diff options
| author | Patrick J Volkerding <volkerdi@slackware.com> | 2022-02-01 08:27:47 +0000 |
|---|---|---|
| committer | Eric Hameleers <alien@slackware.com> | 2022-02-01 17:59:49 +0100 |
| commit | ba74260aeb31600cdee80934088739a8e9869f21 (patch) | |
| tree | 74867bc39b75da76d60eff7792cef4e437237daa /source/a | |
| parent | bd42aca52dc7532946a93fb3354a8454c4adfe94 (diff) | |
| download | current-ba74260aeb31600cdee80934088739a8e9869f21.tar.gz | |
Tue Feb 1 08:27:47 UTC 202220220201082747
kde/kate-21.12.1-x86_64-2.txz: Rebuilt.
Fix missing validation of binaries executed via QProcess.
Thanks to Heinz Wiesinger.
For more information, see:
https://kde.org/info/security/advisory-20220131-1.txt
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23853
(* Security fix *)
Diffstat (limited to 'source/a')
| -rwxr-xr-x | source/a/rpm2tgz/rpm2tgz.SlackBuild | 12 |
1 files changed, 7 insertions, 5 deletions
diff --git a/source/a/rpm2tgz/rpm2tgz.SlackBuild b/source/a/rpm2tgz/rpm2tgz.SlackBuild index 00ebb5bc..7aae64cb 100755 --- a/source/a/rpm2tgz/rpm2tgz.SlackBuild +++ b/source/a/rpm2tgz/rpm2tgz.SlackBuild @@ -24,7 +24,7 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=rpm2tgz VERSION=1.2.2 -BUILD=${BUILD:-5} +BUILD=${BUILD:-6} # Automatically determine the architecture we're building on: if [ -z "$ARCH" ]; then @@ -78,10 +78,12 @@ cat $CWD/rpm2targz > $PKG/usr/bin/rpm2targz zcat $CWD/patches/0007-Add-support-for-.txz-packages-and-rpm2txz-symlink.patch.gz | patch -p1 || exit 1 zcat $CWD/patches/0008-Avoid-none-values-in-slack-desc.patch.gz | patch -p1 || exit 1 zcat $CWD/patches/0009-Add-c-option-just-as-makepkg-c-y.patch.gz | patch -p1 || exit 1 - # Make sure that if someone created an RPM with absolute filenames that we - # don't allow it to write all over the / directory when we're just trying - # to extract it to make the .tgz: - zcat $CWD/patches/0010-no-absolute-filenames-extracting-cpio.patch.gz | patch -p1 || exit 1 + ## NO - cpio is stupid and strips the leading '/' from symlinks to absolute + ## paths with --no-absolute-filenames. :-/ + ## Make sure that if someone created an RPM with absolute filenames that we + ## don't allow it to write all over the / directory when we're just trying + ## to extract it to make the .tgz: + #zcat $CWD/patches/0010-no-absolute-filenames-extracting-cpio.patch.gz | patch -p1 || exit 1 # Allow ignoring rpm2cpio error code. Some RPMs can be extracted, but # throw an error anyway. zcat $CWD/patches/0011-ignore-rpm2cpio-error-code.patch.gz | patch -p1 || exit 1 |