add patch for security bug #189249

Package-Manager: portage-2.1.3.16

5 files changed, 119 insertions, 15 deletions

diff --git a/app-misc/tomboy/ChangeLog b/app-misc/tomboy/ChangeLog
index c5c4e4124cb2..3da60d74a774 100644
--- a/app-misc/tomboy/ChangeLog
+++ b/app-misc/tomboy/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for app-misc/tomboy
 # Copyright 1999-2007 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-misc/tomboy/ChangeLog,v 1.52 2007/10/17 22:55:14 eva Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-misc/tomboy/ChangeLog,v 1.53 2007/11/04 01:30:06 compnerd Exp $
+
+*tomboy-0.8.1-r1 (04 Nov 2007)
+
+  04 Nov 2007; Saleem Abdulrasool <compnerd@gentoo.org>
+  +files/tomboy-0.8.1-insecure-ldpath.patch, +tomboy-0.8.1-r1.ebuild:
+  Add patch for security bug #189249
 
   17 Oct 2007; Gilles Dartiguelongue <eva@gentoo.org> tomboy-0.6.3.ebuild:
   fix quoting
diff --git a/app-misc/tomboy/Manifest b/app-misc/tomboy/Manifest
index 3d6d2a7be233..fd2a9cf36ebc 100644
--- a/app-misc/tomboy/Manifest
+++ b/app-misc/tomboy/Manifest
@@ -1,10 +1,11 @@
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA1
-
 AUX tomboy-0.6.3-assembly-attribute.patch 364 RMD160 5bf2e5b1c3f62b9d4b928d1320af70a60c07ede6 SHA1 9cbe83b2380fa8193eb74b6bc2d643c6483d2d66 SHA256 5a9f6b3991e860e6a2af26dee56e42f1f4b0823cfa040d48d2d02b1d2c15e754
 MD5 faa949ad1c7c70070e6013aeaff3f5cb files/tomboy-0.6.3-assembly-attribute.patch 364
 RMD160 5bf2e5b1c3f62b9d4b928d1320af70a60c07ede6 files/tomboy-0.6.3-assembly-attribute.patch 364
 SHA256 5a9f6b3991e860e6a2af26dee56e42f1f4b0823cfa040d48d2d02b1d2c15e754 files/tomboy-0.6.3-assembly-attribute.patch 364
+AUX tomboy-0.8.1-insecure-ldpath.patch 1442 RMD160 bd28d17a16e144d64628b51d9101f74f8e59a2ce SHA1 8faa1e0ef1dadb9847cc44c58fd411c22847fe2b SHA256 feeb4caf13e562a3cfae8b437024eb07a35165684c7aac185722b6d88e3d5f9d
+MD5 fa501ff77bc92b63e9dab8fe5ff8cab8 files/tomboy-0.8.1-insecure-ldpath.patch 1442
+RMD160 bd28d17a16e144d64628b51d9101f74f8e59a2ce files/tomboy-0.8.1-insecure-ldpath.patch 1442
+SHA256 feeb4caf13e562a3cfae8b437024eb07a35165684c7aac185722b6d88e3d5f9d files/tomboy-0.8.1-insecure-ldpath.patch 1442
 DIST tomboy-0.2.2.tar.gz 416228 RMD160 273ce637b330ddef81581d81db466f48d579e8c8 SHA1 95a1e40dfcc3cdca1b0417b8d7f4437bba6e3c47 SHA256 cccee75582a5b16edb85c34bd08364003bac3866970501fa3e583ac25a0826b4
 DIST tomboy-0.6.3.tar.bz2 1486273 RMD160 d3d208c186c871294a2be081fa5f48558d179a06 SHA1 789eae42b3b92f03278c0d6489a299a7fcfb63e4 SHA256 d76e45fd38e66de2f18a431420cfffab2a234b01da7db6f14fd9280f0afd2c2c
 DIST tomboy-0.8.0.tar.bz2 1863811 RMD160 753da31304f66a5d16173a480f95f1bf630838c6 SHA1 1501aee39238dc922e990920af1020bbc9c3d041 SHA256 45cd1e66b699e3e021db3138aa11e7dc5fe9a05f20ccb290d3e04bb35fbbc958
@@ -21,14 +22,18 @@ EBUILD tomboy-0.8.0.ebuild 1563 RMD160 71b6c851bbaa0dc7e16f4fa5e6a9cba261072b1b
 MD5 8d881516d29b0dccade2b7fe2c5cfe89 tomboy-0.8.0.ebuild 1563
 RMD160 71b6c851bbaa0dc7e16f4fa5e6a9cba261072b1b tomboy-0.8.0.ebuild 1563
 SHA256 aa897a4cd7a14898f27f6a9985faf5d775ca939c3f72da1be5b150e1a0277dd0 tomboy-0.8.0.ebuild 1563
+EBUILD tomboy-0.8.1-r1.ebuild 1690 RMD160 a8f30af87c25e3d60734b4def504f0bfdb5a146e SHA1 427323e674b8b3993b363798d41fe2a7e31c8f7f SHA256 f6259bcb9eaabf9bef305120691214a6ca097f399bca1a4075b8c662a7311be2
+MD5 dda47ea02500a9cf21503ed60f32aa6a tomboy-0.8.1-r1.ebuild 1690
+RMD160 a8f30af87c25e3d60734b4def504f0bfdb5a146e tomboy-0.8.1-r1.ebuild 1690
+SHA256 f6259bcb9eaabf9bef305120691214a6ca097f399bca1a4075b8c662a7311be2 tomboy-0.8.1-r1.ebuild 1690
 EBUILD tomboy-0.8.1.ebuild 1558 RMD160 874c859dfeb4a883e5aa9665a98b1ae7def29214 SHA1 74145d121603081903ffed3092fd95c18d7b922a SHA256 de0c85378e6c122ba7796c2598a68b0be962881ab121114f765015389c942a78
 MD5 51df715a80f6c73ae4402d72fd766f37 tomboy-0.8.1.ebuild 1558
 RMD160 874c859dfeb4a883e5aa9665a98b1ae7def29214 tomboy-0.8.1.ebuild 1558
 SHA256 de0c85378e6c122ba7796c2598a68b0be962881ab121114f765015389c942a78 tomboy-0.8.1.ebuild 1558
-MISC ChangeLog 8356 RMD160 c9529a1012b9bf079e20bc5516297b668bde2ca6 SHA1 6202b10787434227026c1bd23cc2f360767c033a SHA256 83cb744c95f2061e0c2a5fac81f4c5d1c560ba96d21f18f331d23f4ff4d0ddce
-MD5 510627ea7fd4cf1a4f250340fa610d72 ChangeLog 8356
-RMD160 c9529a1012b9bf079e20bc5516297b668bde2ca6 ChangeLog 8356
-SHA256 83cb744c95f2061e0c2a5fac81f4c5d1c560ba96d21f18f331d23f4ff4d0ddce ChangeLog 8356
+MISC ChangeLog 8557 RMD160 b6f02fecc1a302e35159fc23a1c38e36131b462e SHA1 da7d86e471f9806f41907349fb732933c5e268f6 SHA256 a2ca176f63226550086eafe63d03315cd7249c86c29c989767409ad65c632ce4
+MD5 3756d69cdf1d650a342aca48663a81ba ChangeLog 8557
+RMD160 b6f02fecc1a302e35159fc23a1c38e36131b462e ChangeLog 8557
+SHA256 a2ca176f63226550086eafe63d03315cd7249c86c29c989767409ad65c632ce4 ChangeLog 8557
 MISC metadata.xml 285 RMD160 726ba117bc09bd9825760c705ae189dc3172873e SHA1 a690734f6e34a264a95da9d21ac722dc24674b0b SHA256 ccec79146b3cac75d29d81fdedcb960ea8524353aae579ee74fa6fcc43e0cf5c
 MD5 6c2ff196873a1b9cee9cefc22b62eea4 metadata.xml 285
 RMD160 726ba117bc09bd9825760c705ae189dc3172873e metadata.xml 285
@@ -45,10 +50,6 @@ SHA256 40db7406ec7f886131eda80d02a9d9714b5ce5ec6f20f111bc5c2038fa89fee4 files/di
 MD5 37d202bce9ee6eccdd2432b3cf1df911 files/digest-tomboy-0.8.1 244
 RMD160 42b180542d2c5775e844573e02c3b6e63e255d97 files/digest-tomboy-0.8.1 244
 SHA256 be97c94130e199eaf89db39f9c24ed4a82133d568122c15fba212746fb471a44 files/digest-tomboy-0.8.1 244
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.7 (GNU/Linux)
-
-iD8DBQFHFpLb1fmVwcYIWAYRAk8DAKCReAVzqu2e2MiSUW4uoOjcGmKb1wCcDp/C
-KJXoVEalfvGFHS7MlbRbONc=
-=M8IC
------END PGP SIGNATURE-----
+MD5 37d202bce9ee6eccdd2432b3cf1df911 files/digest-tomboy-0.8.1-r1 244
+RMD160 42b180542d2c5775e844573e02c3b6e63e255d97 files/digest-tomboy-0.8.1-r1 244
+SHA256 be97c94130e199eaf89db39f9c24ed4a82133d568122c15fba212746fb471a44 files/digest-tomboy-0.8.1-r1 244
diff --git a/app-misc/tomboy/files/digest-tomboy-0.8.1-r1 b/app-misc/tomboy/files/digest-tomboy-0.8.1-r1
new file mode 100644
index 000000000000..268782be6023
--- /dev/null
+++ b/app-misc/tomboy/files/digest-tomboy-0.8.1-r1
@@ -0,0 +1,3 @@
+MD5 06b0caaa6ceffade9d664bcd1806e962 tomboy-0.8.1.tar.bz2 1893080
+RMD160 e0331e3b7155f53ac1bf225844eefc2704686130 tomboy-0.8.1.tar.bz2 1893080
+SHA256 d18b1cd4ea5f4dde4e2d947e20bbd54e9c5cc2c36558eeaa956d0b4a1a4c7be2 tomboy-0.8.1.tar.bz2 1893080
diff --git a/app-misc/tomboy/files/tomboy-0.8.1-insecure-ldpath.patch b/app-misc/tomboy/files/tomboy-0.8.1-insecure-ldpath.patch
new file mode 100644
index 000000000000..b2133139fe0f
--- /dev/null
+++ b/app-misc/tomboy/files/tomboy-0.8.1-insecure-ldpath.patch
@@ -0,0 +1,36 @@
+Index: Tomboy/tomboy-panel.in
+===================================================================
+--- Tomboy/tomboy-panel.in	(revision 1611)
++++ Tomboy/tomboy-panel.in	(working copy)
+@@ -1,6 +1,6 @@
+-#!/bin/sh
++#!/bin/sh
+ 
+-export LD_LIBRARY_PATH="@pkglibdir@:$LD_LIBRARY_PATH"
++export LD_LIBRARY_PATH="@pkglibdir@${LD_LIBRARY_PATH+:$LD_LIBRARY_PATH}"
+ export MONO_PATH=$MONO_PATH:@pkglibdir@:@pkglibdir@/addins
+ export TOMBOY_WRAPPER_PATH="@bindir@/@wrapper@"
+ 
+Index: Tomboy/tomboy.in
+===================================================================
+--- Tomboy/tomboy.in	(revision 1611)
++++ Tomboy/tomboy.in	(working copy)
+@@ -1,15 +1,15 @@
+-#!/bin/sh
++#!/bin/sh
+ 
+ if [ "x$PWD" = "x@srcdir@" ] ; then
+     echo "*** Running uninstalled @target@ ***"
+ 
+-    export LD_LIBRARY_PATH="../libtomboy/.libs:$LD_LIBRARY_PATH:./Addins/PrintNotes/.libs"
++    export LD_LIBRARY_PATH="../libtomboy/.libs${LD_LIBRARY_PATH+:$LD_LIBRARY_PATH}:./Addins/PrintNotes/.libs"
+     export TOMBOY_WRAPPER_PATH="$PWD/@wrapper@"
+     export MONO_PATH=$MONO_PATH:./Addins:../Mono.Addins/Mono.Addins:../Mono.Addins/Mono.Addins.Setup:../Mono.Addins/Mono.Addins.Gui
+ 
+     THIS_EXE="--debug ./@target@"
+ else
+-    export LD_LIBRARY_PATH="@pkglibdir@:$LD_LIBRARY_PATH"
++    export LD_LIBRARY_PATH="@pkglibdir@${LD_LIBRARY_PATH+:$LD_LIBRARY_PATH}"
+     export MONO_PATH=$MONO_PATH:@pkglibdir@:@pkglibdir@/addins
+     export TOMBOY_WRAPPER_PATH="@bindir@/@wrapper@"
+ 
diff --git a/app-misc/tomboy/tomboy-0.8.1-r1.ebuild b/app-misc/tomboy/tomboy-0.8.1-r1.ebuild
new file mode 100644
index 000000000000..efc40482761f
--- /dev/null
+++ b/app-misc/tomboy/tomboy-0.8.1-r1.ebuild
@@ -0,0 +1,58 @@
+# Copyright 1999-2007 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/app-misc/tomboy/tomboy-0.8.1-r1.ebuild,v 1.1 2007/11/04 01:30:06 compnerd Exp $
+
+inherit gnome2 mono eutils
+
+DESCRIPTION="Desktop note-taking application"
+HOMEPAGE="http://www.beatniksoftware.com/tomboy/"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~ppc ~x86"
+IUSE="doc eds galago"
+
+RDEPEND=">=dev-lang/mono-1.1
+		 >=dev-dotnet/gtk-sharp-2
+		 >=dev-dotnet/gconf-sharp-2
+		 >=dev-dotnet/gnome-sharp-2
+		 >=sys-apps/dbus-0.90
+		 >=x11-libs/gtk+-2.6.0
+		 >=dev-libs/atk-1.2.4
+		 >=gnome-base/gconf-2
+		 >=app-text/gtkspell-2.0.9
+		 >=gnome-base/gnome-panel-2.8.2
+		 >=gnome-base/libgnomeprint-2.2
+		 >=gnome-base/libgnomeprintui-2.2
+		 eds? ( dev-libs/gmime )
+		 galago? ( =dev-dotnet/galago-sharp-0.5* )"
+DEPEND="${RDEPEND}
+		  dev-libs/libxml2
+		  sys-devel/gettext
+		  dev-util/pkgconfig
+		>=dev-util/intltool-0.35"
+
+DOCS="AUTHORS ChangeLog INSTALL NEWS README"
+
+pkg_setup() {
+	if ! built_with_use 'dev-libs/libxml2' 'python' ; then
+		eerror "Please build libxml2 with the python USE-flag"
+		einfo "echo \"dev-libs/libxml2 python\" >> /etc/portage/package.use"
+		die "dev-libs/libxml2 without python bindings detected"
+	fi
+
+	if use eds && ! built_with_use 'dev-libs/gmime' mono ; then
+		eerror "Please build gmime with the mono USE-flag"
+		einfo "echo \"dev-libs/gmime mono\" >> /etc/portage/package.use"
+		die "gmime without mono support detected"
+	fi
+
+	G2CONF="${G2CONF} $(use_enable galago) $(use_enable eds evolution)"
+}
+
+src_unpack() {
+	gnome2_src_unpack
+
+	# Security Fix (Bug #189249)
+	epatch "${FILESDIR}/${PN}-0.8.1-insecure-ldpath.patch"
+}