Bug #329583: security patch.

Package-Manager: portage-2.2_rc67/cvs/Linux x86_64

4 files changed, 131 insertions, 2 deletions

diff --git a/app-crypt/gnupg/ChangeLog b/app-crypt/gnupg/ChangeLog
index 2c86a78d0cac..eaf725a14b58 100644
--- a/app-crypt/gnupg/ChangeLog
+++ b/app-crypt/gnupg/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for app-crypt/gnupg
 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-crypt/gnupg/ChangeLog,v 1.379 2010/07/21 17:09:02 ssuominen Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-crypt/gnupg/ChangeLog,v 1.380 2010/08/10 15:51:28 robbat2 Exp $
+
+*gnupg-2.0.16-r1 (10 Aug 2010)
+
+  10 Aug 2010; Robin H. Johnson <robbat2@gentoo.org>
+  +gnupg-2.0.16-r1.ebuild, +files/gnupg-realloc-X.509.patch:
+  Bug #329583: security patch.
 
   21 Jul 2010; Samuli Suominen <ssuominen@gentoo.org> gnupg-2.0.15.ebuild:
   ppc64 stable wrt #320037
diff --git a/app-crypt/gnupg/Manifest b/app-crypt/gnupg/Manifest
index dd1dcd10d51d..9848d3cd07b7 100644
--- a/app-crypt/gnupg/Manifest
+++ b/app-crypt/gnupg/Manifest
@@ -1,4 +1,5 @@
 AUX gnupg-2.0.12-adns.patch 818 RMD160 5d1b0a267cfd290c0e3b68c58f2fe5a5286c52c2 SHA1 fe3f7a1468a70768f36ef7e8f20b6d8fb8406366 SHA256 cb7b9dcf8019db1afc5aeee0a16659f53c7b41660278c8ecc056f874c22ceea6
+AUX gnupg-realloc-X.509.patch 295 RMD160 2428ed04b6f4ee1d8fc5f5ee9fa58ed820aea9f0 SHA1 aa096528a4ffaf5c50a154a6c793feee901a5e46 SHA256 9c6d7f905662e655a5a7cb04381b4deeaaee714f2d00c736a670b1b2dba3c114
 DIST gnupg-1.4.10.tar.bz2 3410814 RMD160 d54063eaa5b25dc3c3f4ad924411ec69c25c1e62 SHA1 fd1b6a5f3b2dd836b598a1123ac257b8f105615d SHA256 a2907f4432d67894e425e48ae85785dd60ecb01658c9682bcd96f5e91043bb38
 DIST gnupg-2.0.11.tar.bz2 3852869 RMD160 f532a2c41a4fdcf9bd5130f8d382348f6774ba18 SHA1 9f71a342c5be686b0dcef082078af693802a558f SHA256 8c40148ad471f4a7e583bc5f84ebf652c395b303deaf2583b11e51f43fa8b47c
 DIST gnupg-2.0.12.tar.bz2 3924196 RMD160 17edbd6bac5210933ef0cc2ce70820d38ce970ef SHA1 91856f917c13a1a12622ef39995eaf59c46f7502 SHA256 9633e104c519fade1c9fce5843d1f70439b156bcc446aa270ea8192d461d9cce
@@ -14,6 +15,7 @@ EBUILD gnupg-2.0.12.ebuild 3185 RMD160 325056f1fcef665a1e1e8ae17097278a52c8354c
 EBUILD gnupg-2.0.13.ebuild 3158 RMD160 ab01ac93f92c3929437feb1a9581d0035f83d87b SHA1 1c8ec29aceb414e0c8f604b5b46220278b9a566c SHA256 e906bf2ef3bc84fca0063d035422772fb5302aa86fe81f57be22ac196b75d762
 EBUILD gnupg-2.0.14.ebuild 3239 RMD160 e8491e8882552bc24db50356dc8849e36d13236c SHA1 4554fa53adf6c4c6fec0430b7b406dd2f50155a8 SHA256 8ffdaefb4e605547073c6dfda0caf2f31f485be4da911fb98de36b0280226615
 EBUILD gnupg-2.0.15.ebuild 3373 RMD160 47b1a00f1021991703dba94b83aac08e8d8d3e61 SHA1 df9712767c0ed315bb39c99381b670da3d38aae3 SHA256 0c38ed55944c140646f5873b8d10659aefeb67e4e841e91184ecd1db38d19716
+EBUILD gnupg-2.0.16-r1.ebuild 3472 RMD160 3a907ee50ec08e4e95b6928c752782be69bfb59b SHA1 e1e1ebbd50a1d81f1f99b2920bc065364649aed6 SHA256 ff906856a3360050d1cf6ddc9b84b6cb947f9fc2d3fb56702521ca652e848391
 EBUILD gnupg-2.0.16.ebuild 3379 RMD160 7d9b4cd2916974d21b7b2d41306bc80fc658185a SHA1 3f41bed87ca8c04f974fdec6757b727ee50bae4d SHA256 f7ca8b81d178d907bfa5ff719c2ae934954065eb2fc81454a3d9c26105e259c9
-MISC ChangeLog 57573 RMD160 3d9a4a1439c6f017ecda6ba6b219b13de7a2e280 SHA1 f69984ffeaa1fb0337c4fb535089671a1b1877f1 SHA256 0f444899fbed94a4e7a384e6399104b69be0667a8a8e0850a2b0a1e18696db1e
+MISC ChangeLog 57749 RMD160 94dcd649b410fa35091541ff07ded2d3bad9176b SHA1 b831b682a2f19167c78441251bc57a41c6d609ad SHA256 9a4f0005486df2f09473f4e268f703e161ade45df4d88dfa9ee2a8057f20d20f
 MISC metadata.xml 698 RMD160 8c3577ffbf64da24c47d181ef24f8f7e9e09a224 SHA1 92579ce4870e7bbee4bf596bb466b3f9ce587157 SHA256 8f18f677d1d437d3033b367e8a7514b745a762d518af7a3afdc44e1ddbf2b31e
diff --git a/app-crypt/gnupg/files/gnupg-realloc-X.509.patch b/app-crypt/gnupg/files/gnupg-realloc-X.509.patch
new file mode 100644
index 000000000000..123e4cd3202b
--- /dev/null
+++ b/app-crypt/gnupg/files/gnupg-realloc-X.509.patch
@@ -0,0 +1,10 @@
+--- kbx/keybox-blob.c   (revision 5367)
++++ kbx/keybox-blob.c   (working copy)
+@@ -898,6 +898,7 @@
+              rc = gpg_error_from_syserror ();
+              goto leave;
+            }
++          names = tmp;
+        }
+      names[blob->nuids++] = p;
+      if (!i && (p=x509_email_kludge (p)))
diff --git a/app-crypt/gnupg/gnupg-2.0.16-r1.ebuild b/app-crypt/gnupg/gnupg-2.0.16-r1.ebuild
new file mode 100644
index 000000000000..3ea200d5acdf
--- /dev/null
+++ b/app-crypt/gnupg/gnupg-2.0.16-r1.ebuild
@@ -0,0 +1,111 @@
+# Copyright 1999-2010 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/app-crypt/gnupg/gnupg-2.0.16-r1.ebuild,v 1.1 2010/08/10 15:51:28 robbat2 Exp $
+
+EAPI="3"
+
+inherit flag-o-matic toolchain-funcs eutils
+
+DESCRIPTION="The GNU Privacy Guard, a GPL pgp replacement"
+HOMEPAGE="http://www.gnupg.org/"
+SRC_URI="mirror://gnupg/gnupg/${P}.tar.bz2"
+# SRC_URI="ftp://ftp.gnupg.org/gcrypt/${PN}/${P}.tar.bz2"
+
+LICENSE="GPL-3"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~x86-fbsd ~x64-freebsd ~x86-freebsd ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris"
+IUSE="adns bzip2 caps doc ldap nls openct pcsc-lite static selinux smartcard"
+
+COMMON_DEPEND_LIBS="
+	>=dev-libs/libassuan-2
+	>=dev-libs/libgcrypt-1.4
+	>=dev-libs/libgpg-error-1.7
+	>=dev-libs/libksba-1.0.2
+	>=dev-libs/pth-1.3.7
+	>=net-misc/curl-7.10
+	adns? ( >=net-libs/adns-1.4 )
+	bzip2? ( app-arch/bzip2 )
+	pcsc-lite? ( >=sys-apps/pcsc-lite-1.3.0 )
+	openct? ( >=dev-libs/openct-0.5.0 )
+	smartcard? ( =virtual/libusb-0* )
+	ldap? ( net-nds/openldap )"
+COMMON_DEPEND_BINS="app-crypt/pinentry"
+
+# existence of bins are checked during configure
+DEPEND="${COMMON_DEPEND_LIBS}
+	${COMMON_DEPEND_BINS}
+	static? ( >=dev-libs/libassuan-2[static-libs] )
+	nls? ( sys-devel/gettext )
+	doc? ( sys-apps/texinfo )"
+
+RDEPEND="!static? ( ${COMMON_DEPEND_LIBS} )
+	${COMMON_DEPEND_BINS}
+	virtual/mta
+	!app-crypt/gpg-agent
+	!<=app-crypt/gnupg-2.0.1
+	selinux? ( sec-policy/selinux-gnupg )
+	nls? ( virtual/libintl )"
+
+src_prepare() {
+	EPATCH_OPTS="-l" epatch "${FILESDIR}"/gnupg-realloc-X.509.patch
+}
+
+src_configure() {
+	# 'USE=static' support was requested:
+	# gnupg1: bug #29299
+	# gnupg2: bug #159623
+	use static && append-ldflags -static
+
+	econf \
+		--docdir="${EPREFIX}/usr/share/doc/${PF}" \
+		--enable-gpg \
+		--enable-gpgsm \
+		--enable-agent \
+		$(use_with adns) \
+		$(use_enable bzip2) \
+		$(use_enable smartcard scdaemon) \
+		$(use_enable !elibc_SunOS symcryptrun) \
+		$(use_enable nls) \
+		$(use_enable ldap) \
+		$(use_with caps capabilities) \
+		CC_FOR_BUILD=$(tc-getBUILD_CC)
+}
+
+src_compile() {
+	emake || die "emake failed"
+	if use doc; then
+		cd doc
+		emake html || die "emake html failed"
+	fi
+}
+
+src_install() {
+	emake DESTDIR="${D}" install || die "emake install failed"
+	dodoc ChangeLog NEWS README THANKS TODO VERSION
+
+	mv "${ED}usr/share/gnupg/help"* "${ED}usr/share/doc/${PF}"
+	ecompressdir "/usr/share/doc/${PF}"
+
+	dosym gpg2 /usr/bin/gpg
+	dosym gpgv2 /usr/bin/gpgv
+	dosym gpg2keys_hkp /usr/libexec/gpgkeys_hkp
+	dosym gpg2keys_finger /usr/libexec/gpgkeys_finger
+	dosym gpg2keys_curl /usr/libexec/gpgkeys_curl
+	use ldap && dosym gpg2keys_ldap /usr/libexec/gpgkeys_ldap
+	echo ".so man1/gpg2.1" > "${ED}usr/share/man/man1/gpg.1"
+	echo ".so man1/gpgv2.1" > "${ED}usr/share/man/man1/gpgv.1"
+
+	use doc && dohtml doc/gnupg.html/* doc/*jpg doc/*png
+}
+
+pkg_postinst() {
+	elog "If you wish to view images emerge:"
+	elog "media-gfx/xloadimage, media-gfx/xli or any other viewer"
+	elog "Remember to use photo-viewer option in configuration file to activate"
+	elog "the right viewer."
+
+	ewarn "Please remember to restart gpg-agent if a different version"
+	ewarn "of the agent is currently used. If you are unsure of the gpg"
+	ewarn "agent you are using please run 'killall gpg-agent',"
+	ewarn "and to start a fresh daemon just run 'gpg-agent --daemon'."
+}