summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNP-Hardass <NP-Hardass@gentoo.org>2018-02-23 15:19:06 -0500
committerNP-Hardass <NP-Hardass@gentoo.org>2018-02-23 15:19:06 -0500
commitced50dd61da2d434a71ec88f0fec8bd0d52b12e2 (patch)
tree1a0dee64b42552e3ded03824ccd8d27702c1b6e7 /app-text
parentmate-extra/mate-calc: Bump to 1.18.1 (diff)
downloadgentoo-mate-ced50dd61da2d434a71ec88f0fec8bd0d52b12e2.tar.gz
gentoo-mate-ced50dd61da2d434a71ec88f0fec8bd0d52b12e2.tar.bz2
gentoo-mate-ced50dd61da2d434a71ec88f0fec8bd0d52b12e2.zip
app-text/atril: Fix CVE-2017-1000083
Bug: https://bugs.gentoo.org/624880 Package-Manager: Portage-2.3.24, Repoman-2.3.6
Diffstat (limited to 'app-text')
-rw-r--r--app-text/atril/atril-1.12.2-r5.ebuild (renamed from app-text/atril/atril-1.12.2-r4.ebuild)4
-rw-r--r--app-text/atril/atril-1.14.2-r2.ebuild (renamed from app-text/atril/atril-1.14.2-r1.ebuild)4
-rw-r--r--app-text/atril/atril-1.16.1-r2.ebuild (renamed from app-text/atril/atril-1.16.1-r1.ebuild)4
-rw-r--r--app-text/atril/files/atril-cve-2017-1000083.patch28
4 files changed, 37 insertions, 3 deletions
diff --git a/app-text/atril/atril-1.12.2-r4.ebuild b/app-text/atril/atril-1.12.2-r5.ebuild
index aa35302..360dac8 100644
--- a/app-text/atril/atril-1.12.2-r4.ebuild
+++ b/app-text/atril/atril-1.12.2-r5.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2017 Gentoo Foundation
+# Copyright 1999-2018 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
EAPI=6
@@ -67,6 +67,8 @@ DEPEND="${RDEPEND}
# Tests use dogtail which is not available on Gentoo.
RESTRICT="test"
+FILES=( "${FILESDIR}/${PN}-cve-2017-1000083.patch" )
+
src_configure() {
# Passing --disable-help would drop offline help, that would be inconsistent
# with helps of the most of GNOME apps that doesn't require network for that.
diff --git a/app-text/atril/atril-1.14.2-r1.ebuild b/app-text/atril/atril-1.14.2-r2.ebuild
index 12e1ae5..792c2c2 100644
--- a/app-text/atril/atril-1.14.2-r1.ebuild
+++ b/app-text/atril/atril-1.14.2-r2.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2017 Gentoo Foundation
+# Copyright 1999-2018 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
EAPI=6
@@ -69,6 +69,8 @@ DEPEND="${COMMON_DEPEND}
# Tests use dogtail which is not available on Gentoo.
RESTRICT="test"
+FILES=( "${FILESDIR}/${PN}-cve-2017-1000083.patch" )
+
src_configure() {
# Passing --disable-help would drop offline help, that would be inconsistent
# with helps of the most of GNOME apps that doesn't require network for that.
diff --git a/app-text/atril/atril-1.16.1-r1.ebuild b/app-text/atril/atril-1.16.1-r2.ebuild
index 4259cdd..24aad9d 100644
--- a/app-text/atril/atril-1.16.1-r1.ebuild
+++ b/app-text/atril/atril-1.16.1-r2.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2017 Gentoo Foundation
+# Copyright 1999-2018 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
EAPI=6
@@ -68,6 +68,8 @@ DEPEND="${COMMON_DEPEND}
# Tests use dogtail which is not available on Gentoo.
RESTRICT="test"
+FILES=( "${FILESDIR}/${PN}-cve-2017-1000083.patch" )
+
src_configure() {
# Passing --disable-help would drop offline help, that would be inconsistent
# with helps of the most of GNOME apps that doesn't require network for that.
diff --git a/app-text/atril/files/atril-cve-2017-1000083.patch b/app-text/atril/files/atril-cve-2017-1000083.patch
new file mode 100644
index 0000000..29c81f7
--- /dev/null
+++ b/app-text/atril/files/atril-cve-2017-1000083.patch
@@ -0,0 +1,28 @@
+From f4291fd62f7dfe6460d2406a979ccfac0c68dd59 Mon Sep 17 00:00:00 2001
+From: ZenWalker <scow@riseup.net>
+Date: Wed, 19 Jul 2017 11:00:09 +0200
+Subject: [PATCH] comics: make the files containing "--checkpoint-action="
+ unsupported
+
+Fixes #257
+---
+ backend/comics/comics-document.c | 6 ++++++
+ 1 file changed, 6 insertions(+)
+
+diff --git a/backend/comics/comics-document.c b/backend/comics/comics-document.c
+index 9f945c6..4d4d293 100644
+--- a/backend/comics/comics-document.c
++++ b/backend/comics/comics-document.c
+@@ -983,6 +983,12 @@ extract_argv (EvDocument *document, gint page)
+ char *command_line, *quoted_archive, *quoted_filename;
+ GError *err = NULL;
+
++ if (g_strrstr (comics_document->page_names->pdata[page], "--checkpoint-action="))
++ {
++ g_warning ("File unsupported\n");
++ gtk_main_quit ();
++ }
++
+ if (page >= comics_document->page_names->len)
+ return NULL;
+