net-mail/mpack: 1.6-r2

Package-Manager: portage-2.1.10.43/cvs/Linux x86_64

4 files changed, 69 insertions, 5 deletions

diff --git a/net-mail/mpack/ChangeLog b/net-mail/mpack/ChangeLog
index 2e7503e97b59..eb44b1cd4466 100644
--- a/net-mail/mpack/ChangeLog
+++ b/net-mail/mpack/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for net-mail/mpack
 # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-mail/mpack/ChangeLog,v 1.15 2011/12/07 23:34:59 sping Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-mail/mpack/ChangeLog,v 1.16 2011/12/31 22:45:11 sping Exp $
+
+*mpack-1.6-r2 (31 Dec 2011)
+
+  31 Dec 2011; Sebastian Pipping <sping@gentoo.org> +mpack-1.6-r2.ebuild,
+  +files/mpack-1.6-cve-2011-4919.patch:
+  Apply patch for CVE-2011-4919 (information disclosure) (bug #171075)
 
 *mpack-1.6-r1 (07 Dec 2011)
 
diff --git a/net-mail/mpack/Manifest b/net-mail/mpack/Manifest
index b34ed7240a5f..48afe5fb5061 100644
--- a/net-mail/mpack/Manifest
+++ b/net-mail/mpack/Manifest
@@ -4,6 +4,7 @@ Hash: SHA1
 AUX mpack-1.5-malloc-fix.patch 824 RMD160 a991c4fe77bf5827b29bb3d5054fede5ebcc562f SHA1 1cfe57c2146da08b08ee224d081ad61004e09890 SHA256 1762b62ca1be741aa1a8423be80beb6a549325ab0205ae187c6c65e3b10cc1a4
 AUX mpack-1.5-r1.patch 2345 RMD160 8f51138c5fb59a92c2cb8b5f0fcd80f5246bded3 SHA1 38217e9014580233d7c9e3562dd7a5ff87af42c0 SHA256 e11b8ef09f241cdd826877845691b232fedc77b1f37998d9799119986d4b89c0
 AUX mpack-1.6-compile.patch 2652 RMD160 0922d163e4af74a7de8dc70962ba37fc22cdc656 SHA1 c05cf2bdf70a6475d555259c97907539f8b655f2 SHA256 190b6a97588203d3e1527b0aa5aa68137e80ca27ce8211bdd135cca2ffd1e2bb
+AUX mpack-1.6-cve-2011-4919.patch 706 RMD160 778b3fab001eb8565fd643a54114892b7c046104 SHA1 221e6f392294420bb3ae68045c8c007ce17ffc48 SHA256 ff86494abdee7d4868656bf525a018ccfbd479cde75faf10e468e1c0c8f1fb0c
 AUX mpack-1.6-gentoo.patch 2022 RMD160 95459db0590644ae2b0acd94b05f748d2ff54820 SHA1 bd699376b38e8fa8fb9e8ff9f19513e79df928ad SHA256 7d00e9be884b8c672820b5801b46bc708f143cc93d356828044f9c1370b58feb
 AUX mpack-1.6-paths.patch 2729 RMD160 1ffa7ad504ecd7a0886d81cafb0d6ca840983b6e SHA1 8b36a943d982d4c82ac601e35acf9954f9415683 SHA256 534e3e26d91bd72f3e476ccc09c3091d87b8525f5a521630b2edfe29b323ed42
 DIST mpack-1.5-src.tar.Z 285360 RMD160 614c35b1f63c2a6027c978946941cd8755cba774 SHA1 1c5081edd9c7152d2a8c4585af2c5a3fc9f17d60 SHA256 78b442cf37889d56b11b368cade6e3ebe49b27d4a46fcec158669fb0b8ef1cf9
@@ -11,13 +12,14 @@ DIST mpack-1.6.tar.gz 179850 RMD160 a83330aa15437dc3ca6475cbf6e35b09ab9cef07 SHA
 EBUILD mpack-1.5-r1.ebuild 823 RMD160 ad478bfa3ced02337e2b60f3687251ea65bb79c8 SHA1 e822f24d0a9edebc1392dd0c66e83189eaa1e275 SHA256 72e1f4c835d7b188cd25f7a4e1e32c851757bda8f2c0be49e1c2a768f7d767bc
 EBUILD mpack-1.5.ebuild 594 RMD160 eb834291cf4120466d87712dcca4dbb30742bf51 SHA1 aff06dcf57593e4401b4b76fd40208e6d4f59779 SHA256 c9fd3a62f0610b562723e2e173dc38e9987b361685f5a6339a30e462537346c3
 EBUILD mpack-1.6-r1.ebuild 750 RMD160 a1e3f182d8366899d835398648bc0785e833234b SHA1 67c2b9a0cb731fd363a9ab0d30433fa70a455bd5 SHA256 7484e40abc7f578f141f859daf68f99ca5b4cfd74b668115f37e278ef43c3356
+EBUILD mpack-1.6-r2.ebuild 799 RMD160 6447aebadf365f7aca7fa3450be2fff0b070dea4 SHA1 debc72da0b565cf4a0064cc97972de18d3eb6110 SHA256 8d3a7c8fea010106ba9e758ac293063d9e561a733a3cdc759a1c2606b36356ac
 EBUILD mpack-1.6.ebuild 698 RMD160 757b0768b615bb5fc0589e16dbb976b29e90b7a9 SHA1 05b67313686aaa96761bc8b4c4170c5a24e9a07d SHA256 5b23f080d57b7643dab4eee7c77282b227882c566eeed30fadebf4bd131277af
-MISC ChangeLog 2379 RMD160 d1d5e0f9ceff318fc2a97b7f1ab3b2177c042e9e SHA1 b0712270f577a574fa1b5d3f1e95720564a4cfa4 SHA256 be6e0a7343363210f65e7327b4d7f64ec0d0e1670ce41cfb5e22830cb437566f
+MISC ChangeLog 2594 RMD160 0581ca2f6ab4b7999ea8eed5bcdb7412e11e795d SHA1 8304885b84254332bc2505a30737b645cab2fe55 SHA256 aa57f97b2e4fadac2a0c3c7511e6d41fd0af8db993110072967cf77a895fe5ab
 MISC metadata.xml 161 RMD160 273e570423fa3cd9d3f15f7967a43307c8ee9661 SHA1 a1fecd2f7b169d621b88c6ccab9d758209fc8f19 SHA256 4ebf9a8f60040bfb95f13790c1d146a49c69f791f9c421e02a5d96fd6fcb2b32
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.18 (GNU/Linux)
 
-iEYEARECAAYFAk7f+CAACgkQsAvGakAaFgAG5ACeMeAF7OgKTbEstAnSOppCIek8
-QXkAn3j2dc3LmUSgbpfvGhbF+6fhOc+u
-=fnrg
+iEYEARECAAYFAk7/kGsACgkQsAvGakAaFgDQzACeNzypRTZ7c7VgVDxdosJsT6/M
+qr4An2sHkPiYycpud5vrFpVkEW3I8NOi
+=NBjD
 -----END PGP SIGNATURE-----
diff --git a/net-mail/mpack/files/mpack-1.6-cve-2011-4919.patch b/net-mail/mpack/files/mpack-1.6-cve-2011-4919.patch
new file mode 100644
index 000000000000..62a04faa7936
--- /dev/null
+++ b/net-mail/mpack/files/mpack-1.6-cve-2011-4919.patch
@@ -0,0 +1,28 @@
+From 0c87201f64491575350b18d04c62ec142e119d1f Mon Sep 17 00:00:00 2001
+From: Sebastian Pipping <sebastian@pipping.org>
+Date: Sat, 31 Dec 2011 20:17:20 +0100
+Subject: [PATCH] Fix permissions
+
+---
+ unixos.c |    4 ++--
+ 1 files changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/unixos.c b/unixos.c
+index fa6d0a7..0e2f469 100644
+--- a/unixos.c
++++ b/unixos.c
+@@ -134,9 +134,9 @@ FILE *os_createnewfile(char *fname)
+     FILE *ret;
+      
+ #ifdef O_EXCL
+-    fd=open(fname, O_RDWR|O_CREAT|O_EXCL, 0644);
++    fd=open(fname, O_RDWR|O_CREAT|O_EXCL, 0600);
+ #else
+-    fd=open(fname, O_RDWR|O_CREAT|O_TRUNC, 0644);
++    fd=open(fname, O_RDWR|O_CREAT|O_TRUNC, 0600);
+ #endif
+ 
+     if (fd == -1)
+-- 
+1.7.8.1
+
diff --git a/net-mail/mpack/mpack-1.6-r2.ebuild b/net-mail/mpack/mpack-1.6-r2.ebuild
new file mode 100644
index 000000000000..bba9f81ac68e
--- /dev/null
+++ b/net-mail/mpack/mpack-1.6-r2.ebuild
@@ -0,0 +1,28 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-mail/mpack/mpack-1.6-r2.ebuild,v 1.1 2011/12/31 22:45:11 sping Exp $
+
+EAPI="3"
+
+inherit eutils
+
+DESCRIPTION="Command-line MIME encoding and decoding utilities"
+HOMEPAGE="ftp://ftp.andrew.cmu.edu/pub/mpack/"
+SRC_URI="ftp://ftp.andrew.cmu.edu/pub/mpack/${P}.tar.gz"
+
+SLOT="0"
+LICENSE="as-is"
+KEYWORDS="~amd64 ~sparc ~x86 ~ppc-macos ~sparc-solaris ~x86-solaris"
+IUSE=""
+
+src_prepare() {
+	# NOTE: These three patches replace <mpack-1.6-gentoo.patch>
+	epatch "${FILESDIR}"/${P}-compile.patch
+	epatch "${FILESDIR}"/${P}-paths.patch
+	epatch "${FILESDIR}"/${P}-cve-2011-4919.patch
+}
+
+src_install () {
+	make DESTDIR=${D} install || die
+	dodoc README.* Changes
+}