net-print/cups: Bump security patch

git-svn-id: https://svn.disconnected-by-peer.at/svn/linamh/trunk/mds@1321 6952d904-891a-0410-993b-d76249ca496b
This commit is contained in:
geos_one 2009-07-04 05:41:58 +00:00
parent ae71d1294d
commit 990c1c61da
4 changed files with 321 additions and 1 deletions

View File

@ -2,6 +2,12 @@
# Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2
# $Header: /var/cvsroot/gentoo-x86/net-print/cups/ChangeLog,v 1.344 2009/03/09 18:42:27 armin76 Exp $
*cups-1.3.10-r2 (04 Jul 2009)
04 Jul 2009; Mario Fetka <mario.fetka@gmail.com> +cups-1.3.10-r2.ebuild,
+files/cups-1.3.10-str3178.patch:
Bump security patch
* cups-1.3.10 (17 Apr 2009)
17 Apr 2009; Mario Fetka <mario.fetka@gmail.com> cups-1.3.10:

View File

@ -1,4 +1,5 @@
AUX cups-1.3.0-configure.patch 651 RMD160 e4c7f45d7ddc28157433bf025c7f946c7e3b6d6a SHA1 101bf1893b56640d9fa82078e29319fbbd1449c7 SHA256 d6e5e60a982a3c093c0d0f89cf865e2b4c36290f5b1e188b7bf305d210070736
AUX cups-1.3.10-str3178.patch 888 RMD160 ff061fc3500960f441c59896cdfe421d5f47f386 SHA1 fac5361b1172aba167d48988f874faa6faf1554a SHA256 e6550fad17017ac6897e6e9c70a4aafaaec5473c05a19e9e50277293cdc6aac6
AUX cups-1.3.7-backend-https.patch 450 RMD160 9a1ad48d2be40c89510ccc512649f0a2eb5543b0 SHA1 d3dd55fcdee47855d6b7c1443adb6c2b3d8c9cdb SHA256 060f929ae3eae5dc411ce6352a0d50c3296b013974f034fc2ad8d6bb0c81b45a
AUX cups-1.3.9-CVE-2008-5286.patch 761 RMD160 7abe5d746cc2c8135e946de492b767137204345a SHA1 1e904c63e5bb2ef2e6f9792e3b2c3bcb89cdc6e8 SHA256 e85dc13164dd1c7b7fa978aeb5b6df886d9595319aab5fadde57e35d0259aee3
AUX cups-1.3.9-ldap-draft-1.patch 3443 RMD160 a8d6cdc180c7a3dc4747e91d2b0b662978d613f4 SHA1 a1ad1ebc6258044cc5068153995a5f1415904a6c SHA256 096440d1fc5f18c65338a45699648c89f43b802721f51b91428df8446d77a582
@ -6,8 +7,9 @@ AUX cupsd.init.d 293 RMD160 19fbef21cee7e472e7028f3101b680baa0089c54 SHA1 e6b27b
AUX pdftops-1.20.gentoo 10412 RMD160 16e229662c47e03af1d1f4cb5764a76d17a66642 SHA1 6afb8a655b6ff013a2c8c8cbfb615ba1e561503b SHA256 ac5fa01ca776d75bd7cef62eef9f6b0c3945ee87e8950b40ca9f9f3ff46a16c1
DIST cups-1.3.10-source.tar.bz2 3778970 RMD160 9c8f5366f84b5f9087f7a29bace677db309a933f SHA1 48689f07104106216d35198cc90ed56df33faf38 SHA256 9701a545a6a05a991beeb49b41fbb4d450c3bdbb4eb74b132b0d2988640bb566
DIST cups-1.3.9-source.tar.bz2 3993875 RMD160 ec8bd9fc6ee45648b6eb22949f44fc4cf2defd4e SHA1 c1a596b355201320456b393446286fe3947bce16 SHA256 38856ab4b8bcf51be2bed1f554cd8089c1f2448a6979c055762b49eda82a6b6b
EBUILD cups-1.3.10-r2.ebuild 8429 RMD160 7fdbadc2774bd04df819ea98223a06eb32196c20 SHA1 f026a96451664de7bd7913932f7d9cef2ad7b455 SHA256 97e393257c0daf3441c2872010b41b858ea8443361bd4976cb0e616601a2238d
EBUILD cups-1.3.10.ebuild 8319 RMD160 6c2363efe252c52124ab37dc572be6b68bc8e5aa SHA1 6b71d8b4a7cc38cb689f74da88567de0eb0cf636 SHA256 3903dd4d66c18f0251495446cc686fdaa2b3a7f435a3faee9bf736f6cb61209b
EBUILD cups-1.3.9-r1.ebuild 8724 RMD160 2fadb7b929fa65fad0aab8df9e23a59f47843424 SHA1 9c3d039bb8941370f280915dded0c2467b573509 SHA256 823b083c2c1670f3dc069c70b07d408d96e92e567822106dac4e3613ed0b1588
EBUILD cups-1.3.9-r2.ebuild 8724 RMD160 2fadb7b929fa65fad0aab8df9e23a59f47843424 SHA1 9c3d039bb8941370f280915dded0c2467b573509 SHA256 823b083c2c1670f3dc069c70b07d408d96e92e567822106dac4e3613ed0b1588
MISC ChangeLog 51116 RMD160 b90e6748b52a808f0bd2230a86c5c7d312f72426 SHA1 440f641a58ce8a868235735965e508316d4cb94f SHA256 3c87dfd7cf2198adece21343d0e8105fa50b896a9841a1d5eedd5fbd08e6ff93
MISC ChangeLog 51281 RMD160 550e9b310e001f36ea4176cafbee94aeda590158 SHA1 aa90f98f8a94a664942a8d9b9e47d57027f7345a SHA256 efda5376d8d5ed1280c3ccea116c3b82195a5d25f9986c7ea840701679732458
MISC metadata.xml 161 RMD160 1e5b1e42553c8869b93c4a5448e9a2a2ed9fe525 SHA1 209c6a46e4cdd891980115e42ba419e3799f8088 SHA256 7c85e6739a71f5bb23e8de36c88677d772946e61f7285892f7554e37bd2bca76

View File

@ -0,0 +1,293 @@
# Copyright 1999-2009 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/net-print/cups/cups-1.3.10-r2.ebuild,v 1.5 2009/06/30 21:12:30 fauli Exp $
inherit autotools eutils flag-o-matic multilib pam
MY_P=${P/_}
DESCRIPTION="The Common Unix Printing System"
HOMEPAGE="http://www.cups.org/"
SRC_URI="http://ftp.easysw.com/pub/cups/${PV}/${MY_P}-source.tar.bz2"
LICENSE="GPL-2"
SLOT="0"
KEYWORDS="alpha ~amd64 ~arm hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh sparc x86 ~sparc-fbsd ~x86-fbsd"
IUSE="acl avahi dbus gnutls java jpeg kerberos ldap pam perl php png ppds python samba slp ssl static tiff X xinetd zeroconf"
COMMON_DEPEND="acl? ( kernel_linux? ( sys-apps/acl sys-apps/attr ) )
avahi? ( net-dns/avahi )
dbus? ( sys-apps/dbus )
gnutls? ( net-libs/gnutls )
java? ( >=virtual/jre-1.4 )
jpeg? ( >=media-libs/jpeg-6b )
kerberos? ( virtual/krb5 )
ldap? ( net-nds/openldap )
pam? ( virtual/pam )
perl? ( dev-lang/perl )
php? ( dev-lang/php )
png? ( >=media-libs/libpng-1.2.1 )
python? ( dev-lang/python )
slp? ( >=net-libs/openslp-1.0.4 )
ssl? ( !gnutls? ( >=dev-libs/openssl-0.9.8g ) )
tiff? ( >=media-libs/tiff-3.5.5 )
xinetd? ( sys-apps/xinetd )
zeroconf? ( !avahi? ( net-misc/mDNSResponder ) )
app-text/libpaper
dev-libs/libgcrypt"
DEPEND="${COMMON_DEPEND}
!<net-print/foomatic-filters-ppds-20070501
!<net-print/hplip-1.7.4a-r1"
RDEPEND="${COMMON_DEPEND}
!virtual/lpr
X? ( x11-misc/xdg-utils )
>=virtual/poppler-utils-0.4.3-r1
"
PDEPEND="
ppds? ( || (
(
net-print/foomatic-filters-ppds
net-print/foomatic-db-ppds
)
net-print/foomatic-filters-ppds
net-print/foomatic-db-ppds
net-print/hplip
net-print/gutenprint
net-print/foo2zjs
net-print/cups-pdf
) )
samba? ( >=net-fs/samba-3.0.8 )
virtual/ghostscript"
PROVIDE="virtual/lpr"
# upstream includes an interactive test which is a nono for gentoo.
# therefore, since the printing herd has bigger fish to fry, for now,
# we just leave it out, even if FEATURES=test
RESTRICT="test"
S="${WORKDIR}/${MY_P}"
LANGS="de en es et fr he id it ja pl sv zh_TW"
for X in ${LANGS} ; do
IUSE="${IUSE} linguas_${X}"
done
pkg_setup() {
if use avahi && ! built_with_use net-dns/avahi mdnsresponder-compat ; then
echo
eerror "In order to have cups working with avahi zeroconf support, you need"
eerror "to have net-dns/avahi emerged with \"mdnsresponder-compat\" in your USE"
eerror "flag. Please add that flag, re-emerge avahi, and then emerge cups again."
die "net-dns/avahi is missing the mdnsresponder-compat feature."
fi
enewgroup lp
enewuser lp -1 -1 -1 lp
enewgroup lpadmin 106
}
src_unpack() {
unpack ${A}
cd "${S}"
# disable configure automagic for acl/attr, upstream bug STR #2723
epatch "${FILESDIR}/${PN}-1.3.0-configure.patch"
# use the ldap schema of the ldap draft
epatch "${FILESDIR}/${PN}-1.3.9-ldap-draft-1.patch"
# create a missing symlink to allow https printing via IPP, bug #217293
epatch "${FILESDIR}/${PN}-1.3.7-backend-https.patch"
# detect recent libgnutls versions, upstream bug STR #3178
epatch "${FILESDIR}/${PN}-1.3.10-str3178.patch"
# cups does not use autotools "the usual way" and ship a static config.h.in
eaclocal
eautoconf
}
src_compile() {
# Fails to compile on SH
use sh && replace-flags -O? -O0
# needed to prevent ghostscript compile failures
use kerberos && strip-flags
# locale support
strip-linguas ${LANGS}
if [ -z "${LINGUAS}" ] ; then
export LINGUAS=all
fi
export DSOFLAGS="${LDFLAGS}"
if use ldap ; then
append-flags -DLDAP_DEPRECATED
fi
local myconf
if use avahi || use zeroconf ; then
myconf="${myconf} --enable-dnssd"
else
myconf="${myconf} --disable-dnssd"
fi
if use ssl || use gnutls ; then
myconf="${myconf} \
$(use_enable gnutls) \
$(use_enable !gnutls openssl)"
else
myconf="${myconf} \
--disable-gnutls \
--disable-openssl"
fi
econf \
--libdir=/usr/$(get_libdir) \
--localstatedir=/var \
--with-cups-user=lp \
--with-cups-group=lp \
--with-docdir=/usr/share/cups/html \
--with-languages=${LINGUAS} \
--with-pdftops=pdftops \
--with-system-groups=lpadmin \
--with-xinetd=/etc/xinetd.d \
$(use_enable acl) \
$(use_enable dbus) \
$(use_enable jpeg) \
$(use_enable kerberos gssapi) \
$(use_enable ldap) \
$(use_enable pam) \
$(use_enable png) \
$(use_enable slp) \
$(use_enable static) \
$(use_enable tiff) \
$(use_with java) \
$(use_with perl) \
$(use_with php) \
$(use_with python) \
--enable-libpaper \
--enable-pdftops \
--enable-threads \
${myconf}
# install in /usr/libexec always, instead of using /usr/lib/cups, as that
# makes more sense when facing multilib support.
sed -i -e 's:SERVERBIN.*:SERVERBIN = "$(BUILDROOT)"/usr/libexec/cups:' Makedefs
sed -i -e 's:#define CUPS_SERVERBIN.*:#define CUPS_SERVERBIN "/usr/libexec/cups":' config.h
sed -i -e 's:cups_serverbin=.*:cups_serverbin=/usr/libexec/cups:' cups-config
emake || die "emake failed"
}
src_install() {
emake BUILDROOT="${D}" install || die "emake install failed"
dodoc {CHANGES{,-1.{0,1}},CREDITS,README}.txt || die "dodoc install failed"
# clean out cups init scripts
rm -rf "${D}"/etc/{init.d/cups,rc*,pam.d/cups}
# install our init script
local neededservices
use avahi && neededservices="$neededservices avahi-daemon"
use dbus && neededservices="$neededservices dbus"
use zeroconf && ! use avahi && neededservices="$neededservices mDNSResponderPosix"
[[ -n ${neededservices} ]] && neededservices="need${neededservices}"
sed -e "s/@neededservices@/$neededservices/" "${FILESDIR}"/cupsd.init.d > "${T}"/cupsd
doinitd "${T}"/cupsd
# install our pam script
pamd_mimic_system cups auth account
if use xinetd ; then
# correct path
sed -i -e "s:server = .*:server = /usr/libexec/cups/daemon/cups-lpd:" "${D}"/etc/xinetd.d/cups-lpd
# it is safer to disable this by default, bug #137130
grep -w 'disable' "${D}"/etc/xinetd.d/cups-lpd || \
sed -i -e "s:}:\tdisable = yes\n}:" "${D}"/etc/xinetd.d/cups-lpd
else
rm -rf "${D}"/etc/xinetd.d
fi
keepdir /usr/share/cups/profiles /usr/libexec/cups/driver /var/log/cups \
/var/run/cups/certs /var/cache/cups /var/spool/cups/tmp /etc/cups/ssl
# .desktop handling. X useflag. xdg-open from freedesktop is preferred, upstream bug STR #2724.
if use X ; then
sed -i -e "s:htmlview:xdg-open:" "${D}"/usr/share/applications/cups.desktop
else
rm -r "${D}"/usr/share/applications
fi
# fix a symlink collision, see bug #172341
dodir /usr/share/ppd
dosym /usr/share/ppd /usr/share/cups/model/foomatic-ppds
# create RSS feed directory
diropts -m 0740 -o lp -g lp
dodir /var/cache/cups/rss
# create /etc/cups/client.conf, bug #196967 and #266678
echo "ServerName /var/run/cups/cups.sock" >> "${D}"/etc/cups/client.conf
}
pkg_preinst() {
# cleanups
[ -n "${PN}" ] && rm -fR "${ROOT}"/usr/share/doc/"${PN}"-*
has_version "=${CATEGORY}/${PN}-1.2*"
upgrade_from_1_2=$?
}
pkg_postinst() {
echo
elog "For information about installing a printer and general cups setup"
elog "take a look at: http://www.gentoo.org/doc/en/printing-howto.xml"
echo
local good_gs=false
for x in app-text/ghostscript-gpl app-text/ghostscript-gnu ; do
if has_version ${x} && built_with_use ${x} cups ; then
good_gs=true
break
fi
done
if ! ${good_gs} ; then
echo
ewarn "You need to emerge ghostscript with the \"cups\" USE flag turned on."
echo
fi
if [[ $upgrade_from_1_2 = 0 ]] ; then
echo
ewarn "You have upgraded from an older cups version. Please make sure"
ewarn "to run \"etc-update\" and \"revdep-rebuild\" NOW."
echo
fi
if [ -e "${ROOT}"/usr/lib/cups ] ; then
echo
ewarn "/usr/lib/cups exists - You need to remerge every ebuild that"
ewarn "installed into /usr/lib/cups and /etc/cups, qfile is in portage-utils:"
ewarn "# FEATURES=-collision-protect emerge -va1 \$(qfile -qC /usr/lib/cups /etc/cups | sed \"s:net-print/cups$::\")"
echo
ewarn "FEATURES=-collision-protect is needed to overwrite the compatibility"
ewarn "symlinks installed by this package, it won't be needed on later merges."
ewarn "You should also run revdep-rebuild"
echo
# place symlinks to make the update smoothless
for i in "${ROOT}"/usr/lib/cups/{backend,filter}/* ; do
if [ "${i/\*}" == "${i}" ] && ! [ -e ${i/lib/libexec} ] ; then
ln -s ${i} ${i/lib/libexec}
fi
done
fi
}

View File

@ -0,0 +1,19 @@
diff -Naur cups-1.3.10/config-scripts/cups-ssl.m4 cups-1.3.10.new/config-scripts/cups-ssl.m4
--- cups-1.3.10/config-scripts/cups-ssl.m4 2007-07-11 23:46:42.000000000 +0200
+++ cups-1.3.10.new/config-scripts/cups-ssl.m4 2009-05-29 02:38:27.444267250 +0200
@@ -64,11 +64,11 @@
fi
dnl Then look for GNU TLS...
- if test "x${SSLLIBS}" = "x" -a "x${enable_gnutls}" != "xno"; then
+ if test "x${SSLLIBS}" = "x" -a "x${enable_gnutls}" != "xno" -a "x$PKGCONFIG" != x; then
AC_PATH_PROG(LIBGNUTLSCONFIG,libgnutls-config)
- if test "x$LIBGNUTLSCONFIG" != x; then
- SSLLIBS=`$LIBGNUTLSCONFIG --libs`
- SSLFLAGS=`$LIBGNUTLSCONFIG --cflags`
+ if $PKGCONFIG --exists gnutls; then
+ SSLLIBS=`$PKGCONFIG --libs gnutls`
+ SSLFLAGS=`$PKGCONFIG --cflags gnutls`
ENCRYPTION_REQUIRED=" Encryption Required"
AC_DEFINE(HAVE_SSL)
AC_DEFINE(HAVE_GNUTLS)