[pkgsrc/trunk]: pkgsrc/chat/konversation Add patch for CVE-2007-4400 for Konv...

[tonnerre <tonnerre%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/6ad2868a9f28
branches:  trunk
changeset: 543178:6ad2868a9f28
user:      tonnerre <tonnerre%pkgsrc.org@localhost>
date:      Sun Jun 08 01:21:37 2008 +0000

description:
Add patch for CVE-2007-4400 for Konversation to stop escape song names
properly in the media script.

diffstat:

 chat/konversation/Makefile         |   4 ++--
 chat/konversation/distinfo         |   3 ++-
 chat/konversation/patches/patch-aa |  12 ++++++++++++
 3 files changed, 16 insertions(+), 3 deletions(-)

diffs (43 lines):

diff -r 6a5445cef33b -r 6ad2868a9f28 chat/konversation/Makefile
--- a/chat/konversation/Makefile        Sun Jun 08 00:15:49 2008 +0000
+++ b/chat/konversation/Makefile        Sun Jun 08 01:21:37 2008 +0000
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.16 2008/01/18 05:06:25 tnn Exp $
+# $NetBSD: Makefile,v 1.17 2008/06/08 01:21:37 tonnerre Exp $
 #
 
 DISTNAME=      konversation-1.0.1
-PKGREVISION=   7
+PKGREVISION=   8
 CATEGORIES=    chat kde
 MASTER_SITES=  http://download.berlios.de/konversation/
 EXTRACT_SUFX=  .tar.bz2
diff -r 6a5445cef33b -r 6ad2868a9f28 chat/konversation/distinfo
--- a/chat/konversation/distinfo        Sun Jun 08 00:15:49 2008 +0000
+++ b/chat/konversation/distinfo        Sun Jun 08 01:21:37 2008 +0000
@@ -1,7 +1,8 @@
-$NetBSD: distinfo,v 1.7 2007/07/25 02:44:10 markd Exp $
+$NetBSD: distinfo,v 1.8 2008/06/08 01:21:37 tonnerre Exp $
 
 SHA1 (konversation-1.0.1.tar.bz2) = 7e4b2356e942848fb83584db1bf2a1b6ef63234d
 RMD160 (konversation-1.0.1.tar.bz2) = 1cf79a87f451aa2718560f00ddf987b68938310a
 Size (konversation-1.0.1.tar.bz2) = 5848563 bytes
+SHA1 (patch-aa) = c65f7cac42af69a5a9f227c91befbe13f7d978a1
 SHA1 (patch-ab) = 68c11c4e1c00286607d394cb0b0b4132cd4789d0
 SHA1 (patch-ac) = dd6181a80abe966ef07cab135491fa21af7b43fe
diff -r 6a5445cef33b -r 6ad2868a9f28 chat/konversation/patches/patch-aa
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/chat/konversation/patches/patch-aa        Sun Jun 08 01:21:37 2008 +0000
@@ -0,0 +1,12 @@
+$NetBSD: patch-aa,v 1.3 2008/06/08 01:21:37 tonnerre Exp $
+
+--- konversation/scripts/media.orig    2006-10-06 18:43:29.000000000 +0200
++++ konversation/scripts/media
+@@ -269,6 +269,7 @@ def playing(playerList, mode=None):
+     for i in playerList:
+         s=i.get(mode)
+         if s:
++          s=re.replace(r'[\r\n]', ' ', s)
+             tell([IRC_SERVER, TARGET, s], 'say' )
+             return 1
+     return 0