Revision bump for security bug 94069; thanks to taviso for the patch.

Package-Manager: portage-2.0.51.22-r1

5 files changed, 35 insertions, 8 deletions

diff --git a/dev-libs/log4sh/ChangeLog b/dev-libs/log4sh/ChangeLog
index 287cf3c0112d..8aaec8606cdf 100644
--- a/dev-libs/log4sh/ChangeLog
+++ b/dev-libs/log4sh/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for dev-libs/log4sh
 # Copyright 1999-2005 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/dev-libs/log4sh/ChangeLog,v 1.5 2005/05/06 12:05:12 ka0ttic Exp $
+# $Header: /var/cvsroot/gentoo-x86/dev-libs/log4sh/ChangeLog,v 1.6 2005/07/04 11:14:58 ka0ttic Exp $
+
+*log4sh-1.2.5-r1 (04 Jul 2005)
+
+  04 Jul 2005; Aaron Walker <ka0ttic@gentoo.org>
+  +files/log4sh-1.2.5-fix-insecure-tmp-creation.diff, -log4sh-1.2.5.ebuild,
+  +log4sh-1.2.5-r1.ebuild:
+  Revision bump for security bug 94069; thanks to taviso for the patch.
 
   06 May 2005; Aaron Walker <ka0ttic@gentoo.org> -log4sh-1.2.3.ebuild,
   -log4sh-1.2.4.ebuild, log4sh-1.2.5.ebuild:
diff --git a/dev-libs/log4sh/Manifest b/dev-libs/log4sh/Manifest
index 9a4b00ed4fc6..b39f37c5c55f 100644
--- a/dev-libs/log4sh/Manifest
+++ b/dev-libs/log4sh/Manifest
@@ -1,14 +1,15 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA1
 
-MD5 07c327e476e93c3b2ce62ae41bfdd5e0 log4sh-1.2.5.ebuild 808
-MD5 018f396d8a9f61a7e8a006681c1f9534 ChangeLog 821
+MD5 4dee1bf897a2e4cebf39f4cd2e282b0b log4sh-1.2.5-r1.ebuild 938
+MD5 e130bdffd2b7981cc5930a06582791f4 ChangeLog 1078
 MD5 f8d10f350e91f30316ea4e1bd1e76470 metadata.xml 254
-MD5 7bd95fc5f38f9d8553b4939638319549 files/digest-log4sh-1.2.5 60
+MD5 7bd95fc5f38f9d8553b4939638319549 files/digest-log4sh-1.2.5-r1 60
+MD5 4050d86d553ff1f102ddc79dcc96c4c5 files/log4sh-1.2.5-fix-insecure-tmp-creation.diff 324
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.4.1 (GNU/Linux)
 
-iD8DBQFCe13BEZCkKN40op4RAkZBAJ9akk5s0CtR+fBpE4r1sO3Zq+u0pgCcDQ0+
-kjyQd+zXKmJWxz+2Im9YmM0=
-=1ST/
+iD8DBQFCyRpIEZCkKN40op4RAmGPAKCm+z8XpNa/bh70W1yYnfdCvXHurwCeLDyI
+HkrmjJ+OHRuu5yAv2M/RuTo=
+=IKFT
 -----END PGP SIGNATURE-----
diff --git a/dev-libs/log4sh/files/digest-log4sh-1.2.5 b/dev-libs/log4sh/files/digest-log4sh-1.2.5-r1
index 04a7378be220..04a7378be220 100644
--- a/dev-libs/log4sh/files/digest-log4sh-1.2.5
+++ b/dev-libs/log4sh/files/digest-log4sh-1.2.5-r1
diff --git a/dev-libs/log4sh/files/log4sh-1.2.5-fix-insecure-tmp-creation.diff b/dev-libs/log4sh/files/log4sh-1.2.5-fix-insecure-tmp-creation.diff
new file mode 100644
index 000000000000..533b3615b21a
--- /dev/null
+++ b/dev-libs/log4sh/files/log4sh-1.2.5-fix-insecure-tmp-creation.diff
@@ -0,0 +1,11 @@
+--- src/shell/log4sh.orig	2005-06-20 13:35:51.583341280 +0100
++++ src/shell/log4sh	2005-06-20 13:37:45.120081072 +0100
+@@ -357,7 +357,7 @@
+ {
+   _file=$1
+ 
+-  _tmpFile="/tmp/log4sh.$$"
++  _tmpFile=`mktemp /tmp/log4sh.XXXXXX` 
+   grep "^log4sh\." $_file >$_tmpFile
+   _rp_count=`wc -l $_tmpFile |awk '{print $1}'`
+   _rp_i=1
diff --git a/dev-libs/log4sh/log4sh-1.2.5.ebuild b/dev-libs/log4sh/log4sh-1.2.5-r1.ebuild
index 37b04a1c822a..166cd82fe0b0 100644
--- a/dev-libs/log4sh/log4sh-1.2.5.ebuild
+++ b/dev-libs/log4sh/log4sh-1.2.5-r1.ebuild
@@ -1,6 +1,8 @@
 # Copyright 1999-2005 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/dev-libs/log4sh/log4sh-1.2.5.ebuild,v 1.2 2005/05/06 12:05:12 ka0ttic Exp $
+# $Header: /var/cvsroot/gentoo-x86/dev-libs/log4sh/log4sh-1.2.5-r1.ebuild,v 1.1 2005/07/04 11:14:58 ka0ttic Exp $
+
+inherit eutils
 
 DESCRIPTION="A flexible logging framework for shell scripts"
 HOMEPAGE="http://forestent.com/products/log4sh/"
@@ -13,6 +15,12 @@ IUSE=""
 
 RDEPEND="app-shells/bash"
 
+src_unpack() {
+	unpack ${A} && cd ${S}
+	# bug 94069
+	epatch ${FILESDIR}/${P}-fix-insecure-tmp-creation.diff
+}
+
 src_test() {
 	make test || die "make test failed"
 }