From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 4073F1382C5 for ; Fri, 23 Feb 2018 20:19:26 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 3A371E0819; Fri, 23 Feb 2018 20:19:25 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 09024E0819 for ; Fri, 23 Feb 2018 20:19:24 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 83D78335C0C for ; Fri, 23 Feb 2018 20:19:22 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 4046E1A7 for ; Fri, 23 Feb 2018 20:19:21 +0000 (UTC) From: "NP Hardass" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "NP Hardass" Message-ID: <1519417146.ced50dd61da2d434a71ec88f0fec8bd0d52b12e2.np-hardass@gentoo> Subject: [gentoo-commits] proj/gentoo-mate:master commit in: app-text/atril/files/, app-text/atril/ X-VCS-Repository: proj/gentoo-mate X-VCS-Files: app-text/atril/atril-1.12.2-r4.ebuild app-text/atril/atril-1.12.2-r5.ebuild app-text/atril/atril-1.14.2-r1.ebuild app-text/atril/atril-1.14.2-r2.ebuild app-text/atril/atril-1.16.1-r1.ebuild app-text/atril/atril-1.16.1-r2.ebuild app-text/atril/files/atril-cve-2017-1000083.patch X-VCS-Directories: app-text/atril/ app-text/atril/files/ X-VCS-Committer: np-hardass X-VCS-Committer-Name: NP Hardass X-VCS-Revision: ced50dd61da2d434a71ec88f0fec8bd0d52b12e2 X-VCS-Branch: master Date: Fri, 23 Feb 2018 20:19:21 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 560343d3-f97b-4750-a79b-fe9b13acb343 X-Archives-Hash: 4b2abba38a3852941987db42180d8dc9 commit: ced50dd61da2d434a71ec88f0fec8bd0d52b12e2 Author: NP-Hardass gentoo org> AuthorDate: Fri Feb 23 20:19:06 2018 +0000 Commit: NP Hardass gentoo org> CommitDate: Fri Feb 23 20:19:06 2018 +0000 URL: https://gitweb.gentoo.org/proj/gentoo-mate.git/commit/?id=ced50dd6 app-text/atril: Fix CVE-2017-1000083 Bug: https://bugs.gentoo.org/624880 Package-Manager: Portage-2.3.24, Repoman-2.3.6 ...ril-1.12.2-r4.ebuild => atril-1.12.2-r5.ebuild} | 4 +++- ...ril-1.14.2-r1.ebuild => atril-1.14.2-r2.ebuild} | 4 +++- ...ril-1.16.1-r1.ebuild => atril-1.16.1-r2.ebuild} | 4 +++- app-text/atril/files/atril-cve-2017-1000083.patch | 28 ++++++++++++++++++++++ 4 files changed, 37 insertions(+), 3 deletions(-) diff --git a/app-text/atril/atril-1.12.2-r4.ebuild b/app-text/atril/atril-1.12.2-r5.ebuild similarity index 96% rename from app-text/atril/atril-1.12.2-r4.ebuild rename to app-text/atril/atril-1.12.2-r5.ebuild index aa35302..360dac8 100644 --- a/app-text/atril/atril-1.12.2-r4.ebuild +++ b/app-text/atril/atril-1.12.2-r5.ebuild @@ -1,4 +1,4 @@ -# Copyright 1999-2017 Gentoo Foundation +# Copyright 1999-2018 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 EAPI=6 @@ -67,6 +67,8 @@ DEPEND="${RDEPEND} # Tests use dogtail which is not available on Gentoo. RESTRICT="test" +FILES=( "${FILESDIR}/${PN}-cve-2017-1000083.patch" ) + src_configure() { # Passing --disable-help would drop offline help, that would be inconsistent # with helps of the most of GNOME apps that doesn't require network for that. diff --git a/app-text/atril/atril-1.14.2-r1.ebuild b/app-text/atril/atril-1.14.2-r2.ebuild similarity index 96% rename from app-text/atril/atril-1.14.2-r1.ebuild rename to app-text/atril/atril-1.14.2-r2.ebuild index 12e1ae5..792c2c2 100644 --- a/app-text/atril/atril-1.14.2-r1.ebuild +++ b/app-text/atril/atril-1.14.2-r2.ebuild @@ -1,4 +1,4 @@ -# Copyright 1999-2017 Gentoo Foundation +# Copyright 1999-2018 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 EAPI=6 @@ -69,6 +69,8 @@ DEPEND="${COMMON_DEPEND} # Tests use dogtail which is not available on Gentoo. RESTRICT="test" +FILES=( "${FILESDIR}/${PN}-cve-2017-1000083.patch" ) + src_configure() { # Passing --disable-help would drop offline help, that would be inconsistent # with helps of the most of GNOME apps that doesn't require network for that. diff --git a/app-text/atril/atril-1.16.1-r1.ebuild b/app-text/atril/atril-1.16.1-r2.ebuild similarity index 96% rename from app-text/atril/atril-1.16.1-r1.ebuild rename to app-text/atril/atril-1.16.1-r2.ebuild index 4259cdd..24aad9d 100644 --- a/app-text/atril/atril-1.16.1-r1.ebuild +++ b/app-text/atril/atril-1.16.1-r2.ebuild @@ -1,4 +1,4 @@ -# Copyright 1999-2017 Gentoo Foundation +# Copyright 1999-2018 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 EAPI=6 @@ -68,6 +68,8 @@ DEPEND="${COMMON_DEPEND} # Tests use dogtail which is not available on Gentoo. RESTRICT="test" +FILES=( "${FILESDIR}/${PN}-cve-2017-1000083.patch" ) + src_configure() { # Passing --disable-help would drop offline help, that would be inconsistent # with helps of the most of GNOME apps that doesn't require network for that. diff --git a/app-text/atril/files/atril-cve-2017-1000083.patch b/app-text/atril/files/atril-cve-2017-1000083.patch new file mode 100644 index 0000000..29c81f7 --- /dev/null +++ b/app-text/atril/files/atril-cve-2017-1000083.patch @@ -0,0 +1,28 @@ +From f4291fd62f7dfe6460d2406a979ccfac0c68dd59 Mon Sep 17 00:00:00 2001 +From: ZenWalker +Date: Wed, 19 Jul 2017 11:00:09 +0200 +Subject: [PATCH] comics: make the files containing "--checkpoint-action=" + unsupported + +Fixes #257 +--- + backend/comics/comics-document.c | 6 ++++++ + 1 file changed, 6 insertions(+) + +diff --git a/backend/comics/comics-document.c b/backend/comics/comics-document.c +index 9f945c6..4d4d293 100644 +--- a/backend/comics/comics-document.c ++++ b/backend/comics/comics-document.c +@@ -983,6 +983,12 @@ extract_argv (EvDocument *document, gint page) + char *command_line, *quoted_archive, *quoted_filename; + GError *err = NULL; + ++ if (g_strrstr (comics_document->page_names->pdata[page], "--checkpoint-action=")) ++ { ++ g_warning ("File unsupported\n"); ++ gtk_main_quit (); ++ } ++ + if (page >= comics_document->page_names->len) + return NULL; +