Fix insecure temp file creation, security bug #198231.

Package-Manager: portage-2.1.3.18

4 files changed, 78 insertions, 9 deletions

diff --git a/dev-tex/feynmf/ChangeLog b/dev-tex/feynmf/ChangeLog
index 651813afac82..b5d3e8d9e69d 100644
--- a/dev-tex/feynmf/ChangeLog
+++ b/dev-tex/feynmf/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for dev-tex/feynmf
 # Copyright 1999-2007 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/dev-tex/feynmf/ChangeLog,v 1.10 2007/10/15 21:40:42 aballier Exp $
+# $Header: /var/cvsroot/gentoo-x86/dev-tex/feynmf/ChangeLog,v 1.11 2007/11/06 09:13:02 ulm Exp $
+
+*feynmf-1.08-r2 (06 Nov 2007)
+
+  06 Nov 2007; Ulrich Mueller <ulm@gentoo.org>
+  +files/feynmf-1.08-tempfile.patch, +feynmf-1.08-r2.ebuild:
+  Fix insecure temp file creation, security bug #198231.
 
   15 Oct 2007; Alexis Ballier <aballier@gentoo.org> feynmf-1.08-r1.ebuild:
   adapt deps for texlive, bug #195894
diff --git a/dev-tex/feynmf/Manifest b/dev-tex/feynmf/Manifest
index d450fc96c0a5..2382ae8f9608 100644
--- a/dev-tex/feynmf/Manifest
+++ b/dev-tex/feynmf/Manifest
@@ -1,6 +1,10 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA1
 
+AUX feynmf-1.08-tempfile.patch 1138 RMD160 46120689c47f00cb4bd8a0b8e79af61262d89cf7 SHA1 e893dba85dcae3882befa5a11dee58ddba2fad6f SHA256 ef9e667c1f48392b6e62dd9e7513ab8cfe6c24828e31bfac454c61ecf1d05bb8
+MD5 af28b48d1dfd45ff685f6c1485cba762 files/feynmf-1.08-tempfile.patch 1138
+RMD160 46120689c47f00cb4bd8a0b8e79af61262d89cf7 files/feynmf-1.08-tempfile.patch 1138
+SHA256 ef9e667c1f48392b6e62dd9e7513ab8cfe6c24828e31bfac454c61ecf1d05bb8 files/feynmf-1.08-tempfile.patch 1138
 AUX feynmf-1.08.patch 305 RMD160 4fc567445d18cb0af03c78418b46fe05c164396d SHA1 69c0d888d068c04a68a1dd062d60d491a63bb55e SHA256 7b10bc2d2b8a2902a0cfcfff7ab3b0a8608569c89d23cac505a3aae7f08c2ad8
 MD5 9b2264341880e792b2134733e4f7fd90 files/feynmf-1.08.patch 305
 RMD160 4fc567445d18cb0af03c78418b46fe05c164396d files/feynmf-1.08.patch 305
@@ -11,10 +15,14 @@ EBUILD feynmf-1.08-r1.ebuild 1232 RMD160 9740f54dc69bdcd1c3e2447e8f37defa4bc1551
 MD5 4f53b0d3b39f17adf23eab84aa5e62a3 feynmf-1.08-r1.ebuild 1232
 RMD160 9740f54dc69bdcd1c3e2447e8f37defa4bc1551a feynmf-1.08-r1.ebuild 1232
 SHA256 87c6eed941da6cfc02386c6c395f0563ad1db1f2e87967c19be4b4b3fefa0174 feynmf-1.08-r1.ebuild 1232
-MISC ChangeLog 1470 RMD160 3b01643f7f02374cbd7201a958ee16ed714b16d9 SHA1 d5d21166f318ae2675011693bd52eec03c079516 SHA256 d7277b6ff4a8b2adeb568acd47b6c503437c89f3437c9843d8301e54e28ffafa
-MD5 36bfe5ebb227069a774f8bc418d158e7 ChangeLog 1470
-RMD160 3b01643f7f02374cbd7201a958ee16ed714b16d9 ChangeLog 1470
-SHA256 d7277b6ff4a8b2adeb568acd47b6c503437c89f3437c9843d8301e54e28ffafa ChangeLog 1470
+EBUILD feynmf-1.08-r2.ebuild 1271 RMD160 ff73e20d0da1967b92a61fc8cb7345db107f7a61 SHA1 e15585928cbd4378f5b7ffdbb66bc7785e18c6e1 SHA256 ff190584fb3739512ec853993c43bea161ed04c039a49dd77af0cd7e090383f8
+MD5 ae30e69b50a9556dd488b06b4ff6de38 feynmf-1.08-r2.ebuild 1271
+RMD160 ff73e20d0da1967b92a61fc8cb7345db107f7a61 feynmf-1.08-r2.ebuild 1271
+SHA256 ff190584fb3739512ec853993c43bea161ed04c039a49dd77af0cd7e090383f8 feynmf-1.08-r2.ebuild 1271
+MISC ChangeLog 1662 RMD160 dd38ccf3635e3edf8292bdce01117f32e6117089 SHA1 491fc138a6a71a91d0364327d2cc67544adf6900 SHA256 51493e39d0b732030e94304db3fc8aefdcbbc34061b33f933c3f55c0fa193e19
+MD5 d41035691b74f30dbd70d6d95b1d1a7d ChangeLog 1662
+RMD160 dd38ccf3635e3edf8292bdce01117f32e6117089 ChangeLog 1662
+SHA256 51493e39d0b732030e94304db3fc8aefdcbbc34061b33f933c3f55c0fa193e19 ChangeLog 1662
 MISC metadata.xml 215 RMD160 87ecb50596543867dc15790c6103a1e79f7c8653 SHA1 6aa175978b2fb203e3225a3319b34765cc4a9293 SHA256 9d28682395a91478579cfc26faad628a3170f15244b662e3e5051b2c44128f84
 MD5 a4d497677683f034751b4ac56ee6be0d metadata.xml 215
 RMD160 87ecb50596543867dc15790c6103a1e79f7c8653 metadata.xml 215
@@ -22,10 +30,13 @@ SHA256 9d28682395a91478579cfc26faad628a3170f15244b662e3e5051b2c44128f84 metadata
 MD5 5f48036bd17f68d05b39049e0b3e0458 files/digest-feynmf-1.08-r1 464
 RMD160 506772274c91542a055a7f810560e902d5db0290 files/digest-feynmf-1.08-r1 464
 SHA256 bb4ab016c629ba6171fca510352aa138aeca5843e76877f87d74559215c7b026 files/digest-feynmf-1.08-r1 464
+MD5 5f48036bd17f68d05b39049e0b3e0458 files/digest-feynmf-1.08-r2 464
+RMD160 506772274c91542a055a7f810560e902d5db0290 files/digest-feynmf-1.08-r2 464
+SHA256 bb4ab016c629ba6171fca510352aa138aeca5843e76877f87d74559215c7b026 files/digest-feynmf-1.08-r2 464
 -----BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.7 (GNU/Linux)
+Version: GnuPG v1.4.7 (GNU/Linux)
 
-iD8DBQFHE96avFcC4BYPU0oRArzMAJ90wOoNfUmp9JosvxdH2DkphmOTFQCeLZNc
-Y+MHb6r2ubjxx/oCGfV+PpM=
-=ons4
+iD8DBQFHMDC5Oeoy/oIi7uwRAsC0AKCVgLV5QaFQkY6WGXiCb+W7qO8H+ACgulK+
+p2huPBf8D5rd/PvAql2Cmtk=
+=R3yF
 -----END PGP SIGNATURE-----
diff --git a/dev-tex/feynmf/feynmf-1.08-r2.ebuild b/dev-tex/feynmf/feynmf-1.08-r2.ebuild
new file mode 100644
index 000000000000..0deda27ffe08
--- /dev/null
+++ b/dev-tex/feynmf/feynmf-1.08-r2.ebuild
@@ -0,0 +1,46 @@
+# Copyright 1999-2007 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/dev-tex/feynmf/feynmf-1.08-r2.ebuild,v 1.1 2007/11/06 09:13:02 ulm Exp $
+
+inherit eutils latex-package
+
+DESCRIPTION="Combined LaTeX/Metafont package for drawing of Feynman diagrams"
+HOMEPAGE="http://www.ctan.org/tex-archive/macros/latex/contrib/feynmf/"
+#Taken from: ftp.tug.ctan.org/tex-archive/macros/latex/contrib/${PN}.tar.gz
+SRC_URI="mirror://gentoo/${P}.tar.gz
+	doc? ( mirror://gentoo/${PN}-cnl.tar.gz )"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~ppc ~x86"
+IUSE="doc"
+
+DEPEND="|| ( dev-texlive/texlive-metapost virtual/tetex )"
+RDEPEND="${DEPEND}
+	virtual/perl-File-Temp"
+
+S="${WORKDIR}/${PN}"
+
+src_unpack() {
+	unpack ${A}
+	epatch "${FILESDIR}/${P}.patch"
+	epatch "${FILESDIR}/${P}-tempfile.patch"
+}
+
+src_compile() {
+	addwrite /var/cache/fonts
+	emake MP=mpost all manual.ps || die "emake failed"
+	if use doc; then
+		emake -f Makefile.cnl ps || die "emake fmfcnl failed"
+	fi
+}
+
+src_install() {
+	newbin feynmf.pl feynmf
+	doman feynmf.1
+	insinto ${TEXMF}/tex/latex/${PN}; doins feynmf.sty feynmp.sty
+	insinto ${TEXMF}/metafont/${PN}; doins feynmf.mf
+	insinto ${TEXMF}/metapost/${PN}; doins feynmp.mp
+	dodoc README manual.ps template.tex
+	use doc && dodoc fmfcnl*.ps
+}
diff --git a/dev-tex/feynmf/files/digest-feynmf-1.08-r2 b/dev-tex/feynmf/files/digest-feynmf-1.08-r2
new file mode 100644
index 000000000000..45e424b08b27
--- /dev/null
+++ b/dev-tex/feynmf/files/digest-feynmf-1.08-r2
@@ -0,0 +1,6 @@
+MD5 689bb25c24cd7be7d625454cc16c26ec feynmf-1.08.tar.gz 286208
+RMD160 94b091e6cfe0ae26766bcb4a8d591cfa30b7b48c feynmf-1.08.tar.gz 286208
+SHA256 07bd8c23246fc3e8c7bab6590570e601dcbab2e7b07119cc052693c06d31bd0f feynmf-1.08.tar.gz 286208
+MD5 4357d09d7d7e38ad3d312942f303394b feynmf-cnl.tar.gz 49920
+RMD160 8c6aec2e050ed6cc9b3b7484b870543c3a7907b6 feynmf-cnl.tar.gz 49920
+SHA256 18bbfc2aedcb76f20c8817a1ee002962baa1172f5b2c9fb23f968268db2c75d5 feynmf-cnl.tar.gz 49920