Update of /cvsroot/fink/dists/10.3/unstable/main/finkinfo/text
In directory sc8-pr-cvs17:/tmp/cvs-serv22730/10.3/unstable/main/finkinfo/text
Modified Files:
ptex-base.info
Log Message:
SECURITY FIX: Buffer overflow in the open_sty function in mkind.c for makeindex.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0650
Index: ptex-base.info
===================================================================
RCS file: /cvsroot/fink/dists/10.3/unstable/main/finkinfo/text/ptex-base.info,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -d -r1.4 -r1.5
--- ptex-base.info 26 May 2007 12:01:12 -0000 1.4
+++ ptex-base.info 7 Jun 2007 01:37:49 -0000 1.5
@@ -3,7 +3,7 @@
Type: -nox (boolean)
Version: 3.1.9
# ptex-3.1.10-Beta3
-Revision: 58
+Revision: 59
GCC: 3.3
Description: ASCII publishing TeX
BuildDepends: <<
@@ -22,6 +22,8 @@
Tar2FilesRename: ptetex3-20070304:ptetex3
Source3: http://fink.sodan.ecc.u-tokyo.ac.jp/pkgdists/ptexenc-0.91.tar.gz
Source3-MD5: adeb23894fb201a004a98a94adc7503b
+Source4:
http://fink.sodan.ecc.u-tokyo.ac.jp/pkgdists/tetex-3.0-CVE-2007-0650.patch
+Source4-MD5: 8c2f3c2c87a5ec82869059df57af27c8
PatchFile: tetex.patch
PatchFile-MD5: b5bc9d386f66b9542970d63adcf8270d
PatchScript: <<
@@ -45,6 +47,9 @@
# extract pTeX src and apply patches of ptetex3
(cd ../ptetex3 && ./2extract-src.sh) || exit
+ # security fix ( http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0650 )
+ patch -p1 < ../tetex-3.0-CVE-2007-0650.patch
+
# fix forgotten nkf_close()
sed -i.bak 's|fclose(fp)|nkf_close(fp)|g' texk/mendexk/convert.c
sed -i.bak 's|\(lines=i;\)|\1 if (filename != NULL) nkf_close(fp);|g' \
@@ -80,6 +85,7 @@
sed 's|@PREFIX@|%p|g' < %{PatchFile} | sed 's|@PACKAGE@|%n-%v-%r|g' | patch
-p1
perl -pi -e "s|hardcode_direct=yes|hardcode_direct=no|" texk/configure
texk/kpathsea/configure utils/texinfo/configure
perl -pi -e 's,-flat_namespace -undefined suppress,-twolevel_namespace
-undefined error,g' texk/configure texk/kpathsea/configure
utils/texinfo/configure
+ perl -pi -e 's,\*\.obj\),*.obj | *.dSYM),' texk/configure
texk/kpathsea/configure utils/texinfo/configure
<<
SetCPPFLAGS:-I%p/lib/freetype219/include/freetype2 -I%p/lib/freetype219/include
SetLDFLAGS: -L%p/lib/freetype219/lib
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Fink-commits mailing list
Fink-commits@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fink-commits
