security update to 8.51

it updates Opera's wrapper script to not run commands included with URLs
passed from other applications (as suggested in Secunia Advisory 16907)
This commit is contained in:
sturm 2005-11-22 21:44:22 +00:00
parent f0b06c5ee3
commit fac02b2945
3 changed files with 21 additions and 43 deletions

View File

@ -1,11 +1,11 @@
# $OpenBSD: Makefile,v 1.30 2005/09/21 11:38:51 sturm Exp $
# $OpenBSD: Makefile,v 1.31 2005/11/22 21:44:22 sturm Exp $
ONLY_FOR_ARCHS= i386
COMMENT= "fast and customizable WWW browser"
PKGNAME= opera-8.50
DISTNAME= opera-8.50-20050916.1-static-qt.i386-en
PKGNAME= opera-8.51
DISTNAME= opera-8.51-20051114.1-static-qt.i386-en
CATEGORIES= www
HOMEPAGE= http://www.opera.com/
@ -29,7 +29,7 @@ MASTER_SITES_OPERA= ftp://ftp.opera.com/pub/opera/ \
ftp://ftp.rge.com/pub/infosystems/opera/ \
http://www.rge.com/pub/infosystems/opera/
MASTER_SITES= ${MASTER_SITES_OPERA:=linux/850/final/en/i386/static/}
MASTER_SITES= ${MASTER_SITES_OPERA:=linux/851/final/en/i386/}
EXTRACT_SUFX= .tar.bz2
RUN_DEPENDS= :redhat_base->=8.0:emulators/redhat/base

View File

@ -1,4 +1,4 @@
MD5 (opera-8.50-20050916.1-static-qt.i386-en.tar.bz2) = e66b6e4460610b7cebacb6d33e255ed7
RMD160 (opera-8.50-20050916.1-static-qt.i386-en.tar.bz2) = 1486de336aa5ad1291327bc9e175d99d4b63858e
SHA1 (opera-8.50-20050916.1-static-qt.i386-en.tar.bz2) = 426f8c39ad32918d91bca89cb3a5648df97ffcb2
SIZE (opera-8.50-20050916.1-static-qt.i386-en.tar.bz2) = 5800086
MD5 (opera-8.51-20051114.1-static-qt.i386-en.tar.bz2) = bd6bd9cfaf13b6509c8531d02a4c51a2
RMD160 (opera-8.51-20051114.1-static-qt.i386-en.tar.bz2) = e6da87ffaee5e653c73e96b24d9a186ba74f2b15
SHA1 (opera-8.51-20051114.1-static-qt.i386-en.tar.bz2) = 0d5ff79293896ae478c4f92fed605711b3cf0693
SIZE (opera-8.51-20051114.1-static-qt.i386-en.tar.bz2) = 5810388

View File

@ -1,43 +1,21 @@
$OpenBSD: patch-install_sh,v 1.13 2005/09/21 11:38:51 sturm Exp $
--- install.sh.orig Fri Sep 16 12:16:47 2005
+++ install.sh Tue Sep 20 11:14:10 2005
@@ -1132,7 +1132,7 @@ run_install()
mkdir $mkdirv $mkdirp $share_dir/help/
chmod $chmodv 755 $share_dir/help
cp $cpv $cpf $cpR help/* $share_dir/help/
- if not test -d "$doc_dir/help"; then ln -s $str_localdirshare/help $doc_dir/help; fi
+ ln -s $str_localdirshare/help $doc_dir/help
fi
mkdir $mkdirv $mkdirp $share_dir/config/
@@ -1182,9 +1182,7 @@ run_install()
chmod $chmodv 755 $share_dir/styles/user
cp $cpv $cpf $cpR styles/user/* $share_dir/styles/user/
- if not test -f "$share_dir/styles/OPF.css"; then
- ln $lns opf.css $share_dir/styles/OPF.css
- fi
+ ln $lns opf.css $share_dir/styles/OPF.css
cp $cpv $cpf chartables.bin $share_dir/
@@ -1295,7 +1293,7 @@ run_install()
$OpenBSD: patch-install_sh,v 1.14 2005/11/22 21:44:22 sturm Exp $
--- install.sh.orig Tue Nov 22 22:07:45 2005
+++ install.sh Tue Nov 22 22:13:47 2005
@@ -1302,7 +1302,7 @@ run_install()
then
# System wide configuration files
config_dir="/etc"
- if can_write_to "$config_dir"; then
+ if false can_write_to "$config_dir"; then
- if can_write_to "$config_dir"
+ if false can_write_to "$config_dir"
then
echo
echo "System wide configuration files:"
echo " $config_dir/opera6rc"
@@ -1322,9 +1320,7 @@ run_install()
if test "$flag_mode" = "--force" -o "$flag_mode" = "--prefix="; then
@@ -1332,7 +1332,7 @@ run_install()
then
echo
echo "Shortcut icons cannot be installed with the prefix \"$prefix\"."
- if not con_firm "Do you still want to install them"; then
- bool_icons=0
- fi
echo "Shortcut icons will be ignored if installed with the prefix \"$prefix\"."
- con_firm "Do you want to (try to) install them in default locations" || bool_icons=0
+ bool_icons=0
fi
if test "${bool_icons}" -ne 0; then
if test "${bool_icons}" -ne 0