1 |
commit: 3e7da11f260f36acddc64b074d2eef63bb1a14b6 |
2 |
Author: charIes17 <charles17 <AT> arcor <DOT> de> |
3 |
AuthorDate: Mon Jul 17 07:36:09 2017 +0000 |
4 |
Commit: David Seifert <soap <AT> gentoo <DOT> org> |
5 |
CommitDate: Sun Jul 30 15:13:07 2017 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3e7da11f |
7 |
|
8 |
x11-misc/pcmanfm: Add patch for CVE-2017-8934 |
9 |
|
10 |
Bug: https://bugs.gentoo.org/show_bug.cgi?id=618622 |
11 |
Bug: https://bugs.gentoo.org/show_bug.cgi?id=624938 |
12 |
Package-Manager: Portage-2.3.6, Repoman-2.3.1 |
13 |
Closes: https://github.com/gentoo/gentoo/pull/5118 |
14 |
|
15 |
.../files/pcmanfm-1.2.5-CVE-2017-8934.patch | 40 ++++++++++++++++++++++ |
16 |
x11-misc/pcmanfm/pcmanfm-1.2.3.ebuild | 4 +-- |
17 |
x11-misc/pcmanfm/pcmanfm-1.2.5.ebuild | 24 +++++++------ |
18 |
x11-misc/pcmanfm/pcmanfm-9999.ebuild | 4 +-- |
19 |
4 files changed, 58 insertions(+), 14 deletions(-) |
20 |
|
21 |
diff --git a/x11-misc/pcmanfm/files/pcmanfm-1.2.5-CVE-2017-8934.patch b/x11-misc/pcmanfm/files/pcmanfm-1.2.5-CVE-2017-8934.patch |
22 |
new file mode 100644 |
23 |
index 00000000000..2acd91bffe2 |
24 |
--- /dev/null |
25 |
+++ b/x11-misc/pcmanfm/files/pcmanfm-1.2.5-CVE-2017-8934.patch |
26 |
@@ -0,0 +1,40 @@ |
27 |
+# index 8c2049a..876f7f3 100644 (file) |
28 |
+# --- a/NEWS |
29 |
+# +++ b/NEWS |
30 |
+# @@ -1,3 +1,7 @@ |
31 |
+# +* Fixed potential access violation, use runtime user dir instead of tmp dir |
32 |
+# + for single instance socket. |
33 |
+# + |
34 |
+# + |
35 |
+# Changes on 1.2.5 since 1.2.4: |
36 |
+ |
37 |
+ * Removed options to Cut, Remove and Rename from context menu on mounted |
38 |
+diff --git a/src/single-inst.c b/src/single-inst.c |
39 |
+index 62c37b3..aaf84ab 100644 (file) |
40 |
+--- a/src/single-inst.c |
41 |
++++ b/src/single-inst.c |
42 |
+@@ -2,7 +2,7 @@ |
43 |
+ * single-inst.c: simple IPC mechanism for single instance app |
44 |
+ * |
45 |
+ * Copyright 2010 Hong Jen Yee (PCMan) <pcman.tw@×××××.com> |
46 |
+- * Copyright 2012 Andriy Grytsenko (LStranger) <andrej@××××××××.ua> |
47 |
++ * Copyright 2012-2017 Andriy Grytsenko (LStranger) <andrej@××××××××.ua> |
48 |
+ * |
49 |
+ * This program is free software; you can redistribute it and/or modify |
50 |
+ * it under the terms of the GNU General Public License as published by |
51 |
+@@ -404,11 +404,16 @@ static void get_socket_name(SingleInstData* data, char* buf, int len) |
52 |
+ } |
53 |
+ else |
54 |
+ dpynum = 0; |
55 |
++#if GLIB_CHECK_VERSION(2, 28, 0) |
56 |
++ g_snprintf(buf, len, "%s/%s-socket-%s-%d", g_get_user_runtime_dir(), |
57 |
++ data->prog_name, host ? host : "", dpynum); |
58 |
++#else |
59 |
+ g_snprintf(buf, len, "%s/.%s-socket-%s-%d-%s", |
60 |
+ g_get_tmp_dir(), |
61 |
+ data->prog_name, |
62 |
+ host ? host : "", |
63 |
+ dpynum, |
64 |
+ g_get_user_name()); |
65 |
++#endif |
66 |
+ } |
67 |
|
68 |
diff --git a/x11-misc/pcmanfm/pcmanfm-1.2.3.ebuild b/x11-misc/pcmanfm/pcmanfm-1.2.3.ebuild |
69 |
index dfe38dce2bc..a15faa771fe 100644 |
70 |
--- a/x11-misc/pcmanfm/pcmanfm-1.2.3.ebuild |
71 |
+++ b/x11-misc/pcmanfm/pcmanfm-1.2.3.ebuild |
72 |
@@ -1,4 +1,4 @@ |
73 |
-# Copyright 1999-2015 Gentoo Foundation |
74 |
+# Copyright 1999-2017 Gentoo Foundation |
75 |
# Distributed under the terms of the GNU General Public License v2 |
76 |
|
77 |
EAPI="5" |
78 |
@@ -13,7 +13,7 @@ MY_PV="${PV/_/}" |
79 |
MY_P="${PN}-${MY_PV}" |
80 |
|
81 |
DESCRIPTION="Fast lightweight tabbed filemanager" |
82 |
-HOMEPAGE="http://pcmanfm.sourceforge.net/" |
83 |
+HOMEPAGE="https://wiki.lxde.org/en/PCManFM" |
84 |
SRC_URI="https://dev.gentoo.org/~hwoarang/distfiles/${MY_P}.tar.xz" |
85 |
|
86 |
LICENSE="GPL-2" |
87 |
|
88 |
diff --git a/x11-misc/pcmanfm/pcmanfm-1.2.5.ebuild b/x11-misc/pcmanfm/pcmanfm-1.2.5.ebuild |
89 |
index 232e40452c5..165284c0435 100644 |
90 |
--- a/x11-misc/pcmanfm/pcmanfm-1.2.5.ebuild |
91 |
+++ b/x11-misc/pcmanfm/pcmanfm-1.2.5.ebuild |
92 |
@@ -1,7 +1,8 @@ |
93 |
-# Copyright 1999-2016 Gentoo Foundation |
94 |
+# Copyright 1999-2017 Gentoo Foundation |
95 |
# Distributed under the terms of the GNU General Public License v2 |
96 |
|
97 |
-EAPI="6" |
98 |
+EAPI=6 |
99 |
+ |
100 |
PLOCALES="ar be bg bn ca cs da de el en_GB es et eu fa fi fo fr gl he hr hu id |
101 |
is it ja kk km ko lg lt lv ms nl pa pl pt pt_BR ro ru si sk sl sr sr@latin sv |
102 |
te th tr tt_RU ug uk vi zh_CN zh_TW" |
103 |
@@ -13,7 +14,7 @@ MY_PV="${PV/_/}" |
104 |
MY_P="${PN}-${MY_PV}" |
105 |
|
106 |
DESCRIPTION="Fast lightweight tabbed filemanager" |
107 |
-HOMEPAGE="http://pcmanfm.sourceforge.net/" |
108 |
+HOMEPAGE="https://wiki.lxde.org/en/PCManFM" |
109 |
SRC_URI="mirror://sourceforge/${PN}/${P}.tar.xz" |
110 |
|
111 |
LICENSE="GPL-2" |
112 |
@@ -36,23 +37,26 @@ DEPEND="${RDEPEND} |
113 |
|
114 |
S="${WORKDIR}"/${MY_P} |
115 |
|
116 |
-DOCS=( AUTHORS ) |
117 |
- |
118 |
-DOC_CONTENTS="PCmanFM can optionally support the menu://applications/ |
119 |
- location. You should install lxde-base/lxmenu-data for that functionality." |
120 |
+PATCHES=( "${FILESDIR}"/${PN}-1.2.5-CVE-2017-8934.patch ) |
121 |
|
122 |
src_prepare() { |
123 |
- export LINGUAS="${LINGUAS:-${PLOCALE_BACKUP}}" |
124 |
- l10n_get_locales > "${S}"/po/LINGUAS |
125 |
default |
126 |
+ |
127 |
+ export LINGUAS="${LINGUAS:-${PLOCALE_BACKUP}}" |
128 |
+ l10n_get_locales > po/LINGUAS || die |
129 |
} |
130 |
|
131 |
src_configure() { |
132 |
- econf --sysconfdir=/etc $(use_enable debug) |
133 |
+ econf \ |
134 |
+ --sysconfdir="${EPREFIX}"/etc \ |
135 |
+ $(use_enable debug) |
136 |
} |
137 |
|
138 |
src_install() { |
139 |
default |
140 |
+ |
141 |
+ local DOC_CONTENTS="PCmanFM can optionally support the menu://applications/ |
142 |
+ location. You should install lxde-base/lxmenu-data for that functionality." |
143 |
readme.gentoo_create_doc |
144 |
} |
145 |
|
146 |
|
147 |
diff --git a/x11-misc/pcmanfm/pcmanfm-9999.ebuild b/x11-misc/pcmanfm/pcmanfm-9999.ebuild |
148 |
index 0613ad8b5f8..5edc83ba4c0 100644 |
149 |
--- a/x11-misc/pcmanfm/pcmanfm-9999.ebuild |
150 |
+++ b/x11-misc/pcmanfm/pcmanfm-9999.ebuild |
151 |
@@ -1,4 +1,4 @@ |
152 |
-# Copyright 1999-2016 Gentoo Foundation |
153 |
+# Copyright 1999-2017 Gentoo Foundation |
154 |
# Distributed under the terms of the GNU General Public License v2 |
155 |
|
156 |
EAPI="5" |
157 |
@@ -22,7 +22,7 @@ MY_PV="${PV/_/}" |
158 |
MY_P="${PN}-${MY_PV}" |
159 |
|
160 |
DESCRIPTION="Fast lightweight tabbed filemanager" |
161 |
-HOMEPAGE="http://pcmanfm.sourceforge.net/" |
162 |
+HOMEPAGE="https://wiki.lxde.org/en/PCManFM" |
163 |
|
164 |
LICENSE="GPL-2" |
165 |
SLOT="0" |