Security update

diff --git a/sys-apps/sharutils/ChangeLog b/sys-apps/sharutils/ChangeLog
index 3ea0abeeb83d53f249117e760ab6585e60a664cb..84c77929058c77da5f2d55cac10a2eb3e5f219c0 100644 (file)
--- a/sys-apps/sharutils/ChangeLog
+++ b/sys-apps/sharutils/ChangeLog
@@ -1,6 +1,11 @@
 # ChangeLog for sys-apps/sharutils
 # Copyright 2002 Gentoo Technologies, Inc.; Distributed under the GPL
-# $Header: /var/cvsroot/gentoo-x86/sys-apps/sharutils/ChangeLog,v 1.3 2002/07/14 19:20:19 aliz Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/sharutils/ChangeLog,v 1.4 2002/10/30 13:14:58 aliz Exp $
+
+*sharutuls-4.2.1-r6 (30 Oct 2002)
+
+  30 Oct 2002; Daniel Ahlberg <aliz@gentoo.org> :
+  uudecoe security update. Made mailshar.in use mktemp.
 
 *sharutils-4.2.1-r5 (17 Mar 2002)
 

diff --git a/sys-apps/sharutils/files/digest-sharutils-4.2.1-r6 b/sys-apps/sharutils/files/digest-sharutils-4.2.1-r6
new file mode 100644 (file)
index 0000000..afb9423
--- /dev/null
+++ b/sys-apps/sharutils/files/digest-sharutils-4.2.1-r6
@@ -0,0 +1 @@
+MD5 b8ba1d409f07edcb335ff72a27bd9828 sharutils-4.2.1.tar.gz 306022

diff --git a/sys-apps/sharutils/files/sharutils-4.2.1-r6-gentoo.diff b/sys-apps/sharutils/files/sharutils-4.2.1-r6-gentoo.diff
new file mode 100644 (file)
index 0000000..6f8ef97
--- /dev/null
+++ b/sys-apps/sharutils/files/sharutils-4.2.1-r6-gentoo.diff
@@ -0,0 +1,105 @@
+diff -r -C2 sharutils-4.2.1.orig/doc/remsync.texi sharutils-4.2.1/doc/remsync.texi
+*** sharutils-4.2.1.orig/doc/remsync.texi      Thu Nov 30 18:15:37 1995
+--- sharutils-4.2.1/doc/remsync.texi   Fri Aug  3 18:57:02 2001
+***************
+*** 8,11 ****
+--- 8,15 ----
+  
+  @ifinfo
++ 
++ @direntry
++ * remsync: (remsync).       Synchronize remote files (sharutils).
++ @end direntry
+  This file documents the @code{remsync} command and friends, which have
+  the purpose of synchronizing remote directory trees using email.
+diff -r -C2 sharutils-4.2.1.orig/doc/sharutils.texi sharutils-4.2.1/doc/sharutils.texi
+*** sharutils-4.2.1.orig/doc/sharutils.texi    Fri Nov 24 21:42:52 1995
+--- sharutils-4.2.1/doc/sharutils.texi Fri Aug  3 18:29:43 2001
+***************
+*** 16,31 ****
+  
+  @ifinfo
+! @format
+! START-INFO-DIR-ENTRY
+  * Shar utilities: (sharutils).          GNU shar utilities.
+! * mail-files: (sharutils)mail-files invocation. Send files to remote site.
+! * mailshar: (sharutils)mailshar invocation.     Make and send a shell archive.
+! * remsync: (sharutils)remsync invocation.       Synchronize remote files.
+! * shar: (sharutils)shar invocation.             Make a shell archive.
+! * unshar: (sharutils)unshar invocation.         Explode a shell archive.
+! * uudecode: (sharutils)uudecode invocation.     Restore file from 7-bits.
+! * uuencode: (sharutils)uuencode invocation.     Force binary file to 7-bits.
+! END-INFO-DIR-ENTRY
+! @end format
+  @end ifinfo
+  
+--- 16,22 ----
+  
+  @ifinfo
+! @direntry
+  * Shar utilities: (sharutils).          GNU shar utilities.
+! @end direntry
+  @end ifinfo
+  
+--- sharutils-4.2.1/src/uudecode.c.orig Sat Apr 13 01:26:31 2002
++++ sharutils-4.2.1/src/uudecode.c      Sat Apr 13 01:30:32 2002
+@@ -81,6 +81,9 @@
+ /* Single character decode.  */
+ #define        DEC(Char) (((Char) - ' ') & 077)
+
++#if !defined S_ISLNK && defined S_IFLNK
++# define S_ISLNK(m) (((m) & S_IFMT) == S_IFLNK)
++#endif
+
+ static int
+ read_stduu (inname)
+@@ -279,6 +282,7 @@
+   char buf[2 * BUFSIZ];
+   char *outname;
+   int do_base64 = 0;
++  struct stat attr;
+
+   /* Search for header line.  */
+
+@@ -337,6 +341,23 @@
+        }
+     }
+
++  /* Check out file if it exists */
++  if (strcmp (outname, "/dev/stdout") != 0 && strcmp (outname, "-") != 0
++      && !access(outname, F_OK)) {
++    if (lstat(outname, &attr) == -1) {
++      error (0, errno, _("cannot access %s"), outname);
++      return 1;
++    }
++    if (S_ISFIFO(attr.st_mode)){
++      error (0, errno, _("denied writing FIFO (%s)"), outname);
++      return 1;
++    }
++    if (S_ISLNK(attr.st_mode)) {
++      error (0, errno, _("not following symlink (%s)"), outname);
++      return 1;
++    }
++  }
++
+   /* Create output file and set mode.  */
+
+   if (strcmp (outname, "/dev/stdout") != 0 && strcmp (outname, "-") != 0
+
+
+
+--- sharutils-4.2.1/src/mailshar.in.orig        Fri May 11 21:45:29 2001
++++ sharutils-4.2.1/src/mailshar.in     Fri May 11 21:50:40 2001
+@@ -33,7 +33,11 @@
+ If none of -MTBzZ are given, -z is automatically selected if *none*
+ of the FILEs have an .arc, .exz, .gif, .z, .gz, .Z, .zip or .zoo suffix."
+
+-temp=/usr/tmp/$$.shar
++temp=`mktemp -q /tmp/$0.XXXXXX`
++if [ $? -ne 0 ]; then
++    echo "$0: Can't create temp file, exiting..."
++    exit 1
++fi
+
+ ### Decode the options.
+

diff --git a/sys-apps/sharutils/sharutils-4.2.1-r6.ebuild b/sys-apps/sharutils/sharutils-4.2.1-r6.ebuild
new file mode 100644 (file)
index 0000000..4008d34
--- /dev/null
+++ b/sys-apps/sharutils/sharutils-4.2.1-r6.ebuild
@@ -0,0 +1,60 @@
+# Copyright 1999-2002 Gentoo Technologies, Inc.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/sharutils/sharutils-4.2.1-r6.ebuild,v 1.1 2002/10/30 13:14:58 aliz Exp $
+
+IUSE="nls"
+
+S=${WORKDIR}/${P}
+DESCRIPTION="Tools to deal with shar archives"
+SRC_URI="ftp://prep.ai.mit.edu/gnu/sharutils/${P}.tar.gz"
+HOMEPAGE="http://www.gnu.org/software/sharutils/"
+KEYWORDS="x86 ppc sparc sparc64 alpha"
+SLOT="0"
+LICENSE="GPL-2"
+DEPEND="virtual/glibc 
+       sys-apps/texinfo
+       nls? ( >=sys-devel/gettext-0.10.35 )"
+RDEPEND="virtual/glibc"
+
+
+src_unpack() {
+        unpack ${A}
+        cd ${WORKDIR}
+        patch -p0 < ${FILESDIR}/${PF}-gentoo.diff
+        cd ${S}/po
+        mv nl.po nl.po.orig
+        sed -e 's/aangemaakt/aangemaakt\\n/' nl.po.orig > nl.po
+        mv pt.po pt.po.orig
+        sed -e 's/de %dk/de %dk\\n/' pt.po.orig > pt.po
+}
+
+src_compile() {
+       local myconf
+       use nls || myconf="${myconf} --disable-nls"
+
+       ./configure --host=${CHOST} --prefix=/usr ${myconf} || die
+       make ${MAKEOPTS} localedir=/usr/share/locale || die
+}
+
+src_install() {
+       make \
+               prefix=${D}/usr \
+               localedir=${D}/usr/share/locale \
+               infodir=${D}/usr/share/info \
+               install || die
+
+       doman doc/*.[15]
+       #Remove some strange locals
+       cd ${D}/usr/share/locale
+       for i in *.
+       do
+          rm -rf ${i}
+       done
+       rm -rf ${D}/usr/lib
+
+       cd ${S}
+       dodoc AUTHORS BACKLOG COPYING ChangeLog ChangeLog.OLD \
+               NEWS README README.OLD THANKS TODO
+}
+
+