This is an automated email from the git hooks/post-receive script. gregoa pushed a commit to branch master in repository libclipboard-perl.
commit 6474034d157a5c0609f46c9311e6db8b0d346fd9 Author: gregor herrmann <gre...@debian.org> Date: Sat Aug 13 03:31:04 2016 +0200 patches --- debian/patches/hurd.patch | 18 ++++++++++++++++++ debian/patches/insecure-tempfile.patch | 23 +++++++++++++++++++++++ debian/patches/sensible.patch | 28 ++++++++++++++++++++++++++++ debian/patches/series | 3 +++ 4 files changed, 72 insertions(+) diff --git a/debian/patches/hurd.patch b/debian/patches/hurd.patch new file mode 100644 index 0000000..5dd985e --- /dev/null +++ b/debian/patches/hurd.patch @@ -0,0 +1,18 @@ +Description: Add support for Debian GNU/Hurd. + $^O is 'gnu' there. +Origin: vendor +Forwarded: not-yet +Author: gregor herrmann <gre...@debian.org> +Last-Update: 2016-08-13 + +--- a/lib/Clipboard.pm ++++ b/lib/Clipboard.pm +@@ -15,7 +15,7 @@ + # example, cygwin doesn't count as Unix here, because it will + # use the Win32 clipboard.) + bind_os(Xclip => qw(linux bsd$ aix bsdos dec_osf dgux +- dynixptx hpux irix dragonfly machten next os2 sco_sv solaris sunos ++ dynixptx gnu hpux irix dragonfly machten next os2 sco_sv solaris sunos + svr4 svr5 unicos unicosmk)), + bind_os(MacPasteboard => qw(darwin)), + bind_os(Win32 => qw(mswin ^win cygwin)), diff --git a/debian/patches/insecure-tempfile.patch b/debian/patches/insecure-tempfile.patch new file mode 100644 index 0000000..d483920 --- /dev/null +++ b/debian/patches/insecure-tempfile.patch @@ -0,0 +1,23 @@ +Description: Fix insecure use of temporary files. + This is CVE-2014-5509. +Origin: vendor +Bug: https://rt.cpan.org/Public/Bug/Display.html?id=98435 +Forwarded: not yet +Author: gregor herrmann <gre...@debian.org> +Last-Update: 2016-08-13 + +--- a/scripts/clipedit ++++ b/scripts/clipedit +@@ -1,10 +1,11 @@ + #!/usr/bin/perl + use strict; + use Clipboard; ++use File::Temp qw( tempfile ); + + my $orig = Clipboard->paste; + +-my $tmpfilename = "/tmp/clipedit$$"; ++my ($tmpfile, $tmpfilename) = tempfile(); + open my $tmpfile, ">$tmpfilename" or die "Failure to open $tmpfilename: $!"; + print $tmpfile $orig; + close $tmpfile; diff --git a/debian/patches/sensible.patch b/debian/patches/sensible.patch new file mode 100644 index 0000000..1b46d9b --- /dev/null +++ b/debian/patches/sensible.patch @@ -0,0 +1,28 @@ +Description: use sensible-{browser,editor} +Origin: vendor +Forwarded: not needed +Author: gregor herrmann <gre...@debian.org> +Last-Update: 2016-08-13 + +--- a/scripts/clipbrowse ++++ b/scripts/clipbrowse +@@ -1,7 +1,7 @@ + #!/usr/bin/perl -w + use strict; + use Clipboard; +-my $browser = $ENV{BROWSER} || 'chromium-browser "%s"'; ++my $browser = $ENV{BROWSER} || 'sensible-browser %s'; + $browser .= ' %s' unless $browser =~ /%s/; + my $query = Clipboard->paste; + $query =~ s/['"]/\\$&/; +--- a/scripts/clipedit ++++ b/scripts/clipedit +@@ -10,7 +10,7 @@ + print $tmpfile $orig; + close $tmpfile; + +-my $ed = $ENV{VISUAL} || $ENV{EDITOR} || 'vim'; ++my $ed = $ENV{VISUAL} || $ENV{EDITOR} || 'sensible-editor'; + system($ed, $tmpfilename); + + open $tmpfile, $tmpfilename or die "Failure to open $tmpfilename: $!"; diff --git a/debian/patches/series b/debian/patches/series new file mode 100644 index 0000000..0f15e50 --- /dev/null +++ b/debian/patches/series @@ -0,0 +1,3 @@ +insecure-tempfile.patch +hurd.patch +sensible.patch -- Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libclipboard-perl.git _______________________________________________ Pkg-perl-cvs-commits mailing list Pkg-perl-cvs-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-perl-cvs-commits