Security bump. Failure to check the return value of setuid() in a privileged process could be used by a local user for file overwriting and possible privilege escalation in corner cases. See http://lists.freedesktop.org/archives/xorg/2006-June/016146.html for more information.

Package-Manager: portage-2.1.1_pre1-r1

3 files changed, 17 insertions, 40 deletions

diff --git a/x11-libs/xtrans/Manifest b/x11-libs/xtrans/Manifest
index 7b6262c51ae2..3d35ac4c5c68 100644
--- a/x11-libs/xtrans/Manifest
+++ b/x11-libs/xtrans/Manifest
@@ -1,26 +1,20 @@
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA1
-
-DIST xtrans-1.0.0.tar.bz2 88964 RMD160 1b34209891498dd4a94a49fc77834633c65c3553 SHA256 33ee3fd049a80701bf71eaa88beba86efc6923e59b069ef22346d0ac12be2c2e size 88964
-EBUILD xtrans-1.0.0.ebuild 486 RMD160 e9def625e66dbd823182d0fd33c50361011a22ec SHA1 5e1378c5ee8ea6a531d5882a075a06c3a288cab9 SHA256 ed001bb9d449e6cc367d5fc69a764b131a1b0d7f414cc17822ed50ab7e18a912 size 486
-MD5 d4893d40841b02ee39a0fdfa2fe36410 xtrans-1.0.0.ebuild 486
-RMD160 e9def625e66dbd823182d0fd33c50361011a22ec xtrans-1.0.0.ebuild 486
-SHA256 ed001bb9d449e6cc367d5fc69a764b131a1b0d7f414cc17822ed50ab7e18a912 xtrans-1.0.0.ebuild 486
-MISC ChangeLog 2781 RMD160 e900663467b7a8f65243d5adc00e904bb755823e SHA1 c395a508d819fa1910f054fc63b21c13eb8d5381 SHA256 0986edb981c1400af29cce04b1a192205ae3bc0938b7deee7478c7fe11cab80f size 2781
-MD5 c018326358de852ab2ee9656a90a0219 ChangeLog 2781
-RMD160 e900663467b7a8f65243d5adc00e904bb755823e ChangeLog 2781
-SHA256 0986edb981c1400af29cce04b1a192205ae3bc0938b7deee7478c7fe11cab80f ChangeLog 2781
-MISC metadata.xml 156 RMD160 c1274bdccf57603d580de0075ba07a35b7509560 SHA1 6f78f604e3d079d39189b40aaaa1ddb06182ad91 SHA256 5101ab0d4cc8c7125eea733c44e86962769bd77acaf53b69223b9cadcdd29055 size 156
+AUX xtrans-1.0.0-setuid.diff 900 RMD160 428681fa430ef6b1ec732f2f686721edb6d2ace2 SHA1 82b913fe5ec96fd55afb8356ae338b90ed0f179b SHA256 2dad2bf27344928d43057384fda744ffa3f33e813cc4b5dc809469c1661eaf28
+MD5 a3704e53fae7249379d842f6e626423a files/xtrans-1.0.0-setuid.diff 900
+RMD160 428681fa430ef6b1ec732f2f686721edb6d2ace2 files/xtrans-1.0.0-setuid.diff 900
+SHA256 2dad2bf27344928d43057384fda744ffa3f33e813cc4b5dc809469c1661eaf28 files/xtrans-1.0.0-setuid.diff 900
+DIST xtrans-1.0.0.tar.bz2 88964 RMD160 1b34209891498dd4a94a49fc77834633c65c3553 SHA1 1dc950ff1e0598433aa88e77553f93d56337fe3d SHA256 33ee3fd049a80701bf71eaa88beba86efc6923e59b069ef22346d0ac12be2c2e
+EBUILD xtrans-1.0.0-r1.ebuild 529 RMD160 9ef1f62983d96ec814b7b75e1b7d707228637ce6 SHA1 9b69aa6cb8e9f70b495ea29b1053c6fe2ec9f8b1 SHA256 07a6f54629664f0c09affca255eb2b265114ea838d22e51527cea8229f1d3cb2
+MD5 e9e2f90928823bed7166dc0b8a169de8 xtrans-1.0.0-r1.ebuild 529
+RMD160 9ef1f62983d96ec814b7b75e1b7d707228637ce6 xtrans-1.0.0-r1.ebuild 529
+SHA256 07a6f54629664f0c09affca255eb2b265114ea838d22e51527cea8229f1d3cb2 xtrans-1.0.0-r1.ebuild 529
+MISC ChangeLog 3243 RMD160 a6009002c543a1ccb534a7ecc42bcde289e62816 SHA1 1d90e1955bc8996a52ce0660fcf22cc9eef53834 SHA256 06c859ec6715ef2f363afbda742fec270956196add2f06c1f563f8caebaba6c9
+MD5 e55300539769d5d8f45e4b5d9759a32a ChangeLog 3243
+RMD160 a6009002c543a1ccb534a7ecc42bcde289e62816 ChangeLog 3243
+SHA256 06c859ec6715ef2f363afbda742fec270956196add2f06c1f563f8caebaba6c9 ChangeLog 3243
+MISC metadata.xml 156 RMD160 c1274bdccf57603d580de0075ba07a35b7509560 SHA1 6f78f604e3d079d39189b40aaaa1ddb06182ad91 SHA256 5101ab0d4cc8c7125eea733c44e86962769bd77acaf53b69223b9cadcdd29055
 MD5 a37bab73e2f24b213932c30997d3d360 metadata.xml 156
 RMD160 c1274bdccf57603d580de0075ba07a35b7509560 metadata.xml 156
 SHA256 5101ab0d4cc8c7125eea733c44e86962769bd77acaf53b69223b9cadcdd29055 metadata.xml 156
-MD5 b4ef7b467f1ecb5c696e9b8644d8d862 files/digest-xtrans-1.0.0 238
-RMD160 885b074aa8bcca8f37b7465f2293b6bb5eebb2d9 files/digest-xtrans-1.0.0 238
-SHA256 2b5157760a4193726302f07d237f88858aef6712c8c3a5c67eb4610305208d81 files/digest-xtrans-1.0.0 238
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.3 (GNU/Linux)
-
-iD8DBQFEUi5XW78445TWHXcRAmq+AJ9cC4s/QWqGfRGdc/TY5Yol+c+rPACglgsA
-K4YsEongW0Cqju8nsxVvIRA=
-=ThmR
------END PGP SIGNATURE-----
+MD5 b4ef7b467f1ecb5c696e9b8644d8d862 files/digest-xtrans-1.0.0-r1 238
+RMD160 885b074aa8bcca8f37b7465f2293b6bb5eebb2d9 files/digest-xtrans-1.0.0-r1 238
+SHA256 2b5157760a4193726302f07d237f88858aef6712c8c3a5c67eb4610305208d81 files/digest-xtrans-1.0.0-r1 238
diff --git a/x11-libs/xtrans/files/digest-xtrans-1.0.0 b/x11-libs/xtrans/files/digest-xtrans-1.0.0
deleted file mode 100644
index 01c93e64c361..000000000000
--- a/x11-libs/xtrans/files/digest-xtrans-1.0.0
+++ /dev/null
@@ -1,3 +0,0 @@
-MD5 da1628280f945e8d48a4c2e80ee28873 xtrans-1.0.0.tar.bz2 88964
-RMD160 1b34209891498dd4a94a49fc77834633c65c3553 xtrans-1.0.0.tar.bz2 88964
-SHA256 33ee3fd049a80701bf71eaa88beba86efc6923e59b069ef22346d0ac12be2c2e xtrans-1.0.0.tar.bz2 88964
diff --git a/x11-libs/xtrans/xtrans-1.0.0.ebuild b/x11-libs/xtrans/xtrans-1.0.0.ebuild
deleted file mode 100644
index 8e528fe2aad2..000000000000
--- a/x11-libs/xtrans/xtrans-1.0.0.ebuild
+++ /dev/null
@@ -1,14 +0,0 @@
-# Copyright 1999-2006 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/x11-libs/xtrans/xtrans-1.0.0.ebuild,v 1.8 2006/03/31 19:34:44 flameeyes Exp $
-
-# Must be before x-modular eclass is inherited
-#SNAPSHOT="yes"
-
-inherit x-modular
-
-DESCRIPTION="X.Org xtrans library"
-RESTRICT="mirror"
-KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~x86-fbsd"
-RDEPEND=""
-DEPEND="${RDEPEND}"