[Lunar-commits] r22361 - moonbase/trunk/archive/tar-static

[Stefan Wold]

Author: ratler
Date: 2006-11-30 09:32:17 +0100 (Thu, 30 Nov 2006)
New Revision: 22361

Modified:
   moonbase/trunk/archive/tar-static/BUILD
   moonbase/trunk/archive/tar-static/DETAILS
Log:
Added patch to fix vulnerability referred to by
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6097

Built and tested with a few archives.



Modified: moonbase/trunk/archive/tar-static/BUILD
===================================================================
--- moonbase/trunk/archive/tar-static/BUILD	2006-11-30 08:26:35 UTC (rev 22360)
+++ moonbase/trunk/archive/tar-static/BUILD	2006-11-30 08:32:17 UTC (rev 22361)
@@ -1,4 +1,5 @@
 (
+  patch_it $SOURCE2 1 &&
 
   export CFLAGS="$CFLAGS -static"    &&
   export LDFLAGS="$LDFLAGS -static"  &&

Modified: moonbase/trunk/archive/tar-static/DETAILS
===================================================================
--- moonbase/trunk/archive/tar-static/DETAILS	2006-11-30 08:26:35 UTC (rev 22360)
+++ moonbase/trunk/archive/tar-static/DETAILS	2006-11-30 08:32:17 UTC (rev 22361)
@@ -2,12 +2,15 @@
         BASENAME=tar
          VERSION=1.16
           SOURCE=$BASENAME-$VERSION.tar.bz2
+         SOURCE2=tar-1.16-mangling.patch
 SOURCE_DIRECTORY=$BUILD_DIRECTORY/$BASENAME-$VERSION
    SOURCE_URL[0]=ftp://ftp.gnu.org/gnu/$BASENAME/
+     SOURCE2_URL=$PATCH_URL/
       SOURCE_VFY=sha1:b98abe392cedb7fcef475a41d61c17a8f800b90c
+     SOURCE2_VFY=sha1:fff8c96eb17e644214891e3cf44a9ed39bbf392c
         WEB_SITE=http://www.gnu.org/software/tar/tar.html
          ENTERED=20010922
-         UPDATED=20061022
+         UPDATED=20061130
       MAINTAINER=prox at lunar-linux.org
            SHORT="tar creates GNU tar archives (static linked version)."