Revision bump fixing security issues, see bug #243228. Also fixes bug #202348 and includes some more QA fixes.

Package-Manager: portage-2.2_rc13/cvs/Linux 2.6.27-gentoo-r1 x86_64

5 files changed, 254 insertions, 2 deletions

diff --git a/app-text/enscript/ChangeLog b/app-text/enscript/ChangeLog
index ae9c7c4db0b8..da6cdd4dfe2f 100644
--- a/app-text/enscript/ChangeLog
+++ b/app-text/enscript/ChangeLog
@@ -1,6 +1,14 @@
 # ChangeLog for app-text/enscript
 # Copyright 2002-2008 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-text/enscript/ChangeLog,v 1.49 2008/03/04 03:07:51 jer Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-text/enscript/ChangeLog,v 1.50 2008/11/07 16:43:25 tgurr Exp $
+
+*enscript-1.6.4-r4 (07 Nov 2008)
+
+  07 Nov 2008; Timo Gurr <tgurr@gentoo.org>
+  +files/enscript-1.6.4-CVE-2008-3863-CVE-2008-4306.patch,
+  +files/enscript-1.6.4-config.patch, +enscript-1.6.4-r4.ebuild:
+  Revision bump fixing security issues, see bug #243228. Also fixes bug
+  #202348 and includes some more QA fixes.
 
   04 Mar 2008; Jeroen Roovers <jer@gentoo.org> enscript-1.6.4-r2.ebuild,
   enscript-1.6.4-r3.ebuild:
diff --git a/app-text/enscript/Manifest b/app-text/enscript/Manifest
index c1896c11626f..a343d6496940 100644
--- a/app-text/enscript/Manifest
+++ b/app-text/enscript/Manifest
@@ -2,11 +2,14 @@ AUX ebuild.st 6113 RMD160 9d3aac83d40a3fca3d1cd7707973f6fdb275898a SHA1 0ffb5db7
 AUX enscript-1.6.2-ruby.patch 661 RMD160 4d7069033a165587dbda17d2febe2ae84cc68af5 SHA1 3a10790c279e110115ec50ce70f2482a5cbd1bee SHA256 53bf90fa47841bcab742155d28f314ff5864c122b7f7d7fbb12177d43b3b60a7
 AUX enscript-1.6.3-language.patch 456 RMD160 5bc06db3e9d3ff441f2b97e94255d93d7b827e9c SHA1 1ce2fd699b26c5773c2e2dbf67d28d0741fb1cfe SHA256 b4830bb18f98749724f1382ef8c47124ae134c707af5303103fead2343710642
 AUX enscript-1.6.3-security.patch 5447 RMD160 d23a9a4eb478279bf56123d35fc7adc8fd292f30 SHA1 be2e586db2eaa58828556c9ecea710b9cd1df8b8 SHA256 bd9525903b9690f259f0bba8257a96b57681f03a65272d590796c796a8396052
+AUX enscript-1.6.4-CVE-2008-3863-CVE-2008-4306.patch 2799 RMD160 fbd77cf1cd861fb55f1df3bd311a9746f13ca91f SHA1 4443b1d66900a50b0b9a07a38d8bd7698f6c81be SHA256 6fcccba9d5447c5872fef3072d798cfcbdf7fc347e566126d0014d1b96f3f978
+AUX enscript-1.6.4-config.patch 3901 RMD160 45e5da8b141854b9568b565155247f3557f4c9c0 SHA1 c9a2ff14ed08c18c2a6f6c8fdea6691340a056dc SHA256 b49ea303616373ed2b72c329a7632bae589b62df18e0af149315a36977459188
 AUX enscript-1.6.4-ebuild.st.patch 332 RMD160 e4b03bed2014baab7a25b3d1a9cc2a2f1d6e6721 SHA1 586758634018a2d6b90cbfecc9cba001bb1952b3 SHA256 fae2d59559a61a3d2f0fb25695c3dc5eab917e1eb22af61844e85584281728a6
 AUX enscript-catmur.patch 604 RMD160 74dae25828a36028f877d7cec73f321f5354e4ad SHA1 572c173c8e93bb9c7eb0bae9acd750e7d86fc6f8 SHA256 23b2359b2ef4e9cf0f6b915fb9f326a0a9ebd3f43f4dcca5f4beb2602201d02c
 AUX ruby.st 3904 RMD160 a1e7228e4b508e73210d5054e4b66f8e6be4135f SHA1 8a8311ee734f1d3bc8baafb67f7cf7425e4469c9 SHA256 211d8a241d177c9c1c232eec514357b96b2d28554d63b72df3d72f79a41b25b0
 DIST enscript-1.6.4.tar.gz 1036734 RMD160 9050728f14500f0360c5a4e258cba0646694bfeb SHA1 9dd7128a508d4c9671659b9520028d12add50cfa SHA256 45299a4db47c9c08c3649d4f62b211ae79ef5143360c264a40371a728f6ad99b
 EBUILD enscript-1.6.4-r2.ebuild 1150 RMD160 f2137ec664ea5c9b3d6f3059a677ab10fc7fcc37 SHA1 b5c0b295e25301db1bfb99b331bae8ae0c794be5 SHA256 4d659fd0519cf75eacfd09749e15956259cef383e9a284afb559baa33519dc47
 EBUILD enscript-1.6.4-r3.ebuild 1260 RMD160 d9718968ec3b175ff5a777ff917de645e9e47a1b SHA1 2d99190c070a3cb89276056b4b0334ada5ad072b SHA256 dcbbb330957ee95d26e3ab24bef4bf3408b50367d9e7068c7b2b794130b54d26
-MISC ChangeLog 6083 RMD160 a93ea3129a0159ae7a87e15e74ebdcd3fc6072c0 SHA1 0e66885506229120c462e6c407f5b52e23d93ea9 SHA256 314a630c4195545ae94148932e5955a0be3b6834c0b2cd3d67da3eda0ff8831c
+EBUILD enscript-1.6.4-r4.ebuild 1561 RMD160 3ec216054e7600e64c38720817014bc3aca648dd SHA1 c52018a6aa87376ab2f3b86ee00053f210de23ba SHA256 ad83bba037ee586173f566e1bc4d8f1688c3df8b5163e93cfe3006fdfe7aec6c
+MISC ChangeLog 6403 RMD160 67e989c76979cdcdb7c951e2545c322a19242b4f SHA1 81b0395ea8108fa30a0563fd69a0f304aae4d866 SHA256 cf7a1c2aaadee9a7137566374b74c27f54d90b0a4e4d490ecac32375d15fc8e0
 MISC metadata.xml 161 RMD160 1e5b1e42553c8869b93c4a5448e9a2a2ed9fe525 SHA1 209c6a46e4cdd891980115e42ba419e3799f8088 SHA256 7c85e6739a71f5bb23e8de36c88677d772946e61f7285892f7554e37bd2bca76
diff --git a/app-text/enscript/enscript-1.6.4-r4.ebuild b/app-text/enscript/enscript-1.6.4-r4.ebuild
new file mode 100644
index 000000000000..bf9bf6ce1102
--- /dev/null
+++ b/app-text/enscript/enscript-1.6.4-r4.ebuild
@@ -0,0 +1,55 @@
+# Copyright 1999-2008 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/app-text/enscript/enscript-1.6.4-r4.ebuild,v 1.1 2008/11/07 16:43:25 tgurr Exp $
+
+inherit eutils
+
+DESCRIPTION="powerful text-to-postscript converter"
+SRC_URI="http://www.iki.fi/mtr/genscript/${P}.tar.gz"
+HOMEPAGE="http://www.gnu.org/software/enscript/enscript.html"
+
+KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~mips ~ppc ~ppc64 ~sparc ~x86 ~x86-fbsd"
+SLOT="0"
+LICENSE="GPL-2"
+IUSE="nls ruby"
+
+DEPEND="sys-devel/flex
+	sys-devel/bison
+	nls? ( sys-devel/gettext )"
+RDEPEND="nls? ( virtual/libintl )"
+
+src_unpack() {
+	unpack ${A}
+	cd "${S}"
+	epatch "${FILESDIR}"/enscript-1.6.3-security.patch
+	epatch "${FILESDIR}"/enscript-1.6.3-language.patch
+	epatch "${FILESDIR}"/enscript-catmur.patch
+	epatch "${FILESDIR}"/enscript-1.6.4-ebuild.st.patch
+	epatch "${FILESDIR}"/enscript-1.6.4-config.patch
+	epatch "${FILESDIR}"/enscript-1.6.4-CVE-2008-3863-CVE-2008-4306.patch
+	use ruby && epatch "${FILESDIR}"/enscript-1.6.2-ruby.patch
+}
+
+src_compile() {
+	unset CC
+	econf $(use_enable nls)
+	emake || die "emake failed"
+}
+
+src_install() {
+	emake DESTDIR="${D}" install || die "install failed"
+
+	dodoc AUTHORS ChangeLog NEWS README* THANKS TODO || die "dodoc failed"
+
+	insinto /usr/share/enscript/hl
+	doins "${FILESDIR}"/ebuild.st || die "doins ebuild.st failed"
+
+	if use ruby ; then
+		insinto /usr/share/enscript/hl
+		doins "${FILESDIR}"/ruby.st || die "doins ruby.st failed"
+	fi
+}
+
+pkg_postinst() {
+	elog "Now, customize /etc/enscript.cfg."
+}
diff --git a/app-text/enscript/files/enscript-1.6.4-CVE-2008-3863-CVE-2008-4306.patch b/app-text/enscript/files/enscript-1.6.4-CVE-2008-3863-CVE-2008-4306.patch
new file mode 100644
index 000000000000..2ee926b107af
--- /dev/null
+++ b/app-text/enscript/files/enscript-1.6.4-CVE-2008-3863-CVE-2008-4306.patch
@@ -0,0 +1,91 @@
+--- src/psgen.c
++++ src/psgen.c	2008-10-29 10:43:08.512598143 +0100
+@@ -24,6 +24,7 @@
+  * Boston, MA 02111-1307, USA.
+  */
+ 
++#include <limits.h>
+ #include "gsint.h"
+ 
+ /*
+@@ -124,7 +125,7 @@ struct gs_token_st
+ 	  double xscale;
+ 	  double yscale;
+ 	  int llx, lly, urx, ury; /* Bounding box. */
+-	  char filename[512];
++	  char filename[PATH_MAX];
+ 	  char *skipbuf;
+ 	  unsigned int skipbuf_len;
+ 	  unsigned int skipbuf_pos;
+@@ -135,11 +136,11 @@ struct gs_token_st
+       Color bgcolor;
+       struct
+ 	{
+-	  char name[512];
++	  char name[PATH_MAX];
+ 	  FontPoint size;
+ 	  InputEncoding encoding;
+ 	} font;
+-      char filename[512];
++      char filename[PATH_MAX];
+     } u;
+ };
+ 
+@@ -248,7 +249,7 @@ static int do_print = 1;
+ static int user_fontp = 0;
+ 
+ /* The user ^@font{}-defined font. */
+-static char user_font_name[256];
++static char user_font_name[PATH_MAX];
+ static FontPoint user_font_pt;
+ static InputEncoding user_font_encoding;
+ 
+@@ -978,7 +979,8 @@ large for page\n"),
+ 			FATAL ((stderr,
+ 				_("user font encoding can be only the system's default or `ps'")));
+ 
+-		      strcpy (user_font_name, token.u.font.name);
++		      memset  (user_font_name, 0, sizeof(user_font_name));
++		      strncpy (user_font_name, token.u.font.name, sizeof(user_font_name) - 1);
+ 		      user_font_pt.w = token.u.font.size.w;
+ 		      user_font_pt.h = token.u.font.size.h;
+ 		      user_font_encoding = token.u.font.encoding;
+@@ -1444,7 +1446,7 @@ read_special_escape (InputStream *is, To
+ 	  buf[i] = ch;
+ 	  if (i + 1 >= sizeof (buf))
+ 	    FATAL ((stderr, _("too long argument for %s escape:\n%.*s"),
+-		    escapes[i].name, i, buf));
++		    escapes[e].name, i, buf));
+ 	}
+       buf[i] = '\0';
+ 
+@@ -1452,7 +1454,8 @@ read_special_escape (InputStream *is, To
+       switch (escapes[e].escape)
+ 	{
+ 	case ESC_FONT:
+-	  strcpy (token->u.font.name, buf);
++	  memset  (token->u.font.name, 0, sizeof(token->u.font.name));
++	  strncpy (token->u.font.name, buf, sizeof(token->u.font.name) - 1);
+ 
+ 	  /* Check for the default font. */
+ 	  if (strcmp (token->u.font.name, "default") == 0)
+@@ -1465,7 +1468,8 @@ read_special_escape (InputStream *is, To
+ 		FATAL ((stderr, _("malformed font spec for ^@font escape: %s"),
+ 			token->u.font.name));
+ 
+-	      strcpy (token->u.font.name, cp);
++	      memset  (token->u.font.name, 0, sizeof(token->u.font.name));
++	      strncpy (token->u.font.name, cp, sizeof(token->u.font.name) - 1);
+ 	      xfree (cp);
+ 	    }
+ 	  token->type = tFONT;
+@@ -1544,7 +1548,8 @@ read_special_escape (InputStream *is, To
+ 	  break;
+ 
+ 	case ESC_SETFILENAME:
+-	  strcpy (token->u.filename, buf);
++	  memset  (token->u.filename, 0, sizeof(token->u.font.name));
++	  strncpy (token->u.filename, buf, sizeof(token->u.filename) - 1);
+ 	  token->type = tSETFILENAME;
+ 	  break;
+ 
diff --git a/app-text/enscript/files/enscript-1.6.4-config.patch b/app-text/enscript/files/enscript-1.6.4-config.patch
new file mode 100644
index 000000000000..5823a9db5e96
--- /dev/null
+++ b/app-text/enscript/files/enscript-1.6.4-config.patch
@@ -0,0 +1,95 @@
+--- enscript-1.6.4/afm/Makefile.am.config	2003-03-05 07:26:16.000000000 +0000
++++ enscript-1.6.4/afm/Makefile.am	2005-12-23 09:56:52.000000000 +0000
+@@ -36,11 +36,11 @@
+ EXTRA_DIST = font.map $(default_afm) $(public_fonts)
+ 
+ install-data-local:
+-	$(top_srcdir)/mkinstalldirs $(datadir)/enscript
+-	$(top_srcdir)/mkinstalldirs $(datadir)/enscript/afm
++	$(top_srcdir)/mkinstalldirs $(DESTDIR)/$(datadir)/enscript
++	$(top_srcdir)/mkinstalldirs $(DESTDIR)/$(datadir)/enscript/afm
+ 	for f in $(EXTRA_DIST); do \
+-	  $(INSTALL_DATA) $(srcdir)/$$f $(datadir)/enscript/afm/$$f; \
++	  $(INSTALL_DATA) $(srcdir)/$$f $(DESTDIR)/$(datadir)/enscript/afm/$$f; \
+ 	done
+ 
+ uninstall-local:
+-	rm -rf $(datadir)/enscript/afm
++	rm -rf $(DESTDIR)/$(datadir)/enscript/afm
+--- enscript-1.6.4/afm/Makefile.in.config	2003-03-05 07:40:06.000000000 +0000
++++ enscript-1.6.4/afm/Makefile.in	2005-12-23 09:56:52.000000000 +0000
+@@ -319,14 +319,14 @@
+ 
+ 
+ install-data-local:
+-	$(top_srcdir)/mkinstalldirs $(datadir)/enscript
+-	$(top_srcdir)/mkinstalldirs $(datadir)/enscript/afm
++	$(top_srcdir)/mkinstalldirs $(DESTDIR)/$(datadir)/enscript
++	$(top_srcdir)/mkinstalldirs $(DESTDIR)/$(datadir)/enscript/afm
+ 	for f in $(EXTRA_DIST); do \
+-	  $(INSTALL_DATA) $(srcdir)/$$f $(datadir)/enscript/afm/$$f; \
++	  $(INSTALL_DATA) $(srcdir)/$$f $(DESTDIR)/$(datadir)/enscript/afm/$$f; \
+ 	done
+ 
+ uninstall-local:
+-	rm -rf $(datadir)/enscript/afm
++	rm -rf $(DESTDIR)/$(datadir)/enscript/afm
+ # Tell versions [3.59,3.63) of GNU make to not export all variables.
+ # Otherwise a system limit (for SysV at least) may be exceeded.
+ .NOEXPORT:
+--- enscript-1.6.4/lib/Makefile.in.config	2003-03-05 07:40:07.000000000 +0000
++++ enscript-1.6.4/lib/Makefile.in	2005-12-23 09:56:52.000000000 +0000
+@@ -345,15 +345,16 @@
+ all-local: enscript.cfg
+ 
+ install-data-local: enscript.cfg
+-	$(top_srcdir)/mkinstalldirs $(sysconfdir)
+-	if test -r $(sysconfdir)/enscript.cfg; then \
+-	  cp $(sysconfdir)/enscript.cfg $(sysconfdir)/enscript.cfg.old; \
++	$(top_srcdir)/mkinstalldirs $(DESTDIR)$(sysconfdir)
++	if test -r $(DESTDIR)$(sysconfdir)/enscript.cfg; then \
++	  cp $(DESTDIR)$(sysconfdir)/enscript.cfg \
++		$(DESTDIR)$(sysconfdir)/enscript.cfg.old; \
+ 	else :; \
+ 	fi
+-	$(INSTALL_DATA) enscript.cfg $(sysconfdir)/enscript.cfg
++	$(INSTALL_DATA) enscript.cfg $(DESTDIR)$(sysconfdir)/enscript.cfg
+ 
+ uninstall-local:
+-	rm -f $(sysconfdir)/enscript.cfg
++	rm -f $(DESTDIR)$(sysconfdir)/enscript.cfg
+ 
+ enscript.cfg: $(srcdir)/enscript.cfg.in Makefile
+ 	sed 's%@DATADIR@%$(datadir)%g; s%@media@%@MEDIA@%g; s%@BINDIR@%$(bindir)%g; s%@spooler@%@SPOOLER@%g; s%@pslevel@%@PSLEVEL@%g' \
+--- enscript-1.6.4/states/hl/Makefile.am.config	2005-12-23 09:59:55.000000000 +0000
++++ enscript-1.6.4/states/hl/Makefile.am	2005-12-23 10:00:09.000000000 +0000
+@@ -45,10 +45,10 @@
+ EXTRA_DIST = $(states)
+ 
+ install-data-local:
+-	$(top_srcdir)/mkinstalldirs $(datadir)/enscript
+-	$(top_srcdir)/mkinstalldirs $(datadir)/enscript/hl
++	$(top_srcdir)/mkinstalldirs $(DESTDIR)/$(datadir)/enscript
++	$(top_srcdir)/mkinstalldirs $(DESTDIR)/$(datadir)/enscript/hl
+ 	for f in $(states); do \
+-	  $(INSTALL_DATA) $(srcdir)/$$f $(datadir)/enscript/hl/$$f; \
++	  $(INSTALL_DATA) $(srcdir)/$$f $(DESTDIR)/$(datadir)/enscript/hl/$$f; \
+ 	done
+ 
+ uninstall-local:
+--- enscript-1.6.4/states/hl/Makefile.in.config	2005-12-23 10:00:13.000000000 +0000
++++ enscript-1.6.4/states/hl/Makefile.in	2005-12-23 10:00:34.000000000 +0000
+@@ -330,10 +330,10 @@
+ 
+ 
+ install-data-local:
+-	$(top_srcdir)/mkinstalldirs $(datadir)/enscript
+-	$(top_srcdir)/mkinstalldirs $(datadir)/enscript/hl
++	$(top_srcdir)/mkinstalldirs $(DESTDIR)/$(datadir)/enscript
++	$(top_srcdir)/mkinstalldirs $(DESTDIR)/$(datadir)/enscript/hl
+ 	for f in $(states); do \
+-	  $(INSTALL_DATA) $(srcdir)/$$f $(datadir)/enscript/hl/$$f; \
++	  $(INSTALL_DATA) $(srcdir)/$$f $(DESTDIR)/$(datadir)/enscript/hl/$$f; \
+ 	done
+ 
+ uninstall-local: