security bump. Insecure tempfile handling bug 66370

5 files changed, 90 insertions, 10 deletions

diff --git a/net-fs/netatalk/ChangeLog b/net-fs/netatalk/ChangeLog
index 52728c0a9710..b08b2e9a48e5 100644
--- a/net-fs/netatalk/ChangeLog
+++ b/net-fs/netatalk/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for net-fs/netatalk
 # Copyright 2002-2004 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-fs/netatalk/ChangeLog,v 1.16 2004/06/29 01:57:42 tgall Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-fs/netatalk/ChangeLog,v 1.17 2004/10/09 15:18:49 solar Exp $
+
+*netatalk-1.6.4-r1 (09 Oct 2004)
+
+  09 Oct 2004; <solar@gentoo.org> +files/netatalk-1.6.4-tempfile.patch,
+  +netatalk-1.6.4-r1.ebuild:
+  security bump. Insecure tempfile handling bug 66370
 
   28 Jun 2004; Tom Gall <tgall@gentoo.org> netatalk-1.6.4.ebuild:
   stable ppc64, bug #54188 
diff --git a/net-fs/netatalk/Manifest b/net-fs/netatalk/Manifest
index 8a29bada613c..377f06ba9a6d 100644
--- a/net-fs/netatalk/Manifest
+++ b/net-fs/netatalk/Manifest
@@ -1,23 +1,26 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA1
 
-MD5 f3e732a90f2fee2330d5771ab1b3833b ChangeLog 2696
-MD5 22abbe591c68284850e50221193fd32f metadata.xml 255
-MD5 ed5f17a8565df72266eae04330832143 netatalk-1.5.3.1-r1.ebuild 1157
-MD5 182737befc5bc6abbd54fe52970963ba netatalk-1.6.2.ebuild 1162
 MD5 d1baa9063bf7f814bdbe65ea15c1e6bf netatalk-1.6.3.ebuild 1162
+MD5 831e373c523e61344d1a5d9c444c414f netatalk-1.6.4-r1.ebuild 1279
+MD5 182737befc5bc6abbd54fe52970963ba netatalk-1.6.2.ebuild 1162
 MD5 6f7992bc14acaa917877f8481083db0a netatalk-1.6.4.ebuild 1173
-MD5 3f81842125cd168666a7f1a026be463d files/atalk-rc6 2007
+MD5 ed5f17a8565df72266eae04330832143 netatalk-1.5.3.1-r1.ebuild 1157
+MD5 23570f6c7bed299c0584b84a7713fe53 ChangeLog 2886
+MD5 22abbe591c68284850e50221193fd32f metadata.xml 255
 MD5 cff2c2aa902db847d2e3ec8e34f818fc files/atalk 1297
-MD5 bd4410c61e921e87c00183817b6e29b9 files/atalknew-rc6 1703
+MD5 3f81842125cd168666a7f1a026be463d files/atalk-rc6 2007
+MD5 6dd0a76546b70cf567b7926c0881c9b5 files/digest-netatalk-1.6.4-r1 67
 MD5 cd12a22143f36d1c372ce08adc6ac0da files/digest-netatalk-1.5.3.1-r1 252
 MD5 9802f047b3ef9c6a2944bd69a9babd92 files/digest-netatalk-1.6.2 66
 MD5 2be14842a5591dde5f7a615a9e7e16c7 files/digest-netatalk-1.6.3 66
 MD5 6dd0a76546b70cf567b7926c0881c9b5 files/digest-netatalk-1.6.4 67
+MD5 9eeca2a8610190fcd373ff619d56a298 files/netatalk-1.6.4-tempfile.patch 557
+MD5 bd4410c61e921e87c00183817b6e29b9 files/atalknew-rc6 1703
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.2.4 (GNU/Linux)
 
-iD8DBQFA+fYDmdTrptrqvGERApbNAJkBnSwItlPcWMEc3O2w4EY4sAapUwCcDA6X
-/hqj2zHTbPlCefcxnIAW87o=
-=cHQr
+iD8DBQFBaAEO94CCfB4KcwwRAtmFAKCJsxm5pSE9Jl4L2xhhs2I8HLXoXACffcda
+SCxSuO91X6TtKZxLY4ud6EI=
+=9Kqh
 -----END PGP SIGNATURE-----
diff --git a/net-fs/netatalk/files/digest-netatalk-1.6.4-r1 b/net-fs/netatalk/files/digest-netatalk-1.6.4-r1
new file mode 100644
index 000000000000..91e4be88fadd
--- /dev/null
+++ b/net-fs/netatalk/files/digest-netatalk-1.6.4-r1
@@ -0,0 +1 @@
+MD5 08a00467e9348457e5df18c0a16ecb02 netatalk-1.6.4.tar.gz 1026256
diff --git a/net-fs/netatalk/files/netatalk-1.6.4-tempfile.patch b/net-fs/netatalk/files/netatalk-1.6.4-tempfile.patch
new file mode 100644
index 000000000000..c92fc15e53cd
--- /dev/null
+++ b/net-fs/netatalk/files/netatalk-1.6.4-tempfile.patch
@@ -0,0 +1,17 @@
+diff -ur netatalk-1.6.4.orig/etc/psf/etc2ps.sh netatalk-1.6.4/etc/psf/etc2ps.sh
+--- netatalk-1.6.4.orig/etc/psf/etc2ps.sh	2000-07-25 23:09:01.000000000 +0200
++++ netatalk-1.6.4/etc/psf/etc2ps.sh	2004-09-13 13:21:06.000000000 +0200
+@@ -26,9 +26,10 @@
+ #
+ df*)
+     if [ -x "$DVIPS" ]; then
+-	cat > /tmp/psfilter.$$
+-	$DVIPS $DVIPSARGS < /tmp/psfilter.$$
+-	rm -f /tmp/psfilter.$$
++	TEMPFILE=`mktemp -t psfilter.XXXXXX` || exit 1
++	cat > $TEMPFILE
++	$DVIPS $DVIPSARGS < $TEMPFILE
++	rm -f $TEMPFILE
+     else
+ 	echo "$0: filter dvips uninstalled" 1>&2
+ 	exit 2
diff --git a/net-fs/netatalk/netatalk-1.6.4-r1.ebuild b/net-fs/netatalk/netatalk-1.6.4-r1.ebuild
new file mode 100644
index 000000000000..2631d0ce3240
--- /dev/null
+++ b/net-fs/netatalk/netatalk-1.6.4-r1.ebuild
@@ -0,0 +1,53 @@
+# Copyright 1999-2004 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-fs/netatalk/netatalk-1.6.4-r1.ebuild,v 1.1 2004/10/09 15:18:49 solar Exp $
+
+inherit eutils
+IUSE="ssl pam tcpd"
+
+DESCRIPTION="kernel level implementation of the AppleTalk Protocol Suite"
+SRC_URI="mirror://sourceforge/${PN}/${P}.tar.gz"
+HOMEPAGE="http://netatalk.sourceforge.net"
+
+SLOT="0"
+LICENSE="GPL-2"
+KEYWORDS="~x86 ~ppc ~sparc ~ppc64"
+
+DEPEND="sys-apps/shadow
+	pam? ( sys-libs/pam )
+	ssl? ( dev-libs/openssl )
+	tcpd? ( sys-apps/tcp-wrappers )"
+
+
+src_unpack() {
+	unpack ${A}
+	cd ${S}
+	epatch ${FILESDIR}/${PN}-1.6.4-tempfile.patch
+}
+
+src_compile() {
+	use pam  && myconf="${myconf} --with-pam"
+	use tcpd && myconf="${myconf} --with-tcp-wrappers"
+	use ssl  && myconf="${myconf} --disable-ssl"
+
+	econf \
+		--enable-fhs \
+		--with-shadow \
+		--with-bdb=/usr \
+		${myconf} || die "netatalk configure failed"
+
+	emake || die "netatalk emake failed"
+}
+
+src_install() {
+	make DESTDIR=${D} install || die "netatalk make install failed"
+
+	# install docs
+	dodoc CHANGES CONTRIBUTORS COPYING COPYRIGHT ChangeLog
+	dodoc NEWS README TODO VERSION
+	dodoc doc/*
+
+	# install init script
+	exeinto /etc/init.d
+	newexe ${FILESDIR}/atalknew-rc6 atalk
+}