summaryrefslogtreecommitdiff
path: root/source/a
diff options
context:
space:
mode:
authorPatrick J Volkerding <volkerdi@slackware.com>2022-02-01 08:27:47 +0000
committerEric Hameleers <alien@slackware.com>2022-02-01 17:59:49 +0100
commitba74260aeb31600cdee80934088739a8e9869f21 (patch)
tree74867bc39b75da76d60eff7792cef4e437237daa /source/a
parentbd42aca52dc7532946a93fb3354a8454c4adfe94 (diff)
downloadcurrent-ba74260aeb31600cdee80934088739a8e9869f21.tar.gz
Tue Feb 1 08:27:47 UTC 202220220201082747
kde/kate-21.12.1-x86_64-2.txz: Rebuilt. Fix missing validation of binaries executed via QProcess. Thanks to Heinz Wiesinger. For more information, see: https://kde.org/info/security/advisory-20220131-1.txt https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23853 (* Security fix *)
Diffstat (limited to 'source/a')
-rwxr-xr-xsource/a/rpm2tgz/rpm2tgz.SlackBuild12
1 files changed, 7 insertions, 5 deletions
diff --git a/source/a/rpm2tgz/rpm2tgz.SlackBuild b/source/a/rpm2tgz/rpm2tgz.SlackBuild
index 00ebb5bc..7aae64cb 100755
--- a/source/a/rpm2tgz/rpm2tgz.SlackBuild
+++ b/source/a/rpm2tgz/rpm2tgz.SlackBuild
@@ -24,7 +24,7 @@ cd $(dirname $0) ; CWD=$(pwd)
PKGNAM=rpm2tgz
VERSION=1.2.2
-BUILD=${BUILD:-5}
+BUILD=${BUILD:-6}
# Automatically determine the architecture we're building on:
if [ -z "$ARCH" ]; then
@@ -78,10 +78,12 @@ cat $CWD/rpm2targz > $PKG/usr/bin/rpm2targz
zcat $CWD/patches/0007-Add-support-for-.txz-packages-and-rpm2txz-symlink.patch.gz | patch -p1 || exit 1
zcat $CWD/patches/0008-Avoid-none-values-in-slack-desc.patch.gz | patch -p1 || exit 1
zcat $CWD/patches/0009-Add-c-option-just-as-makepkg-c-y.patch.gz | patch -p1 || exit 1
- # Make sure that if someone created an RPM with absolute filenames that we
- # don't allow it to write all over the / directory when we're just trying
- # to extract it to make the .tgz:
- zcat $CWD/patches/0010-no-absolute-filenames-extracting-cpio.patch.gz | patch -p1 || exit 1
+ ## NO - cpio is stupid and strips the leading '/' from symlinks to absolute
+ ## paths with --no-absolute-filenames. :-/
+ ## Make sure that if someone created an RPM with absolute filenames that we
+ ## don't allow it to write all over the / directory when we're just trying
+ ## to extract it to make the .tgz:
+ #zcat $CWD/patches/0010-no-absolute-filenames-extracting-cpio.patch.gz | patch -p1 || exit 1
# Allow ignoring rpm2cpio error code. Some RPMs can be extracted, but
# throw an error anyway.
zcat $CWD/patches/0011-ignore-rpm2cpio-error-code.patch.gz | patch -p1 || exit 1