[gentoo-commits] gentoo commit in src/patchsets/texlive/2015/texlive-core: 050_all_latex2man_predictable_tmp.patch series

[gentoo-commits] gentoo commit in src/patchsets/texlive/2015/texlive-core: 050_all_latex2man_predictable_tmp.patch series

[Alexis Ballier (aballier)]

aballier    16/12/05 14:20:01

  Modified:             series
  Added:                050_all_latex2man_predictable_tmp.patch
  Log:
  add patch for bug #432144 to tl-core patchset

Revision  Changes    Path
1.2                  src/patchsets/texlive/2015/texlive-core/series

file : http://sources.gentoo.org/viewvc.cgi/gentoo/src/patchsets/texlive/2015/texlive-core/series?rev=1.2&view=markup
plain: http://sources.gentoo.org/viewvc.cgi/gentoo/src/patchsets/texlive/2015/texlive-core/series?rev=1.2&content-type=text/plain
diff : http://sources.gentoo.org/viewvc.cgi/gentoo/src/patchsets/texlive/2015/texlive-core/series?r1=1.1&r2=1.2

Index: series
===================================================================
RCS file: /var/cvsroot/gentoo/src/patchsets/texlive/2015/texlive-core/series,v
retrieving revision 1.1
retrieving revision 1.2
diff -u -r1.1 -r1.2
--- series	15 Jul 2015 11:12:57 -0000	1.1
+++ series	5 Dec 2016 14:20:01 -0000	1.2
@@ -2,3 +2,4 @@
 020_all_a2ping_invocation.patch
 030_all_updmap_normalize.patch
 040_all_remove_define_abs.patch
+050_all_latex2man_predictable_tmp.patch



1.1                  src/patchsets/texlive/2015/texlive-core/050_all_latex2man_predictable_tmp.patch

file : http://sources.gentoo.org/viewvc.cgi/gentoo/src/patchsets/texlive/2015/texlive-core/050_all_latex2man_predictable_tmp.patch?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewvc.cgi/gentoo/src/patchsets/texlive/2015/texlive-core/050_all_latex2man_predictable_tmp.patch?rev=1.1&content-type=text/plain

Index: 050_all_latex2man_predictable_tmp.patch
===================================================================
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668779
https://bugs.gentoo.org/show_bug.cgi?id=432144
CVE-2012-2120 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2120)

Index: texlive-20150521-source/texmf-dist/scripts/latex2man/latex2man
===================================================================
--- texlive-20150521-source.orig/texmf-dist/scripts/latex2man/latex2man
+++ texlive-20150521-source/texmf-dist/scripts/latex2man/latex2man
@@ -29,8 +29,6 @@ sub date2str;
 $VERSION = "1.24";
 $DATE    = date2str ('$Date: 2016/12/05 14:20:01 $' =~ m|(\d+/\d+/\d+)|);
 
-$tmp = "/tmp/$CMD.$$";
-
 ##################################################################
 # check option and arguments
 ##################################################################
@@ -124,6 +122,8 @@ $SrcFile  = $ARGV[0];
 $DestFile = $ARGV[1];
 open (SRC,  "<$SrcFile")  || die "$CMD: Can't open file \`$SrcFile' for reading.\n";
 if ($opt_H || $opt_T) {
+    $tmp = `mktemp` || die;
+    chomp $tmp;
     # DestFile will be written in the postprocess
     open (DEST, ">$tmp")      || die "$CMD: Can't open file \`$tmp' for writing.\n";
 } else {