[Lunar-commits] <moonbase> evince: fix DVI security

Paul Bredbury brebs at lunar-linux.org
Wed Jan 19 17:30:08 CET 2011


commit 210f037e45ca798504f4213483d3eda7cc0e55d3
Author: Paul Bredbury <brebs at lunar-linux.org>
Date:   Wed Jan 19 23:30:08 2011 +0700

    evince: fix DVI security
    
    Plus some other bugfixes from Gentoo & Fedora.
---
 gnome2/desktop/evince/BUILD   |    3 +++
 gnome2/desktop/evince/DEPENDS |    5 +++++
 gnome2/desktop/evince/DETAILS |    7 +++++--
 3 files changed, 13 insertions(+), 2 deletions(-)

diff --git a/gnome2/desktop/evince/BUILD b/gnome2/desktop/evince/BUILD
index a0908e9..5c1a16f 100644
--- a/gnome2/desktop/evince/BUILD
+++ b/gnome2/desktop/evince/BUILD
@@ -1,5 +1,8 @@
 (
 
+  # Fixes security bug: http://bugs.gentoo.org/show_bug.cgi?id=350681
+  patch_it $SOURCE2 1  &&
+
   OPTS+=" --enable-comics --enable-impress --enable-pixbuf"  &&
 
   default_build
diff --git a/gnome2/desktop/evince/DEPENDS b/gnome2/desktop/evince/DEPENDS
index e4ab67c..13fd62b 100644
--- a/gnome2/desktop/evince/DEPENDS
+++ b/gnome2/desktop/evince/DEPENDS
@@ -36,3 +36,8 @@ optional_depends  "t1lib"           \
                   "--enable-t1lib"  \
                   ""                \
                   "for Type 1 fonts in DVI"
+
+optional_depends  "gobject-introspection"   \
+                  "--enable-introspection"  \
+                  ""                        \
+                  "for introspection support"
diff --git a/gnome2/desktop/evince/DETAILS b/gnome2/desktop/evince/DETAILS
index 0e1365a..79d7f2b 100644
--- a/gnome2/desktop/evince/DETAILS
+++ b/gnome2/desktop/evince/DETAILS
@@ -2,16 +2,19 @@
            MAJOR=2.32
          VERSION=$MAJOR.0
           SOURCE=$MODULE-$VERSION.tar.bz2
+         SOURCE2=evince-2.32.0-dvi-security.patch.bz2
       SOURCE_URL=$GNOME_URL/sources/$MODULE/$MAJOR
+     SOURCE2_URL=$PATCH_URL
       SOURCE_VFY=sha1:2f06a2b9dfd8667f4b4c6e90be3c49f6fe026fc8
+     SOURCE2_VFY=sha1:fbab8b4d13ff92e95a0f6c69b79545e93638723e
         WEB_SITE=http://www.gnome.org/projects/$MODULE
          ENTERED=20050918
-         UPDATED=20101229
+         UPDATED=20110117
            SHORT="A document viewer for multiple formats (PDF, Postscript)"
 
 cat << EOF
 Evince is a document viewer for multiple document formats.  It currently
 supports pdf, postscript, djvu, tiff and dvi. The goal of evince is to
 replace the multiple document viewers that exist on the GNOME Desktop
-with a single simple application.
+with a single, simple application.
 EOF


More information about the Lunar-commits mailing list