summaryrefslogtreecommitdiff
path: root/audio
diff options
context:
space:
mode:
authorwiz <wiz@pkgsrc.org>2007-02-18 00:55:06 +0000
committerwiz <wiz@pkgsrc.org>2007-02-18 00:55:06 +0000
commit83a34869e4748f6a53298ae735dfd924b75ada4c (patch)
tree14d1697c1ea6523653ee87a9a7f3332b58d33e69 /audio
parent4fffe53d6a6196e46b6ae21f56740db9b3570113 (diff)
downloadpkgsrc-83a34869e4748f6a53298ae735dfd924b75ada4c.tar.gz
Add fix for CVE-2006-6979 from SVN.
Bump PKGREVISION.
Diffstat (limited to 'audio')
-rw-r--r--audio/amarok/Makefile4
-rw-r--r--audio/amarok/distinfo3
-rw-r--r--audio/amarok/patches/patch-aa16
3 files changed, 20 insertions, 3 deletions
diff --git a/audio/amarok/Makefile b/audio/amarok/Makefile
index 6cbfefad4f1..06f3d8be44b 100644
--- a/audio/amarok/Makefile
+++ b/audio/amarok/Makefile
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.55 2007/02/09 20:32:38 drochner Exp $
+# $NetBSD: Makefile,v 1.56 2007/02/18 00:55:06 wiz Exp $
DISTNAME= amarok-1.4.5
-PKGREVISION= 1
+PKGREVISION= 2
CATEGORIES= audio kde
MASTER_SITES= ${MASTER_SITE_KDE:=amarok/1.4.5/src/}
EXTRACT_SUFX= .tar.bz2
diff --git a/audio/amarok/distinfo b/audio/amarok/distinfo
index 93df12ab264..4de9cf34291 100644
--- a/audio/amarok/distinfo
+++ b/audio/amarok/distinfo
@@ -1,6 +1,7 @@
-$NetBSD: distinfo,v 1.27 2007/02/15 08:30:15 xtraeme Exp $
+$NetBSD: distinfo,v 1.28 2007/02/18 00:55:06 wiz Exp $
SHA1 (amarok-1.4.5.tar.bz2) = 882dec8d30c10f609a1f5e21d2e91342e78304c5
RMD160 (amarok-1.4.5.tar.bz2) = c2bbfe06f3e613dfc7d3926d086024073390c712
Size (amarok-1.4.5.tar.bz2) = 18034110 bytes
+SHA1 (patch-aa) = 0b63ca0e118581b820db1c6e5aaeecabe554495b
SHA1 (patch-ab) = a36c9ca68810c71a95857249b63ff19d4b3f3fbb
diff --git a/audio/amarok/patches/patch-aa b/audio/amarok/patches/patch-aa
new file mode 100644
index 00000000000..b8133a42c29
--- /dev/null
+++ b/audio/amarok/patches/patch-aa
@@ -0,0 +1,16 @@
+$NetBSD: patch-aa,v 1.10 2007/02/18 00:55:06 wiz Exp $
+
+Fix for CVE-2006-6979 based on http://bugs.kde.org/show_bug.cgi?id=138499
+(without the whitespace changes).
+
+--- amarok/src/magnatunebrowser/magnatunealbumdownloader.cpp.orig 2007-02-01 18:14:17.000000000 +0000
++++ amarok/src/magnatunebrowser/magnatunealbumdownloader.cpp
+@@ -89,7 +89,7 @@ void MagnatuneAlbumDownloader::albumDown
+
+ //ok, now we have the .zip file downloaded. All we need is to unpack it to the desired location and add it to the collection.
+
+- QString unzipString = "unzip \""+m_tempDir.name() + m_currentAlbumFileName + "\" -d \"" + m_currentAlbumUnpackLocation + "\" &";
++ QString unzipString = "unzip " + KProcess::quote( m_tempDir.name() + m_currentAlbumFileName ) + " -d " + KProcess::quote( m_currentAlbumUnpackLocation ) + " &";
+
+ debug() << "unpacking: " << unzipString << endl;
+