bugzy #123782: patches security hole; x86 stable

Package-Manager: portage-2.1_pre4-r1

7 files changed, 92 insertions, 11 deletions

diff --git a/app-arch/zoo/ChangeLog b/app-arch/zoo/ChangeLog
index c30d88b144c4..55c63b2f58c5 100644
--- a/app-arch/zoo/ChangeLog
+++ b/app-arch/zoo/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for app-arch/zoo
-# Copyright 2002-2005 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-arch/zoo/ChangeLog,v 1.13 2005/02/06 18:20:31 corsair Exp $
+# Copyright 2002-2006 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/app-arch/zoo/ChangeLog,v 1.14 2006/02/23 21:39:23 smithj Exp $
+
+*zoo-2.10-r1 (23 Feb 2006)
+
+  23 Feb 2006; <smithj@gentoo.org> +files/zoo-security-fix.patch,
+  -zoo-2.10.ebuild, +zoo-2.10-r1.ebuild:
+  bugzy #123782: patches security hole; x86 stable
 
   06 Feb 2005; Markus Rothe <corsair@gentoo.org> zoo-2.10.ebuild:
   Stable on ppc64
diff --git a/app-arch/zoo/Manifest b/app-arch/zoo/Manifest
index 568350eb8648..f0f63dbc6c62 100644
--- a/app-arch/zoo/Manifest
+++ b/app-arch/zoo/Manifest
@@ -1,15 +1,34 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA1
 
-MD5 77e4bc2dfd48083336f4d0ab74e60964 ChangeLog 1092
-MD5 5a83375f305f43e7455cf85cfe1975e4 files/digest-zoo-2.10 63
+MD5 c1226ffbd358f652bbfdf9473ea30050 ChangeLog 1278
+RMD160 15fac9a73734cae1cd9a63a3bdce5bb3a1a1aa9f ChangeLog 1278
+SHA256 667e607270fe2d09a6927688d9327dfeb97c71b0cab63c2925c5664f5be83317 ChangeLog 1278
+MD5 400d9539fd581b0fd40cbc4af373d973 files/digest-zoo-2.10 235
+RMD160 82604bdbc20d780cfd94ae73a48be2fce61e1017 files/digest-zoo-2.10 235
+SHA256 b4b78bee2420f59ac82de7a0177351e904fef9206b5f855009eed4b8dd54ce3b files/digest-zoo-2.10 235
+MD5 400d9539fd581b0fd40cbc4af373d973 files/digest-zoo-2.10-r1 235
+RMD160 82604bdbc20d780cfd94ae73a48be2fce61e1017 files/digest-zoo-2.10-r1 235
+SHA256 b4b78bee2420f59ac82de7a0177351e904fef9206b5f855009eed4b8dd54ce3b files/digest-zoo-2.10-r1 235
 MD5 77f04d131ad1df9d9f165be3df7bd48c files/zoo-2.10-gcc33-issues-fix.patch 22111
+RMD160 253767d992daaf5ec59fe8beb7994eb8d0241932 files/zoo-2.10-gcc33-issues-fix.patch 22111
+SHA256 bc22d536ecfe473256bb2fc71fba6cf2c3b3d2f205ae08cd11603272685960c4 files/zoo-2.10-gcc33-issues-fix.patch 22111
+MD5 678a28bb007c2daea8ae2f733f36ec06 files/zoo-security-fix.patch 557
+RMD160 e3e30d07bcf7aa86ec15ede24d04dfd35d92c894 files/zoo-security-fix.patch 557
+SHA256 b645e7f4e3d29cb65abcaeb87959ad3da83196a6c8c398dc3c8360c37238f674 files/zoo-security-fix.patch 557
 MD5 1652522405f5936eb29776ef8d5ffa5b metadata.xml 310
-MD5 03281ad0f12d83b2cb0ad1637646b387 zoo-2.10.ebuild 631
+RMD160 5b59fc85d3bafae0872cf691e5f032bac39ba539 metadata.xml 310
+SHA256 39e1273dd60bd3ceb460e9366a648c8fa21db1c292df4573e69f41cf6c84f6fc metadata.xml 310
+MD5 ac50b66170842099b6c57ccc9ba714fb zoo-2.10-r1.ebuild 733
+RMD160 80b679078e5ee5e57c774b42764f3f76b749d213 zoo-2.10-r1.ebuild 733
+SHA256 9c2f6c128e874ec638588a549dcc68678c3622a8d52e1e7a7a72997482063639 zoo-2.10-r1.ebuild 733
+MD5 7ede23b1b7f6d86887589ace0891c9ae zoo-2.10.ebuild 681
+RMD160 442b5025d3ea97b5bc09d25d9c518ae0b45f6672 zoo-2.10.ebuild 681
+SHA256 bcf3e145e722bd5a81839c1157cbdcea50e9983bb7ba5197452f1c6a2fe68198 zoo-2.10.ebuild 681
 -----BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.2 (GNU/Linux)
+Version: GnuPG v1.4.2.1 (GNU/Linux)
 
-iD8DBQFDi8U2gIKl8Uu19MoRAhLqAJ0XCZ60ZfS6X6G3m1y1AH7cdixg/wCfQq8u
-hC4Fy7BPB3OIJ3c1hUPQDJU=
-=XGLO
+iD8DBQFD/hsEl5AvwDPiUowRAnkuAJ0SYZPuxokIVmiFBTl3hC4vzfm9UACePjQ+
+SoNliyB+uiOPldOtcFCJBPs=
+=SW1N
 -----END PGP SIGNATURE-----
diff --git a/app-arch/zoo/files/digest-zoo-2.10 b/app-arch/zoo/files/digest-zoo-2.10
index dac46dcd22ca..ef7498d9a261 100644
--- a/app-arch/zoo/files/digest-zoo-2.10
+++ b/app-arch/zoo/files/digest-zoo-2.10
@@ -1 +1,3 @@
 MD5 70a0a785ecc8f7f747be1421e495d837 zoo-2.10pl1.tar.gz 172096
+RMD160 971d388b8cb29def1e4e31011463563e91c3d700 zoo-2.10pl1.tar.gz 172096
+SHA256 ad8d8fee5e524aca0e1e9a1e431c21cd59943d8373d5dffe4edca03a7e4284f4 zoo-2.10pl1.tar.gz 172096
diff --git a/app-arch/zoo/files/digest-zoo-2.10-r1 b/app-arch/zoo/files/digest-zoo-2.10-r1
new file mode 100644
index 000000000000..ef7498d9a261
--- /dev/null
+++ b/app-arch/zoo/files/digest-zoo-2.10-r1
@@ -0,0 +1,3 @@
+MD5 70a0a785ecc8f7f747be1421e495d837 zoo-2.10pl1.tar.gz 172096
+RMD160 971d388b8cb29def1e4e31011463563e91c3d700 zoo-2.10pl1.tar.gz 172096
+SHA256 ad8d8fee5e524aca0e1e9a1e431c21cd59943d8373d5dffe4edca03a7e4284f4 zoo-2.10pl1.tar.gz 172096
diff --git a/app-arch/zoo/files/zoo-security-fix.patch b/app-arch/zoo/files/zoo-security-fix.patch
new file mode 100644
index 000000000000..2cfd2c24b645
--- /dev/null
+++ b/app-arch/zoo/files/zoo-security-fix.patch
@@ -0,0 +1,19 @@
+--- misc.c.old	2006-02-23 15:10:26.000000000 -0500
++++ misc.c	2006-02-23 15:10:29.000000000 -0500
+@@ -135,11 +135,15 @@
+ char *fullpath (direntry)
+ struct direntry *direntry;
+ {
+-	static char result[PATHSIZE];
++	static char result[PATHSIZE+PATHSIZE+12]; // Room for enough space
+ 	combine (result,
+ 				direntry->dirlen != 0 ? direntry->dirname : "", 
+ 				(direntry->namlen != 0) ? direntry->lfname : direntry->fname
+ 			  );
++	if (strlen (result) >= PATHSIZE) {
++		prterror ('f', "Combined dirname and filename too long\n");
++	}
++
+ 	return (result);
+ }
+ 
diff --git a/app-arch/zoo/zoo-2.10-r1.ebuild b/app-arch/zoo/zoo-2.10-r1.ebuild
new file mode 100644
index 000000000000..47dbea696d44
--- /dev/null
+++ b/app-arch/zoo/zoo-2.10-r1.ebuild
@@ -0,0 +1,31 @@
+# Copyright 1999-2006 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/app-arch/zoo/zoo-2.10-r1.ebuild,v 1.1 2006/02/23 21:39:23 smithj Exp $
+
+inherit eutils
+
+DESCRIPTION="Manipulate archives of files in compressed form."
+SRC_URI="ftp://ftp.kiarchive.ru/pub/unix/arcers/${P}pl1.tar.gz"
+HOMEPAGE="ftp://ftp.kiarchive.ru/pub/unix/arcers"
+
+SLOT="0"
+LICENSE="zoo"
+IUSE=""
+KEYWORDS="~alpha ~amd64 ~hppa ~ppc ~ppc64 ~sparc x86"
+
+S=${WORKDIR}
+
+src_unpack() {
+	unpack ${P}pl1.tar.gz
+	epatch ${FILESDIR}/${P}-gcc33-issues-fix.patch
+	epatch ${FILESDIR}/${PN}-security-fix.patch
+}
+
+src_compile() {
+	emake linux || die
+}
+
+src_install() {
+	dobin zoo fiz
+	doman zoo.1 fiz.1
+}
diff --git a/app-arch/zoo/zoo-2.10.ebuild b/app-arch/zoo/zoo-2.10.ebuild
index 664163e33c04..85d0034cd922 100644
--- a/app-arch/zoo/zoo-2.10.ebuild
+++ b/app-arch/zoo/zoo-2.10.ebuild
@@ -1,11 +1,12 @@
-# Copyright 1999-2005 Gentoo Foundation
+# Copyright 1999-2006 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/app-arch/zoo/zoo-2.10.ebuild,v 1.22 2005/11/29 03:02:02 vapier Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-arch/zoo/zoo-2.10.ebuild,v 1.23 2006/02/23 21:39:23 smithj Exp $
 
 inherit eutils
 
 DESCRIPTION="Manipulate archives of files in compressed form."
 SRC_URI="ftp://ftp.kiarchive.ru/pub/unix/arcers/${P}pl1.tar.gz"
+HOMEPAGE="ftp://ftp.kiarchive.ru/pub/unix/arcers"
 
 SLOT="0"
 LICENSE="zoo"