* COPYING NEWS README* PORTS THANKS
+               doman ${FILESDIR}/tar.1
+       else
+               rm -rf ${D}/usr/share
+       fi
+}