Hello community, here is the log from the commit of package groff for openSUSE:Factory checked in at Thu Jun 9 12:25:14 CEST 2011.
-------- --- groff/groff.changes 2011-06-06 12:59:57.000000000 +0200 +++ /mounts/work_src_done/STABLE/groff/groff.changes 2011-06-09 11:45:16.000000000 +0200 @@ -1,0 +2,8 @@ +Wed Jun 8 09:06:44 UTC 2011 - [email protected] + +- fix bnc#698290: insecure temporary file handling in pdfroff + * groff-1.20.1-CVE-2009-5044.patch +- fix bnc#683857: Unicode characters in use properly + * change the soft hyphenation char to - in tty.tmac + +------------------------------------------------------------------- --- groff/gxditview.changes 2011-04-28 16:40:39.000000000 +0200 +++ /mounts/work_src_done/STABLE/groff/gxditview.changes 2011-06-09 11:45:17.000000000 +0200 @@ -1,0 +2,6 @@ +Wed Jun 8 09:52:07 UTC 2011 - [email protected] + +- fix #bnc#668254: xditview don't show tilde + * gxditview Supplements the groff and X11 libs + +------------------------------------------------------------------- calling whatdependson for head-i586 New: ---- groff-1.20.1-CVE-2009-5044.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ groff.spec ++++++ --- /var/tmp/diff_new_pack.sLTvHf/_old 2011-06-09 12:21:46.000000000 +0200 +++ /var/tmp/diff_new_pack.sLTvHf/_new 2011-06-09 12:21:46.000000000 +0200 @@ -22,7 +22,7 @@ License: BSD3c(or similar) ; GPLv2+ Group: Productivity/Publishing/Troff Version: 1.20.1 -Release: 6 +Release: 9 Summary: GNU troff Document Formatting System Url: http://www.gnu.org/software/groff/groff.html Source0: ftp://ftp.gnu.org/gnu/groff/groff-%{version}.tar.bz2 @@ -38,6 +38,7 @@ Patch2: groff-1.20.1-nroff-empty-LANGUAGE.patch Patch3: groff-1.20.1-groffer-libexecdir.patch Patch4: groff-1.20.1-deunicode.patch +Patch5: groff-1.20.1-CVE-2009-5044.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: gcc-c++ @@ -86,6 +87,7 @@ %patch2 -p1 -b .bnc540600 %patch3 -p1 -b .groffer-libexecdir %patch4 -p1 -b .deunicode +%patch5 -p1 -b .CVE-2009-5044 %build PATH=$PWD/src/roff/troff:$PWD/src/preproc/pic:$PWD/src/preproc/eqn:$PWD/src/preproc/tbl:$PWDsrc/preproc/refer:$PWD/src/preproc/soelim:$PATH ++++++ gxditview.spec ++++++ --- /var/tmp/diff_new_pack.sLTvHf/_old 2011-06-09 12:21:46.000000000 +0200 +++ /var/tmp/diff_new_pack.sLTvHf/_new 2011-06-09 12:21:46.000000000 +0200 @@ -22,7 +22,7 @@ Group: Productivity/Publishing/Troff AutoReqProv: on Version: 1.20.1 -Release: 3 +Release: 4 Summary: Ditroff Output Displayer for Groff Url: http://www.gnu.org/software/groff/groff.html Source0: ftp://ftp.gnu.org/gnu/groff/groff-%{version}.tar.bz2 @@ -36,6 +36,8 @@ BuildRequires: gcc-c++ BuildRequires: xorg-x11-devel Requires: groff +# bnc#668254 +Supplements: packageand(groff:xorg-x11-libX11) Conflicts: jgxdview Provides: gxdview = %{version}-%{release} Obsoletes: gxdview < %{version} ++++++ groff-1.20.1-CVE-2009-5044.patch ++++++ Index: groff-1.20.1/contrib/pdfmark/pdfroff.sh =================================================================== --- groff-1.20.1.orig/contrib/pdfmark/pdfroff.sh 2011-06-09 10:41:29.000000000 +0200 +++ groff-1.20.1/contrib/pdfmark/pdfroff.sh 2011-06-09 10:54:58.208448083 +0200 @@ -145,14 +145,16 @@ GROFF_TMPDIR=${WRKDIR} - WRKFILE=${GROFF_TMPDIR}/pdf$$.tmp + WRKFILE=`mktemp --tmpdir="${GROFF_TMPDIR}" pdfXXXXXXXXXX.tmp` # - REFCOPY=${GROFF_TMPDIR}/pdf$$.cmp - REFFILE=${GROFF_TMPDIR}/pdf$$.ref + REFCOPY=`mktemp --tmpdir="${GROFF_TMPDIR}" pdfXXXXXXXXXX.cmp` + REFFILE=`mktemp --tmpdir="${GROFF_TMPDIR}" pdfXXXXXXXXXX.ref` # CS_DATA="" - TC_DATA=${GROFF_TMPDIR}/pdf$$.tc - BD_DATA=${GROFF_TMPDIR}/pdf$$.ps + TC_DATA=`mktemp --tmpdir="${GROFF_TMPDIR}" pdfXXXXXXXXXX.tc` + BD_DATA=`mktemp --tmpdir="${GROFF_TMPDIR}" pdfXXXXXXXXXX.ps` + + STREAMFILE=`mktemp --tmpdir="${GROFF_TMPDIR}" pdfXXXXXXXXXX.in` # # Initialise 'groff' format control settings, # to discriminate table of contents and document body formatting passes. @@ -305,7 +307,7 @@ ;; --stylesheet) - STYLESHEET="$OPTARG" CS_DATA=${GROFF_TMPDIR}/pdf$$.cs + STYLESHEET="$OPTARG" CS_DATA=`mktemp --tmpdir="${GROFF_TMPDIR}" pdfXXXXXXXXXX.cs` ;; --no-toc-relocation) @@ -338,7 +340,7 @@ # so set up a mechanism to achieve this, for ALL 'groff' passes. # - | -i*) - STREAM="$CAT ${GROFF_TMPDIR}/pdf$$.in |" + STREAM="$CAT ${STREAMFILE} |" test "$1" = "-" && INPUT_FILES="$INPUT_FILES $1" \ || GROFF_STYLE="$GROFF_STYLE $1" ;; @@ -410,8 +412,8 @@ # or if no input files are specified, then we need to capture STDIN, # so we can replay it into each 'groff' processing pass. # - test -z "$INPUT_FILES" && STREAM="$CAT ${GROFF_TMPDIR}/pdf$$.in |" - test -n "$STREAM" && $CAT > ${GROFF_TMPDIR}/pdf$$.in + test -z "$INPUT_FILES" && STREAM="$CAT ${STREAMFILE} |" + test -n "$STREAM" && $CAT > ${STREAMFILE} # # Unless reference resolution is explicitly suppressed, # we initiate it by touching the cross reference dictionary file, ++++++ groff-1.20.1-deunicode.patch ++++++ --- /var/tmp/diff_new_pack.sLTvHf/_old 2011-06-09 12:21:46.000000000 +0200 +++ /var/tmp/diff_new_pack.sLTvHf/_new 2011-06-09 12:21:46.000000000 +0200 @@ -1,24 +1,17 @@ Index: groff-1.20.1/tmac/tty.tmac =================================================================== --- groff-1.20.1.orig/tmac/tty.tmac 2009-01-09 15:25:52.000000000 +0100 -+++ groff-1.20.1/tmac/tty.tmac 2011-06-06 12:03:56.471652140 +0200 -@@ -66,7 +66,7 @@ ++++ groff-1.20.1/tmac/tty.tmac 2011-06-08 11:06:28.611516653 +0200 +@@ -65,8 +65,11 @@ + .fchar \[.i] i .fchar \[bq] , . - .if '\*[.T]'utf8' \ --. mso unicode.tmac -+. mso deunicode.tmac +-.if '\*[.T]'utf8' \ ++.if '\*[.T]'utf8' \{\ + . mso unicode.tmac ++.\" use ascii hyphenation characters - bnc#68385 ++. shc - ++.\} . .\" color definitions .defcolor black rgb #000000 -Index: groff-1.20.1/tmac/deunicode.tmac -=================================================================== ---- /dev/null 1970-01-01 00:00:00.000000000 +0000 -+++ groff-1.20.1/tmac/deunicode.tmac 2011-06-06 12:05:47.272652051 +0200 -@@ -0,0 +1,6 @@ -+.\" deunicode.tmac -+.\" -+.char \[hy] - -+.char \[oq] ` -+.char \[cq] ' -+.\" EOF ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
