From 7ec605c4b65aee2fa1981227c221502063c252d4 Mon Sep 17 00:00:00 2001 From: Andreas Sturmlechner Date: Fri, 17 Jan 2020 03:32:16 +0100 Subject: dev-libs/zziplib: Fix multiple security vulnerabilities - CVE-2018-7725 - CVE-2018-7726 - CVE-2018-16548 - CVE-2018-17828 Patches fetched from openSUSE, many thanks. Bug: https://bugs.gentoo.org/614040 Package-Manager: Portage-2.3.84, Repoman-2.3.20 Signed-off-by: Andreas Sturmlechner --- dev-libs/zziplib/Manifest | 1 + dev-libs/zziplib/zziplib-0.13.69-r1.ebuild | 6 ++---- 2 files changed, 3 insertions(+), 4 deletions(-) (limited to 'dev-libs') diff --git a/dev-libs/zziplib/Manifest b/dev-libs/zziplib/Manifest index 75d60a5e23b4..9c8fa1075fee 100644 --- a/dev-libs/zziplib/Manifest +++ b/dev-libs/zziplib/Manifest @@ -1,3 +1,4 @@ DIST zziplib-0.13.69-html.tar.xz 152536 BLAKE2B 05f14b2e6d2e3af4488096eabc1614222cb9607e832618e7534cb55a022f2ba3d2c6f8c6337f4bf9e80a350e43eb05a4c1708b63efa5e0ed10297a5f19ec7adb SHA512 211a83594d4043a29472f9c556d72ad486e40f28d55426b970b8b0617aca76f9dcbd4a3ca5991df943dfac1a1cab623b19aa04fb6ef7807a7740730e01926205 DIST zziplib-0.13.69-man.tar.xz 10988 BLAKE2B 2c3c5cfd17b3d3e17a3e72031b2246e32c9fe471b9578a4717c128725493054ceafc34763a763d31cf5532f082a596a6bceb8e417ef70476a59f4daa0a14b587 SHA512 5a804896a2d06b1d32d6b8715ffdb374ff7179145d033e919acecd46426dad3e44d4889adabce33e7f6bbc18e2b70b50a8a059498bf4f1f3d6844dda90c33c7e +DIST zziplib-0.13.69-patches.tar.xz 5000 BLAKE2B 4612052bb8a312831daec9283cad8593b2161e2acd76122a982339154cd76d58b5398c61f605e3e29e0f63399c9a176710f95a1e6632ff4e1249ac596978006b SHA512 16190e20b8c722f3aee8e77ef7cc24026976b067402430c833d21761a13e32ed5f2eff543a2c13469e442d01c2ed5ae373badd6b8851c962852d6c09620a0d91 DIST zziplib-0.13.69.tar.gz 1132204 BLAKE2B 92e9f5e95665c7a47d1e472f570402e3c174d404abf461bed644ea8a37ff7661ee98b8fa241728aae375e32c470f2f48a817f72410eeda81a6a3be6e6bdb2635 SHA512 ade026289737f43ca92a8746818d87dd7618d473dbce159546ce9071c9e4cbe164a6b1c9efff16efb7aa0327b2ec6b34f3256c6bda19cd6e325703fffc810ef0 diff --git a/dev-libs/zziplib/zziplib-0.13.69-r1.ebuild b/dev-libs/zziplib/zziplib-0.13.69-r1.ebuild index 54f0d278073e..582884e002c2 100644 --- a/dev-libs/zziplib/zziplib-0.13.69-r1.ebuild +++ b/dev-libs/zziplib/zziplib-0.13.69-r1.ebuild @@ -9,6 +9,7 @@ inherit autotools libtool flag-o-matic python-any-r1 DESCRIPTION="Lightweight library for extracting data from files archived in a single zip file" HOMEPAGE="http://zziplib.sourceforge.net/" SRC_URI="https://github.com/gdraheim/${PN}/archive/v${PV}.tar.gz -> ${P}.tar.gz + https://dev.gentoo.org/~asturm/distfiles/${P}-patches.tar.xz https://dev.gentoo.org/~asturm/distfiles/${P}-man.tar.xz doc? ( https://dev.gentoo.org/~asturm/distfiles/${P}-html.tar.xz )" @@ -32,10 +33,7 @@ DEPEND=" " RDEPEND="${DEPEND}" -PATCHES=( - "${FILESDIR}"/${P}-SDL-test.patch - "${FILESDIR}"/${P}-disable-docs.patch -) +PATCHES=( "${WORKDIR}"/${P}-patches ) src_prepare() { default -- cgit v1.2.3-65-gdbad