Security update.

4 files changed, 82 insertions, 1 deletions

diff --git a/sys-apps/tar/ChangeLog b/sys-apps/tar/ChangeLog
index 3b4f6f2314cb..8870802d6883 100644
--- a/sys-apps/tar/ChangeLog
+++ b/sys-apps/tar/ChangeLog
@@ -1,6 +1,11 @@
 # ChangeLog for sys-apps/tar
 # Copyright 2002 Gentoo Technologies, Inc.; Distributed under the GPL
-# $Header: /var/cvsroot/gentoo-x86/sys-apps/tar/ChangeLog,v 1.6 2002/08/20 12:20:10 spider Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/tar/ChangeLog,v 1.7 2002/10/01 12:17:56 aliz Exp $
+
+*tar-1-13-25-r3 (01 Oct 2002)
+
+  01 Oct 2002; Daniel Ahlberg <aliz@gentoo.org> :
+  Security update. Added patch developed by Redhat to fix directory traversals.
 
 *tar-1.13.19-r1.ebuild (14 July 2002)
 
diff --git a/sys-apps/tar/files/digest-tar-1.13.25-r3 b/sys-apps/tar/files/digest-tar-1.13.25-r3
new file mode 100644
index 000000000000..467f114af098
--- /dev/null
+++ b/sys-apps/tar/files/digest-tar-1.13.25-r3
@@ -0,0 +1 @@
+MD5 6ef8c906e81eee441f8335652670ac4a tar-1.13.25.tar.gz 1312227
diff --git a/sys-apps/tar/files/tar-1.13.25-r3.gentoo.diff b/sys-apps/tar/files/tar-1.13.25-r3.gentoo.diff
new file mode 100644
index 000000000000..9d4e6b3b47e7
--- /dev/null
+++ b/sys-apps/tar/files/tar-1.13.25-r3.gentoo.diff
@@ -0,0 +1,15 @@
+--- tar-1.13.25/src/misc.c.orig Mon Aug 27 00:14:26 2001
++++ tar-1.13.25/src/misc.c      Mon May 27 11:29:31 2002
+@@ -214,6 +214,13 @@
+            return 0;
+        }
+       while (! ISSLASH (*p));
++
++      do
++       {
++         if (! *p++)
++           return 0;
++       }
++      while ( ISSLASH (*p));
+     }
+ }
diff --git a/sys-apps/tar/tar-1.13.25-r3.ebuild b/sys-apps/tar/tar-1.13.25-r3.ebuild
new file mode 100644
index 000000000000..8f71234f9242
--- /dev/null
+++ b/sys-apps/tar/tar-1.13.25-r3.ebuild
@@ -0,0 +1,60 @@
+# Copyright 1999-2002 Gentoo Technologies, Inc.
+# Distributed under the terms of the GNU General Public License, v2 or later
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/tar/tar-1.13.25-r3.ebuild,v 1.1 2002/10/01 12:17:56 aliz Exp $
+
+S=${WORKDIR}/${P}
+DESCRIPTION="Use this to try make tarballs :)"
+SRC_URI="ftp://alpha.gnu.org/gnu/tar/${P}.tar.gz"
+HOMEPAGE="http://www.gnu.org/software/tar/"
+
+SLOT="0"
+LICENSE="GPL-2"
+KEYWORDS="x86"
+
+DEPEND="sys-apps/gzip
+	sys-apps/bzip2
+	app-arch/ncompress"
+
+RDEPEND="nls? ( >=sys-devel/gettext-0.10.35 )"
+
+src_unpack() {
+	unpack ${A}
+	cd ${S}
+	patch -p1 < ${FILESDIR}/${PF}.gentoo.diff
+}
+
+src_compile() {
+	local myconf
+	[ -z "`use nls`" ] && myconf="--disable-nls"
+	econf \
+		--bindir=/bin \
+		--libexecdir=/usr/lib/misc \
+		${myconf} || die
+
+	if [ -z "`use static`" ]
+	then
+		emake || die
+	else
+		emake LDFLAGS=-static || die
+	fi
+}
+
+src_install() {
+	make DESTDIR=${D} install || die
+	#FHS 2.1 stuff
+	dodir /usr/sbin
+	cd ${D}
+	mv usr/lib/misc/rmt usr/sbin/rmt.gnu
+	dosym rmt.gnu /usr/sbin/rmt
+	# a nasty yet required symlink: 
+	dodir /etc 
+	dosym /usr/sbin/rmt /etc/rmt 
+	cd ${S}
+	if [ -z "`use build`" ] 
+	then
+		dodoc AUTHORS ChangeLog* COPYING NEWS README* PORTS THANKS
+		doman ${FILESDIR}/tar.1
+	else
+		rm -rf ${D}/usr/share
+	fi
+}