aballier 16/12/05 14:20:01 Modified: series Added: 050_all_latex2man_predictable_tmp.patch Log: add patch for bug #432144 to tl-core patchset
Revision Changes Path 1.2 src/patchsets/texlive/2015/texlive-core/series file : http://sources.gentoo.org/viewvc.cgi/gentoo/src/patchsets/texlive/2015/texlive-core/series?rev=1.2&view=markup plain: http://sources.gentoo.org/viewvc.cgi/gentoo/src/patchsets/texlive/2015/texlive-core/series?rev=1.2&content-type=text/plain diff : http://sources.gentoo.org/viewvc.cgi/gentoo/src/patchsets/texlive/2015/texlive-core/series?r1=1.1&r2=1.2 Index: series =================================================================== RCS file: /var/cvsroot/gentoo/src/patchsets/texlive/2015/texlive-core/series,v retrieving revision 1.1 retrieving revision 1.2 diff -u -r1.1 -r1.2 --- series 15 Jul 2015 11:12:57 -0000 1.1 +++ series 5 Dec 2016 14:20:01 -0000 1.2 @@ -2,3 +2,4 @@ 020_all_a2ping_invocation.patch 030_all_updmap_normalize.patch 040_all_remove_define_abs.patch +050_all_latex2man_predictable_tmp.patch 1.1 src/patchsets/texlive/2015/texlive-core/050_all_latex2man_predictable_tmp.patch file : http://sources.gentoo.org/viewvc.cgi/gentoo/src/patchsets/texlive/2015/texlive-core/050_all_latex2man_predictable_tmp.patch?rev=1.1&view=markup plain: http://sources.gentoo.org/viewvc.cgi/gentoo/src/patchsets/texlive/2015/texlive-core/050_all_latex2man_predictable_tmp.patch?rev=1.1&content-type=text/plain Index: 050_all_latex2man_predictable_tmp.patch =================================================================== https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668779 https://bugs.gentoo.org/show_bug.cgi?id=432144 CVE-2012-2120 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2120) Index: texlive-20150521-source/texmf-dist/scripts/latex2man/latex2man =================================================================== --- texlive-20150521-source.orig/texmf-dist/scripts/latex2man/latex2man +++ texlive-20150521-source/texmf-dist/scripts/latex2man/latex2man @@ -29,8 +29,6 @@ sub date2str; $VERSION = "1.24"; $DATE = date2str ('$Date: 2016/12/05 14:20:01 $' =~ m|(\d+/\d+/\d+)|); -$tmp = "/tmp/$CMD.$$"; - ################################################################## # check option and arguments ################################################################## @@ -124,6 +122,8 @@ $SrcFile = $ARGV[0]; $DestFile = $ARGV[1]; open (SRC, "<$SrcFile") || die "$CMD: Can't open file \`$SrcFile' for reading.\n"; if ($opt_H || $opt_T) { + $tmp = `mktemp` || die; + chomp $tmp; # DestFile will be written in the postprocess open (DEST, ">$tmp") || die "$CMD: Can't open file \`$tmp' for writing.\n"; } else {
