diff options
author | Fabian Groffen <grobian@gentoo.org> | 2015-04-23 07:44:50 +0000 |
---|---|---|
committer | Fabian Groffen <grobian@gentoo.org> | 2015-04-23 07:44:50 +0000 |
commit | 43a38cdaa3fca9b0cdb08e6c4407f6e84379aa55 (patch) | |
tree | e3b65b42b5603a32e3e3afb49261b7f89cb7aae7 /mail-client | |
parent | Version bump. Install man pages for utils (bug #516810). Include cacert.org C... (diff) | |
download | gentoo-2-43a38cdaa3fca9b0cdb08e6c4407f6e84379aa55.tar.gz gentoo-2-43a38cdaa3fca9b0cdb08e6c4407f6e84379aa55.tar.bz2 gentoo-2-43a38cdaa3fca9b0cdb08e6c4407f6e84379aa55.zip |
Drop vulnerable version
(Portage version: 2.2.14-prefix/cvs/SunOS i386, signed Manifest commit with key 0x5F75F607C5C74E89)
Diffstat (limited to 'mail-client')
-rw-r--r-- | mail-client/mutt/ChangeLog | 6 | ||||
-rw-r--r-- | mail-client/mutt/files/mutt-1.5.22-cve-2014-0567.patch | 20 | ||||
-rw-r--r-- | mail-client/mutt/mutt-1.5.22-r3.ebuild | 252 |
3 files changed, 5 insertions, 273 deletions
diff --git a/mail-client/mutt/ChangeLog b/mail-client/mutt/ChangeLog index bbe7abc0b083..3682f6ddfddd 100644 --- a/mail-client/mutt/ChangeLog +++ b/mail-client/mutt/ChangeLog @@ -1,6 +1,10 @@ # ChangeLog for mail-client/mutt # Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/mail-client/mutt/ChangeLog,v 1.283 2015/03/30 10:02:38 ago Exp $ +# $Header: /var/cvsroot/gentoo-x86/mail-client/mutt/ChangeLog,v 1.284 2015/04/23 07:44:49 grobian Exp $ + + 23 Apr 2015; Fabian Groffen <grobian@gentoo.org> + -files/mutt-1.5.22-cve-2014-0567.patch, -mutt-1.5.22-r3.ebuild: + Drop vulnerable version 30 Mar 2015; Agostino Sarubbo <ago@gentoo.org> mutt-1.5.23-r5.ebuild: Stable for alpha, wrt bug #530842 diff --git a/mail-client/mutt/files/mutt-1.5.22-cve-2014-0567.patch b/mail-client/mutt/files/mutt-1.5.22-cve-2014-0567.patch deleted file mode 100644 index 50373f1331b9..000000000000 --- a/mail-client/mutt/files/mutt-1.5.22-cve-2014-0567.patch +++ /dev/null @@ -1,20 +0,0 @@ -# HG changeset patch -# User Michael Elkins <me@sigpipe.org> -# Date 1394556009 25200 -# Tue Mar 11 09:40:09 2014 -0700 -# Branch stable -# Node ID 9bf7593e3c08cc32bd69595d5c1cac75c29ba09d -# Parent 3d5e23a66a1a179d9be25767e634174905ae2bdb -Fix buffer overrun caused by not updating a string length after address expansion. - -diff --git a/copy.c b/copy.c ---- a/copy.c -+++ b/copy.c -@@ -254,6 +254,7 @@ - { - if (!address_header_decode (&this_one)) - rfc2047_decode (&this_one); -+ this_one_len = mutt_strlen (this_one); - } - - if (!headers[x]) diff --git a/mail-client/mutt/mutt-1.5.22-r3.ebuild b/mail-client/mutt/mutt-1.5.22-r3.ebuild deleted file mode 100644 index e77844e11ee2..000000000000 --- a/mail-client/mutt/mutt-1.5.22-r3.ebuild +++ /dev/null @@ -1,252 +0,0 @@ -# Copyright 1999-2015 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/mail-client/mutt/mutt-1.5.22-r3.ebuild,v 1.12 2015/02/24 10:15:47 grobian Exp $ - -EAPI="5" - -inherit eutils flag-o-matic autotools - -PATCHSET_REV="-r2" - -DESCRIPTION="A small but very powerful text-based mail client" -HOMEPAGE="http://www.mutt.org/" -SRC_URI="ftp://ftp.mutt.org/mutt/devel/${P}.tar.gz - mirror://gentoo/${P}-gentoo-patches${PATCHSET_REV}.tar.bz2 - http://dev.gentoo.org/~grobian/distfiles/${P}-gentoo-patches${PATCHSET_REV}.tar.bz2" -IUSE="berkdb crypt debug doc gdbm gnutls gpg idn imap kerberos mbox nls nntp pop qdbm sasl selinux sidebar slang smime smtp ssl tokyocabinet" -SLOT="0" -LICENSE="GPL-2" -KEYWORDS="alpha amd64 ~arm hppa ia64 ~mips ppc ppc64 sparc x86 ~x86-fbsd ~x64-freebsd ~x86-freebsd ~x86-interix ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris" -CDEPEND=" - app-misc/mime-types - nls? ( virtual/libintl ) - tokyocabinet? ( dev-db/tokyocabinet ) - !tokyocabinet? ( - qdbm? ( dev-db/qdbm ) - !qdbm? ( - gdbm? ( sys-libs/gdbm ) - !gdbm? ( berkdb? ( >=sys-libs/db-4 ) ) - ) - ) - imap? ( - gnutls? ( >=net-libs/gnutls-1.0.17 ) - !gnutls? ( ssl? ( >=dev-libs/openssl-0.9.6 ) ) - sasl? ( >=dev-libs/cyrus-sasl-2 ) - ) - kerberos? ( virtual/krb5 ) - pop? ( - gnutls? ( >=net-libs/gnutls-1.0.17 ) - !gnutls? ( ssl? ( >=dev-libs/openssl-0.9.6 ) ) - sasl? ( >=dev-libs/cyrus-sasl-2 ) - ) - smtp? ( - gnutls? ( >=net-libs/gnutls-1.0.17 ) - !gnutls? ( ssl? ( >=dev-libs/openssl-0.9.6 ) ) - sasl? ( >=dev-libs/cyrus-sasl-2 ) - ) - idn? ( net-dns/libidn ) - gpg? ( >=app-crypt/gpgme-0.9.0 ) - smime? ( >=dev-libs/openssl-0.9.6 ) - slang? ( sys-libs/slang ) - !slang? ( >=sys-libs/ncurses-5.2 ) -" -DEPEND="${CDEPEND} - net-mail/mailbase - doc? ( - dev-libs/libxml2 - dev-libs/libxslt - app-text/docbook-xsl-stylesheets - || ( www-client/lynx www-client/w3m www-client/elinks ) - )" -RDEPEND="${CDEPEND} - selinux? ( sec-policy/selinux-mutt ) -" - -PATCHDIR="${WORKDIR}"/${P}-gentoo-patches${PATCHSET_REV} - -src_prepare() { - # Post-release hot-fixes grabbed from HG, this is what all following - # patches are based on in my Mercurial patchqueue (mq). - # If you ever take over or need to modify patches here, just check - # out the gentoo branch(es) of Gentoo's Mutt Mercurial clone, and - # the patchqueue as it'll save you a lot of work. - # http://prefix.gentooexperimental.org:8000/mutt/ - # http://prefix.gentooexperimental.org:8000/mutt-patches/ - for rev in $(eval echo {0..${PR#r}}) ; do - local revpatch="${PATCHDIR}"/mutt-gentoo-${PV}-r${rev}.patch - [[ -e ${revpatch} ]] && \ - epatch "${revpatch}" - done - # fix compilation with ncurses[tinfo], #459260 - epatch "${PATCHDIR}"/ncurses-tinfo.patch - # fix buffer overflow issut, #504462 - epatch "${FILESDIR}"/${P}-cve-2014-0567.patch - - # this patch is non-generic and only works because we use a sysconfdir - # different from the one used by the mailbase ebuild - use prefix && epatch "${PATCHDIR}"/prefix-mailcap.patch - - # must have fixes to compile or behave correctly, upstream - # ignores, disagrees or simply doesn't respond/apply - epatch "${PATCHDIR}"/bdb-prefix.patch # fix bdb detection - # same category, but functional bits - epatch "${PATCHDIR}"/dont-reveal-bbc.patch - - # the big feature patches that upstream doesn't want to include, but - # nearly every distro has due to their usefulness - for p in "${PATCHDIR}"/[0-9][0-9]-*.patch ; do - epatch "${p}" - done - - # we conditionalise this one, simply because it has considerable - # impact on the code - if use sidebar ; then - epatch "${PATCHDIR}"/sidebar.patch - epatch "${PATCHDIR}"/sidebar-utf8.patch - epatch "${PATCHDIR}"/sidebar-dotpathsep.patch - fi - - local upatches= - # allow user patches - epatch_user && upatches=" with user patches" - - # patch version string for bug reports - sed -i -e 's/"Mutt %s (%s)"/"Mutt %s (%s, Gentoo '"${PVR}${upatches}"')"/' \ - muttlib.c || die "failed patching in Gentoo version" - - # many patches touch the buildsystem, we always need this - AT_M4DIR="m4" eautoreconf - - # the configure script contains some "cleverness" whether or not to setgid - # the dotlock program, resulting in bugs like #278332 - sed -i -e 's/@DOTLOCK_GROUP@//' \ - Makefile.in || die "sed failed" - - # don't just build documentation (lengthy process, with big dependencies) - if use !doc ; then - sed -i -e '/SUBDIRS =/s/doc//' Makefile.in || die - fi -} - -src_configure() { - local myconf=" - $(use_enable crypt pgp) \ - $(use_enable debug) \ - $(use_enable gpg gpgme) \ - $(use_enable imap) \ - $(use_enable nls) \ - $(use_enable nntp) \ - $(use_enable pop) \ - $(use_enable smime) \ - $(use_enable smtp) \ - $(use_with idn) \ - $(use_with kerberos gss) \ - $(use_with !nntp mixmaster) \ - $(use slang && echo --with-slang) \ - --enable-compressed \ - --enable-external-dotlock \ - --enable-nfs-fix \ - --sysconfdir=${EPREFIX}/etc/${PN} \ - --with-curses \ - --with-docdir=${EPREFIX}/usr/share/doc/${PN}-${PVR} \ - --with-regex \ - --with-exec-shell=${EPREFIX}/bin/sh" - - case $CHOST in - *-solaris*) - # Solaris has no flock in the standard headers - myconf="${myconf} --enable-fcntl --disable-flock" - ;; - *) - myconf="${myconf} --disable-fcntl --enable-flock" - ;; - esac - - # mutt prioritizes gdbm over bdb, so we will too. - # hcache feature requires at least one database is in USE. - if use tokyocabinet; then - myconf="${myconf} --enable-hcache \ - --with-tokyocabinet --without-qdbm --without-gdbm --without-bdb" - elif use qdbm; then - myconf="${myconf} --enable-hcache \ - --without-tokyocabinet --with-qdbm --without-gdbm --without-bdb" - elif use gdbm ; then - myconf="${myconf} --enable-hcache \ - --without-tokyocabinet --without-qdbm --with-gdbm --without-bdb" - elif use berkdb; then - myconf="${myconf} --enable-hcache \ - --without-tokyocabinet --without-qdbm --without-gdbm --with-bdb" - else - myconf="${myconf} --disable-hcache \ - --without-tokyocabinet --without-qdbm --without-gdbm --without-bdb" - fi - - # there's no need for gnutls, ssl or sasl without socket support - if use pop || use imap || use smtp ; then - if use gnutls; then - myconf="${myconf} --with-gnutls" - elif use ssl; then - myconf="${myconf} --with-ssl" - fi - # not sure if this should be mutually exclusive with the other two - myconf="${myconf} $(use_with sasl)" - else - myconf="${myconf} --without-gnutls --without-ssl --without-sasl" - fi - - if use mbox; then - myconf="${myconf} --with-mailpath=${EPREFIX}/var/spool/mail" - else - myconf="${myconf} --with-homespool=Maildir" - fi - - econf ${myconf} || die "configure failed" -} - -src_install() { - emake DESTDIR="${D}" install || die "install failed" - if use mbox; then - insinto /etc/mutt - newins "${FILESDIR}"/Muttrc.mbox Muttrc - else - insinto /etc/mutt - doins "${FILESDIR}"/Muttrc - fi - - # A newer file is provided by app-misc/mime-types. So we link it. - rm "${ED}"/etc/${PN}/mime.types - dosym /etc/mime.types /etc/${PN}/mime.types - - # A man-page is always handy, so fake one - if use !doc; then - emake -C doc DESTDIR="${D}" muttrc.man || die - # make the fake slightly better, bug #413405 - sed -e 's#@docdir@/manual.txt#http://www.mutt.org/doc/devel/manual.html#' \ - -e 's#in @docdir@,#at http://www.mutt.org/,#' \ - -e "s#@sysconfdir@#${EPREFIX}/etc/${PN}#" \ - -e "s#@bindir@#${EPREFIX}/usr/bin#" \ - doc/mutt.man > mutt.1 - cp doc/muttbug.man flea.1 - cp doc/muttrc.man muttrc.5 - doman mutt.1 flea.1 muttrc.5 - else - # nuke manpages that should be provided by an MTA, bug #177605 - rm "${ED}"/usr/share/man/man5/{mbox,mmdf}.5 \ - || ewarn "failed to remove files, please file a bug" - fi - - if use !prefix ; then - fowners root:mail /usr/bin/mutt_dotlock - fperms g+s /usr/bin/mutt_dotlock - fi - - dodoc BEWARE COPYRIGHT ChangeLog NEWS OPS* PATCHES README* TODO VERSION -} - -pkg_postinst() { - echo - elog "If you are new to mutt you may want to take a look at" - elog "the Gentoo QuickStart Guide to Mutt E-Mail:" - elog " https://wiki.gentoo.org/wiki/Mutt" - echo -} |