emergency bump by security team #184071 - ** do not assign me bugs **

Package-Manager: portage-2.1.2.9

5 files changed, 124 insertions, 5 deletions

diff --git a/media-video/nvclock/ChangeLog b/media-video/nvclock/ChangeLog
index 238f5cbbfed7..ba0dece05ab2 100644
--- a/media-video/nvclock/ChangeLog
+++ b/media-video/nvclock/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for media-video/nvclock
 # Copyright 2002-2007 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/media-video/nvclock/ChangeLog,v 1.20 2007/05/15 13:56:23 bangert Exp $
+# $Header: /var/cvsroot/gentoo-x86/media-video/nvclock/ChangeLog,v 1.21 2007/07/05 11:10:44 taviso Exp $
+
+*nvclock-0.7-r2 (05 Jul 2007)
+
+  05 Jul 2007; Tavis Ormandy <taviso@gentoo.org>
+  +files/nvclock-insecure-tmp.diff, +nvclock-0.7-r2.ebuild:
+  emergency bump by security team #184071 - ** do not assign me bugs **
 
   15 May 2007; Thilo Bangert <bangert@gentoo.org> metadata.xml:
   add <herd>no-herd</herd>
diff --git a/media-video/nvclock/Manifest b/media-video/nvclock/Manifest
index 4916f21d8fb4..bd747a148062 100644
--- a/media-video/nvclock/Manifest
+++ b/media-video/nvclock/Manifest
@@ -1,3 +1,6 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA1
+
 AUX callbacks.patch 837 RMD160 3703f3b3255ddae3b30354878017b421822260d7 SHA1 57cb431efcf66b64dedf06fb4c6904291bbfae97 SHA256 e245f38d0a837d877c601cf05e414d91c26741320ee3469a6fb98484eefb35d5
 MD5 80f3f5a3e09142270f16873fddfb5d7d files/callbacks.patch 837
 RMD160 3703f3b3255ddae3b30354878017b421822260d7 files/callbacks.patch 837
@@ -6,6 +9,10 @@ AUX configure.in.diff 348 RMD160 e8a01a4d812d263a00d90e5fbceea8c64a6a54b2 SHA1 6
 MD5 0afb58d7f073145f86d31cee842bfb10 files/configure.in.diff 348
 RMD160 e8a01a4d812d263a00d90e5fbceea8c64a6a54b2 files/configure.in.diff 348
 SHA256 0ac1e484f04f155d8e2182652951f900880b943435f53bfa403ece38ccce1660 files/configure.in.diff 348
+AUX nvclock-insecure-tmp.diff 1093 RMD160 8fe8a704c8397d1f4c56a57f2e7e37c0faf24276 SHA1 e9e18d5127af4ce4e2162c785e4e165eaeda44c5 SHA256 572d40f5e0f3e91b74d7f4b0b88ff63fce28aa109b7f8f32529812d66ac7af10
+MD5 4d748e15d7787da4bf1a8db06e9bd032 files/nvclock-insecure-tmp.diff 1093
+RMD160 8fe8a704c8397d1f4c56a57f2e7e37c0faf24276 files/nvclock-insecure-tmp.diff 1093
+SHA256 572d40f5e0f3e91b74d7f4b0b88ff63fce28aa109b7f8f32529812d66ac7af10 files/nvclock-insecure-tmp.diff 1093
 AUX nvclock_acinclude_qtlibs.patch 1108 RMD160 1960d2a4f3e956971175ac9343642dd9944577f9 SHA1 320d85ca31c069214ef429b4f2cf6b8358b143a2 SHA256 c6bd458331de21c85e1abf3edb686bb03fffbfc841c74f37c3d8eb9b2e744309
 MD5 de7fcdd400ce67a56fba44f89ac935ef files/nvclock_acinclude_qtlibs.patch 1108
 RMD160 1960d2a4f3e956971175ac9343642dd9944577f9 files/nvclock_acinclude_qtlibs.patch 1108
@@ -24,14 +31,18 @@ EBUILD nvclock-0.7-r1.ebuild 1303 RMD160 2bc0268df575cb20060860a468c4246c260e833
 MD5 2e567701b2f1c7104a87519c13224ff2 nvclock-0.7-r1.ebuild 1303
 RMD160 2bc0268df575cb20060860a468c4246c260e8336 nvclock-0.7-r1.ebuild 1303
 SHA256 d1f0c600d8849f52b98544f0662c0cb8870ccf1796ad60a67dc76458f46de4b4 nvclock-0.7-r1.ebuild 1303
+EBUILD nvclock-0.7-r2.ebuild 1350 RMD160 ec8cb5a029c4d9e542611ac8ea6867b1d4625e8b SHA1 f67092ee055c90ab49d3ff1e381e17d32a0fa992 SHA256 e640fc66ee2f020386d6960738a349ac0d4478bc24eaec27ff144c3d6f3dfd6e
+MD5 24068f479a1950692b37729483d5c76b nvclock-0.7-r2.ebuild 1350
+RMD160 ec8cb5a029c4d9e542611ac8ea6867b1d4625e8b nvclock-0.7-r2.ebuild 1350
+SHA256 e640fc66ee2f020386d6960738a349ac0d4478bc24eaec27ff144c3d6f3dfd6e nvclock-0.7-r2.ebuild 1350
 EBUILD nvclock-0.8_beta2.ebuild 1602 RMD160 2be00374c06254697fc037a9dc4660ef08a71e1a SHA1 b2249b4d5f1ec97325541ad3d34f15b8b3956f43 SHA256 882f2e98208678a059d14166280b2f559161b2c3a1bef13e5812d07dc981c4ae
 MD5 32d2a14b6cf6f0f6a16e01992ba5d2e9 nvclock-0.8_beta2.ebuild 1602
 RMD160 2be00374c06254697fc037a9dc4660ef08a71e1a nvclock-0.8_beta2.ebuild 1602
 SHA256 882f2e98208678a059d14166280b2f559161b2c3a1bef13e5812d07dc981c4ae nvclock-0.8_beta2.ebuild 1602
-MISC ChangeLog 2996 RMD160 bd78e9a3b981151993a6ea298b4833c9a87fe54c SHA1 c38a924b16bc584f71604cb39629515bf4f2ad75 SHA256 7ddc0593dd16807bfe0e62adb7923d2a192ff6e795e065ad640b01b63eecdd0b
-MD5 4a67dc74a5c035859970f800aab2314a ChangeLog 2996
-RMD160 bd78e9a3b981151993a6ea298b4833c9a87fe54c ChangeLog 2996
-SHA256 7ddc0593dd16807bfe0e62adb7923d2a192ff6e795e065ad640b01b63eecdd0b ChangeLog 2996
+MISC ChangeLog 3208 RMD160 773f9d221a34fa1f730b1e561613730ea77d8d33 SHA1 610e952ca3f91dc2f3142462046d739af1c1027b SHA256 da640655f7ca1056c333a9b1e51e688674c6f6004d39ccf666483d8498fe7d61
+MD5 abfa32907da5de6c62352194fb946a2b ChangeLog 3208
+RMD160 773f9d221a34fa1f730b1e561613730ea77d8d33 ChangeLog 3208
+SHA256 da640655f7ca1056c333a9b1e51e688674c6f6004d39ccf666483d8498fe7d61 ChangeLog 3208
 MISC metadata.xml 250 RMD160 141e40caacd495033a124ed5f8a4142694cce026 SHA1 5608ecab58906c97a77373e4e90c10b36eebf083 SHA256 db6d4fafc6bb2acf20963d93fbe6a504138aeb5ad37366217fb2d7bb64e2e7c8
 MD5 b418e4bb4ec7828830b5486295d3f063 metadata.xml 250
 RMD160 141e40caacd495033a124ed5f8a4142694cce026 metadata.xml 250
@@ -39,6 +50,16 @@ SHA256 db6d4fafc6bb2acf20963d93fbe6a504138aeb5ad37366217fb2d7bb64e2e7c8 metadata
 MD5 a3c73658273a06b6601973853b1eee03 files/digest-nvclock-0.7-r1 229
 RMD160 f8abd3c278586a2c00f39e70e7970d2996bc0250 files/digest-nvclock-0.7-r1 229
 SHA256 f3c175b0361d0c495b15245eecc45a26bd8a730c8950b6675a69217530d9ae18 files/digest-nvclock-0.7-r1 229
+MD5 a3c73658273a06b6601973853b1eee03 files/digest-nvclock-0.7-r2 229
+RMD160 f8abd3c278586a2c00f39e70e7970d2996bc0250 files/digest-nvclock-0.7-r2 229
+SHA256 f3c175b0361d0c495b15245eecc45a26bd8a730c8950b6675a69217530d9ae18 files/digest-nvclock-0.7-r2 229
 MD5 65bbc26ab0bcdf05e452f501d381b691 files/digest-nvclock-0.8_beta2 238
 RMD160 527e609c28ec41e3f7d610a16558c8f991983062 files/digest-nvclock-0.8_beta2 238
 SHA256 fa1d6517469e68517c802712a47edfb897e3ab0fe1453ae0e7fd9579e6ffcd9e files/digest-nvclock-0.8_beta2 238
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.7 (GNU/Linux)
+
+iQBVAwUBRozRqtommWwmkP1xAQJ5SwIAxxHt7orRjgveUju95EvkATYdctFgYMGG
+FPfeO0GuGa3yoF1NGW3EEgCFzqBPmWgARp48hHMx2RkIZbITDiNehQ==
+=MunG
+-----END PGP SIGNATURE-----
diff --git a/media-video/nvclock/files/digest-nvclock-0.7-r2 b/media-video/nvclock/files/digest-nvclock-0.7-r2
new file mode 100644
index 000000000000..43a189ed06ba
--- /dev/null
+++ b/media-video/nvclock/files/digest-nvclock-0.7-r2
@@ -0,0 +1,3 @@
+MD5 a3bb5ff1c2638317f1a69c7c2442b9e4 nvclock0.7.tar.gz 68966
+RMD160 aacdc3718a65ec63d1b16039294cd2976736402b nvclock0.7.tar.gz 68966
+SHA256 469678f436b974b62af51aa4bf71fdf695c402ed0cd890c25fc0b757577657e8 nvclock0.7.tar.gz 68966
diff --git a/media-video/nvclock/files/nvclock-insecure-tmp.diff b/media-video/nvclock/files/nvclock-insecure-tmp.diff
new file mode 100644
index 000000000000..834818e14943
--- /dev/null
+++ b/media-video/nvclock/files/nvclock-insecure-tmp.diff
@@ -0,0 +1,32 @@
+--- nvclock0.7.orig/src/backend/backend.c	2003-07-29 16:20:01.000000000 +0100
++++ nvclock0.7/src/backend/backend.c	2007-07-03 11:01:06.000000000 +0100
+@@ -282,12 +282,18 @@ void set_card(int number)
+ void set_default_speeds(int num)
+ {
+     int i, eof;
+-    char buffer[100];
++    char buffer[100], fname[1024], *home;
+     volatile unsigned int *PEXTDEV;
+     volatile unsigned int *PRAMDAC;
+     FILE *fp;
+ 
+-    if((fp = fopen("/tmp/nvclock", "r")) != NULL)
++    if ((home = getenv("HOME")) == NULL)
++        return;
++
++    if (snprintf(fname, sizeof(fname), "%s/.nvclock", home) == -1)
++        return;
++
++    if((fp = fopen(fname, "r")) != NULL)
+     {
+ 	/* Read the file .. */
+         for(eof = fscanf(fp, "%s",&buffer); eof != EOF; eof = fscanf(fp, "%s", &buffer))
+@@ -312,7 +318,7 @@ void set_default_speeds(int num)
+     else
+     {
+ 	/* Write the config file */
+-    	fp = fopen("/tmp/nvclock", "w+");
++    	fp = fopen(fname, "w+");
+ 	fprintf(fp, "#This file is used by nvclock to be able to restore the card's speeds\n#Do not edit this file!\n");
+     
+ 	for(i = 0; i <= num; i++)
diff --git a/media-video/nvclock/nvclock-0.7-r2.ebuild b/media-video/nvclock/nvclock-0.7-r2.ebuild
new file mode 100644
index 000000000000..1a56600a9493
--- /dev/null
+++ b/media-video/nvclock/nvclock-0.7-r2.ebuild
@@ -0,0 +1,57 @@
+# Copyright 1999-2007 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/media-video/nvclock/nvclock-0.7-r2.ebuild,v 1.1 2007/07/05 11:10:44 taviso Exp $
+
+inherit eutils
+
+MY_P="${PN}${PV}"
+S=${WORKDIR}/${MY_P}
+DESCRIPTION="NVIDIA Overclocking Utility"
+HOMEPAGE="http://www.linuxhardware.org/nvclock/"
+SRC_URI="http://www.linuxhardware.org/nvclock/${MY_P}.tar.gz"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~x86"
+IUSE="gtk qt3"
+
+RDEPEND="virtual/libc
+	gtk? ( =x11-libs/gtk+-2* )
+	qt3? ( =x11-libs/qt-3* )"
+DEPEND="${RDEPEND}
+	sys-devel/autoconf"
+
+src_unpack() {
+	unpack ${A}
+	cd ${S}
+	epatch ${FILESDIR}/configure.in.diff
+	epatch ${FILESDIR}/callbacks.patch
+	epatch ${FILESDIR}/nvclock-insecure-tmp.diff
+}
+
+src_compile() {
+	mv configure.in configure.ac
+	./autogen.sh || die
+
+	# Needed to ensure it compiles against Qt3 rather than Qt4
+	export QTDIR=/usr/qt/3
+	export MOC=${QTDIR}/bin/moc
+
+	./configure $(use_enable qt3 qt) $(use_enable gtk) || die
+
+	make || die
+}
+
+src_install() {
+	dodir /usr/bin
+	einstall || die
+	dodoc AUTHORS README
+
+	newinitd ${FILESDIR}/nvclock_initd nvclock
+	newconfd ${FILESDIR}/nvclock_confd nvclock
+}
+
+pkg_postinst() {
+	elog "To enable card overclocking at startup, edit your /etc/conf.d/nvclock"
+	elog "accordingly and then run: rc-update add nvclock default"
+}