Non-Maintainer Commit: Applying patch for CVE-2008-5371, bug 250476.

Package-Manager: portage-2.2_rc33/cvs/Linux x86_64

4 files changed, 63 insertions, 2 deletions

diff --git a/app-misc/screenie/ChangeLog b/app-misc/screenie/ChangeLog
index b3b99ed8bd4d..6fc27472fec0 100644
--- a/app-misc/screenie/ChangeLog
+++ b/app-misc/screenie/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for app-misc/screenie
 # Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-misc/screenie/ChangeLog,v 1.16 2009/03/22 03:02:32 jmbsvicetto Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-misc/screenie/ChangeLog,v 1.17 2009/06/08 15:27:49 a3li Exp $
+
+*screenie-1.30.0-r1 (08 Jun 2009)
+
+  08 Jun 2009; Alex Legler <a3li@gentoo.org> +screenie-1.30.0-r1.ebuild,
+  +files/screenie-CVE-2008-5371.patch:
+  Non-maintainer commit: Applying patch for CVE-2008-5371, bug 250476.
 
   22 Mar 2009; Jorge Manuel B. S. Vicetto <jmbsvicetto@gentoo.org>
   metadata.xml:
diff --git a/app-misc/screenie/Manifest b/app-misc/screenie/Manifest
index b0432fcc528a..60bbf31d0e75 100644
--- a/app-misc/screenie/Manifest
+++ b/app-misc/screenie/Manifest
@@ -1,4 +1,6 @@
+AUX screenie-CVE-2008-5371.patch 636 RMD160 21063c2f90d6d32f74fdaec6c0cfdad5ffaa236e SHA1 0537cb38698ff7955e39bfe5a1539c7de05fde15 SHA256 998f8116aa36ed6b0db6c587ebe2931e8fcc50cf17cabfa80dc83754f31f6a21
 DIST screenie-1.30.0.tar.bz2 10068 RMD160 c919159b6a0a9c46fe786a622d7c81b474e9acbc SHA1 038d10e9b7be4ccd50a3be074b3acb33f72b0095 SHA256 60e141a2b036375d93f5edf6b29d5008ec54d9c8f501a21ffce17748bd64b96a
+EBUILD screenie-1.30.0-r1.ebuild 743 RMD160 092ea85f80c7d80ddb73b3b1fa4fa3f67b08f2dc SHA1 5268c300c8ea77b0cb5d939e71da96acd0178dce SHA256 503a1340706e8f724ab6a0f650b97a94c1c551771800edf8089480e2c0ff48e5
 EBUILD screenie-1.30.0.ebuild 645 RMD160 fdfcf9c9ac8d50483c4fc50f716d14195facb5aa SHA1 f494c216c82dfce240cc89284ae72b6b5d542162 SHA256 101c4174b6732c01709d7103331a63db5998326c3871104755e79e7f492dbb5b
-MISC ChangeLog 2213 RMD160 256c84dcb4382924c8ff499bbfc63db0736a988e SHA1 e5dd1ccf40f06f04f51494254b7b435ff15e41ca SHA256 67b7aeeb238f9de0241c2e858e481f47c6138c6fb739046dae60b65a51104ca5
+MISC ChangeLog 2425 RMD160 e22e1adcc50e77b374d4890b9076a377fd5126d6 SHA1 da296d10a4ecfc870d84a3548ee03fbc1e4be879 SHA256 ee4f087111c2b174fc81db545865e5df4f982e635eee44c06986dedf07fd316b
 MISC metadata.xml 735 RMD160 2be801cc2d609abdfb0da4b8efd250c9f7689fd9 SHA1 ee264131b435724dcc84c633fab9fe0179043718 SHA256 7c35d4213860ee29e715677dcbf4c33bb95b0242293add3676a87d8d90b5f30e
diff --git a/app-misc/screenie/files/screenie-CVE-2008-5371.patch b/app-misc/screenie/files/screenie-CVE-2008-5371.patch
new file mode 100644
index 000000000000..2bf8dbdc6b8a
--- /dev/null
+++ b/app-misc/screenie/files/screenie-CVE-2008-5371.patch
@@ -0,0 +1,26 @@
+Patch for bug 250476 (CVE-2008-5371), courtesy of nion@debian.org.
+
+diff -u screenie-1.30.0/screenie screenie-1.30.0/screenie
+--- screenie-1.30.0/screenie
++++ screenie-1.30.0/screenie
+@@ -19,7 +19,7 @@
+ # Foundation Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA
+ 
+ #global settings
+-TMPF=/tmp/.screenie.$$
++TMPF=$(mktemp -t skreenie.XXXXXX || exit 1)
+ ACTIVE_SCREENS="screen \-ls | awk '/tached/ { print \$1}' | sort"
+ i=0
+ e=0
+@@ -59,9 +59,9 @@
+ esac
+ 
+ #cleanup temp files
+-if test -f /tmp/.screenie*
++if test -f $TMPF
+   then
+-    rm /tmp/.screenie* >/dev/null 2>&1   
++    rm $TMPF >/dev/null 2>&1   
+ fi
+ 
+ while :
diff --git a/app-misc/screenie/screenie-1.30.0-r1.ebuild b/app-misc/screenie/screenie-1.30.0-r1.ebuild
new file mode 100644
index 000000000000..cfab17ef48ae
--- /dev/null
+++ b/app-misc/screenie/screenie-1.30.0-r1.ebuild
@@ -0,0 +1,27 @@
+# Copyright 1999-2009 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/app-misc/screenie/screenie-1.30.0-r1.ebuild,v 1.1 2009/06/08 15:27:49 a3li Exp $
+
+EAPI="2"
+
+inherit eutils
+
+DESCRIPTION="screen(1) frontend that is designed to be a session handler"
+HOMEPAGE="http://pubwww.hsz-t.ch/~mgloor/screenie.html"
+SRC_URI="http://pubwww.hsz-t.ch/~mgloor/data/${P}.tar.bz2"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~hppa ~ia64 ~sparc ~x86 ~x86-fbsd"
+IUSE=""
+
+RDEPEND="app-misc/screen"
+
+src_prepare() {
+	epatch "${FILESDIR}/${PN}-CVE-2008-5371.patch"
+}
+
+src_install() {
+	dobin screenie || die "dobin failed"
+	dodoc AUTHORS ChangeLog INSTALL README TODO || die "dodoc failed"
+}