From: Peter Volkov Date: Fri, 29 Feb 2008 11:55:41 +0000 (+0000) Subject: Fixed security issue (CVE-2008-0411), bug #208999, thank Robert Buchholz for report... X-Git-Url: http://git.tremily.us/gitweb.cgi?a=commitdiff_plain;h=3dac4ca3c6b2e1d4bfbdf0372f5019d4133651a7;p=gentoo.git Fixed security issue (CVE-2008-0411), bug #208999, thank Robert Buchholz for report and coordination. Package-Manager: portage-2.1.4.4 RepoMan-Options: --force --- diff --git a/app-text/ghostscript-gpl/ChangeLog b/app-text/ghostscript-gpl/ChangeLog index ca0a05cb5fab..2813c8f2107a 100644 --- a/app-text/ghostscript-gpl/ChangeLog +++ b/app-text/ghostscript-gpl/ChangeLog @@ -1,6 +1,12 @@ # ChangeLog for app-text/ghostscript-gpl # Copyright 1999-2008 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/app-text/ghostscript-gpl/ChangeLog,v 1.42 2008/02/15 16:05:55 tgurr Exp $ +# $Header: /var/cvsroot/gentoo-x86/app-text/ghostscript-gpl/ChangeLog,v 1.43 2008/02/29 11:55:41 pva Exp $ + +*ghostscript-gpl-8.61-r3 (29 Feb 2008) + + 29 Feb 2008; +ghostscript-gpl-8.61-r3.ebuild: + Fixed security issue (CVE-2008-0411), bug #208999, thank Robert Buchholz for + report and coordination. 15 Feb 2008; Timo Gurr -files/ghostscript-esp-8.15.2-FAPIcidfmap.cjk, diff --git a/app-text/ghostscript-gpl/Manifest b/app-text/ghostscript-gpl/Manifest index 98b4da301c38..e0a75792c298 100644 --- a/app-text/ghostscript-gpl/Manifest +++ b/app-text/ghostscript-gpl/Manifest @@ -3,8 +3,10 @@ DIST adobe-cmaps-200406.tar.gz 5001983 RMD160 284b943b3476f6f7e2bc49842fd027c6f7 DIST ghostscript-8.61.tar.bz2 13244754 RMD160 ec217b05f62f2f268a72c073f85aa95ee6f6c2aa SHA1 b05ac61885c0370e432531ffb79de349c6e8b896 SHA256 8c3f62da38688c02442f9b94ac42c6ecefb01141c8319393e8216d8422f7aa33 DIST ghostscript-gpl-8.61-patchset-1.tar.bz2 9620 RMD160 b7464977dfabeab461439abb93ad38856a7bc27e SHA1 2e3f246d4da0956c712be4312319606cdd45593f SHA256 f2112bcf6e837f47c035646238d255f683e54b2ee6227afe7cef2d0a8ea2705c DIST ghostscript-gpl-8.61-patchset-3.tar.bz2 9820 RMD160 a9377dcc84c1d023e3d673adb9edb3583f160022 SHA1 b57e75bd24e05919f993fe0c8bc418073d7d9317 SHA256 6c98dcb5335fe636a07f36546f501ea846de40054b0742cb16bd465510b72380 +DIST ghostscript-gpl-8.61-patchset-4.tar.bz2 10052 RMD160 593e2c9ad12d446d198a2b09e15134f302ff6866 SHA1 b1ea14346bb826da59d0de7b9141ed658ba9df94 SHA256 7ea27451622ad91f33f350f0d1aa9c85620f0972b5742791560098e6c8f68742 DIST gsdjvu-1.3.tar.gz 204330 RMD160 a6d2326ba9098e801000b957ab5508e998e17be8 SHA1 67fcbd72ae229ff68a5d0cc482d4179e3957df61 SHA256 7702fd287cd881a8b1e7911f780c10f98e332b3a6cd93dd35b245d5816b09ca2 EBUILD ghostscript-gpl-8.61-r1.ebuild 4624 RMD160 32519488a9ecdd93f2bf9796dbdfbb231cbb1488 SHA1 3bd38d98d24fea12a3d4bbdbc10d179313525658 SHA256 653c96b1efc62aee3621f170ec86c03a6dd433985b7f31a244c92690e72ed699 EBUILD ghostscript-gpl-8.61-r2.ebuild 4860 RMD160 ca0f01085f6a566cb9584bab85fb948c0661e63c SHA1 ca8e1d12af8bf0d049b41b775fb4c39060549c47 SHA256 09c52753321e4ab7091c9613d92e83b65b3a04a9a2baebb8ae9fd592ff1d3772 -MISC ChangeLog 9698 RMD160 321ca8c922e7f5244207c5f0dd8d386af6b23df2 SHA1 edff847c52fd0ee846467afc2cea3f9f55889116 SHA256 9f05e09ef2a4adee0129ec9731f27b4872946018b0ec6a810a18d48f0f4003b9 +EBUILD ghostscript-gpl-8.61-r3.ebuild 4950 RMD160 1dfdeccf02c3bd7988e07c0891467f11110d255a SHA1 2231f13fa38e81fe1410be410b3aef31c4d0593b SHA256 e281fb5d1bf00d9e434910c4ef57f2332a4d1b87efcef90f4f3f2d292227fff2 +MISC ChangeLog 9908 RMD160 463e496e1686ee7ffe56128af3617984e73f1621 SHA1 809f0a1c328931f44fb01fe795076cb130558215 SHA256 666d5a7fde4d9907c98b3f0ea0bab0dbcea8b50eaf46a3f59a5254f14ae582d3 MISC metadata.xml 161 RMD160 1e5b1e42553c8869b93c4a5448e9a2a2ed9fe525 SHA1 209c6a46e4cdd891980115e42ba419e3799f8088 SHA256 7c85e6739a71f5bb23e8de36c88677d772946e61f7285892f7554e37bd2bca76 diff --git a/app-text/ghostscript-gpl/ghostscript-gpl-8.61-r3.ebuild b/app-text/ghostscript-gpl/ghostscript-gpl-8.61-r3.ebuild new file mode 100644 index 000000000000..b6390ef6c6bf --- /dev/null +++ b/app-text/ghostscript-gpl/ghostscript-gpl-8.61-r3.ebuild @@ -0,0 +1,159 @@ +# Copyright 1999-2008 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/app-text/ghostscript-gpl/ghostscript-gpl-8.61-r3.ebuild,v 1.1 2008/02/29 11:55:41 pva Exp $ + +inherit autotools elisp-common eutils versionator flag-o-matic + +DESCRIPTION="GPL Ghostscript - the most current Ghostscript, AFPL, relicensed" +HOMEPAGE="http://ghostscript.com/" + +MY_P=${P/-gpl} +GSDJVU_PV=1.3 +PVM=$(get_version_component_range 1-2) +SRC_URI="cjk? ( ftp://ftp.gyve.org/pub/gs-cjk/adobe-cmaps-200406.tar.gz + ftp://ftp.gyve.org/pub/gs-cjk/acro5-cmaps-2001.tar.gz ) + !bindist? ( djvu? ( mirror://sourceforge/djvu/gsdjvu-${GSDJVU_PV}.tar.gz ) ) + mirror://sourceforge/ghostscript/${MY_P}.tar.bz2 + mirror://gentoo/${P}-patchset-4.tar.bz2" + +LICENSE="GPL-2 CPL-1.0" +SLOT="0" +KEYWORDS="~alpha amd64 ~arm hppa ~ia64 ppc ppc64 ~sh sparc ~sparc-fbsd x86 ~x86-fbsd" +IUSE="bindist cjk cups djvu gtk X" + +COMMON_DEPEND="media-libs/fontconfig + >=media-libs/jpeg-6b + >=media-libs/libpng-1.2.5 + >=media-libs/tiff-3.7 + >=sys-libs/zlib-1.1.4 + !bindist? ( djvu? ( app-text/djvu ) ) + cups? ( >=net-print/cups-1.1.20 ) + gtk? ( >=x11-libs/gtk+-2.0 ) + X? ( x11-libs/libXt x11-libs/libXext ) + !app-text/ghostscript-esp + !app-text/ghostscript-gnu" + +DEPEND="${COMMON_DEPEND} + dev-util/pkgconfig" + +RDEPEND="${COMMON_DEPEND} + cjk? ( media-fonts/arphicfonts + media-fonts/kochi-substitute + media-fonts/baekmuk-fonts ) + media-fonts/gnu-gs-fonts-std" + +S="${WORKDIR}/${MY_P}" + +src_unpack() { + unpack ${A/adobe-cmaps-200406.tar.gz acro5-cmaps-2001.tar.gz} + if use cjk ; then + cat "${WORKDIR}/patches/ghostscript-esp-8.15.2-cidfmap.cjk" >> "${S}/lib/cidfmap" + cat "${WORKDIR}/patches/ghostscript-esp-8.15.2-FAPIcidfmap.cjk" >> "${S}/lib/FAPIcidfmap" + cd "${S}/Resource" + unpack adobe-cmaps-200406.tar.gz + unpack acro5-cmaps-2001.tar.gz + cd "${WORKDIR}" + fi + + cd "${S}" + + # remove internal copies of jpeg and libpng + rm -rf "${S}/jpeg" + rm -rf "${S}/libpng" + + # Fedora patches + # upstream bug http://bugs.ghostscript.com/show_bug.cgi?id=689393 + epatch "${WORKDIR}/patches/${PN}-8.60-fPIC.patch" + epatch "${WORKDIR}/patches/${PN}-8.61-multilib.patch" + epatch "${WORKDIR}/patches/${PN}-8.60-noopt.patch" + epatch "${WORKDIR}/patches/${PN}-8.60-scripts.patch" + + # fixed in trunk, upstream bug http://bugs.ghostscript.com/show_bug.cgi?id=689577 + epatch "${WORKDIR}/patches/${PN}-8.61-gsbug689577.patch" + + # hp ijs patch shipped with net-print/hplip + epatch "${WORKDIR}/patches/${PN}-8.61-gdevijs-krgb-1.5.patch" + + # additional Gentoo patch, compile fix + epatch "${WORKDIR}/patches/${PN}-8.61-rinkj.patch" + + # Security fix for bug #208999 + epatch "${WORKDIR}"/patches/ghostscript-8.60-CVE-2008-0411.diff + + if use bindist && use djvu ; then + ewarn "You have bindist in your USE, djvu support will NOT be compiled!" + ewarn "See http://djvu.sourceforge.net/gsdjvu/COPYING for details on licensing issues." + fi + + if ! use bindist && use djvu ; then + unpack gsdjvu-${GSDJVU_PV}.tar.gz + cp gsdjvu-${GSDJVU_PV}/gsdjvu "${S}" + cp gsdjvu-${GSDJVU_PV}/gdevdjvu.c "${S}/src" + epatch "${WORKDIR}/patches/${PN}-8.61-gsdjvu-1.3.patch" + cp gsdjvu-${GSDJVU_PV}/ps2utf8.ps "${S}/lib" + cp "${S}/src/contrib.mak" "${S}/src/contrib.mak.gsdjvu" + grep -q djvusep "${S}/src/contrib.mak" || \ + cat gsdjvu-${GSDJVU_PV}/gsdjvu.mak >> "${S}/src/contrib.mak" + + # install ps2utf8.ps, bug #197818 + sed -i -e '/$(EXTRA_INIT_FILES)/ a\ps2utf8.ps \\' "${S}/src/unixinst.mak" \ + || die "sed failed" + fi + + if ! use gtk ; then + sed -i "s:\$(GSSOX)::" src/*.mak || die "gsx sed failed" + sed -i "s:.*\$(GSSOX_XENAME)$::" src/*.mak || die "gsxso sed failed" + fi + + # search path fix + sed -i -e "s:\$\(gsdatadir\)/lib:/usr/share/ghostscript/${PVM}/$(get_libdir):" \ + -e 's:$(gsdir)/fonts:/usr/share/fonts/default/ghostscript/:' \ + -e "s:exdir=.*:exdir=/usr/share/doc/${PF}/examples:" \ + -e "s:docdir=.*:docdir=/usr/share/doc/${PF}/html:" \ + -e "s:GS_DOCDIR=.*:GS_DOCDIR=/usr/share/doc/${PF}/html:" \ + src/Makefile.in src/*.mak || die "sed failed" + + cd "${S}" + eautoreconf + + cd "${S}/ijs" + eautoreconf +} + +src_compile() { + econf \ + $(use_enable cups) \ + $(use_enable gtk) \ + $(use_with X x) \ + --enable-dynamic \ + --enable-fontconfig \ + --with-drivers=ALL,rinkj \ + --with-ijs \ + --with-jasper \ + --with-jbig2dec \ + || die "econf failed" + + if ! use bindist && use djvu ; then + sed -i -e 's!$(DD)bbox.dev!& $(DD)djvumask.dev $(DD)djvusep.dev!g' Makefile + fi + + emake -j1 so all || die "emake failed" + + cd "${S}/ijs" + econf || die "ijs econf failed" + emake || die "ijs emake failed" +} + +src_install() { + emake DESTDIR="${D}" install-so install || die "emake install failed" + + if ! use bindist && use djvu ; then + dobin gsdjvu || die "dobin gsdjvu install failed" + fi + + rm -rf "${D}/usr/share/doc/${PF}/html/"{README,PUBLIC} + dodoc doc/README || die "dodoc install failed" + + cd "${S}/ijs" + emake DESTDIR="${D}" install || die "emake ijs install failed" +}