[libclipboard-perl] 07/07: patches

gregor herrmann gregoa at debian.org
Sat Aug 13 01:31:37 UTC 2016


This is an automated email from the git hooks/post-receive script.

gregoa pushed a commit to branch master
in repository libclipboard-perl.

commit 6474034d157a5c0609f46c9311e6db8b0d346fd9
Author: gregor herrmann <gregoa at debian.org>
Date:   Sat Aug 13 03:31:04 2016 +0200

    patches
---
 debian/patches/hurd.patch              | 18 ++++++++++++++++++
 debian/patches/insecure-tempfile.patch | 23 +++++++++++++++++++++++
 debian/patches/sensible.patch          | 28 ++++++++++++++++++++++++++++
 debian/patches/series                  |  3 +++
 4 files changed, 72 insertions(+)

diff --git a/debian/patches/hurd.patch b/debian/patches/hurd.patch
new file mode 100644
index 0000000..5dd985e
--- /dev/null
+++ b/debian/patches/hurd.patch
@@ -0,0 +1,18 @@
+Description: Add support for Debian GNU/Hurd.
+ $^O is 'gnu' there.
+Origin: vendor
+Forwarded: not-yet
+Author: gregor herrmann <gregoa at debian.org>
+Last-Update: 2016-08-13
+
+--- a/lib/Clipboard.pm
++++ b/lib/Clipboard.pm
+@@ -15,7 +15,7 @@
+         # example, cygwin doesn't count as Unix here, because it will
+         # use the Win32 clipboard.)
+         bind_os(Xclip => qw(linux bsd$ aix bsdos dec_osf dgux
+-            dynixptx hpux irix dragonfly machten next os2 sco_sv solaris sunos
++            dynixptx gnu hpux irix dragonfly machten next os2 sco_sv solaris sunos
+             svr4 svr5 unicos unicosmk)),
+         bind_os(MacPasteboard => qw(darwin)),
+         bind_os(Win32 => qw(mswin ^win cygwin)),
diff --git a/debian/patches/insecure-tempfile.patch b/debian/patches/insecure-tempfile.patch
new file mode 100644
index 0000000..d483920
--- /dev/null
+++ b/debian/patches/insecure-tempfile.patch
@@ -0,0 +1,23 @@
+Description: Fix insecure use of temporary files.
+ This is CVE-2014-5509.
+Origin: vendor
+Bug: https://rt.cpan.org/Public/Bug/Display.html?id=98435
+Forwarded: not yet
+Author: gregor herrmann <gregoa at debian.org>
+Last-Update: 2016-08-13
+
+--- a/scripts/clipedit
++++ b/scripts/clipedit
+@@ -1,10 +1,11 @@
+ #!/usr/bin/perl
+ use strict;
+ use Clipboard;
++use File::Temp qw( tempfile );
+ 
+ my $orig = Clipboard->paste;
+ 
+-my $tmpfilename = "/tmp/clipedit$$";
++my ($tmpfile, $tmpfilename) = tempfile();
+ open my $tmpfile, ">$tmpfilename" or die "Failure to open $tmpfilename: $!";
+ print $tmpfile $orig;
+ close $tmpfile;
diff --git a/debian/patches/sensible.patch b/debian/patches/sensible.patch
new file mode 100644
index 0000000..1b46d9b
--- /dev/null
+++ b/debian/patches/sensible.patch
@@ -0,0 +1,28 @@
+Description: use sensible-{browser,editor}
+Origin: vendor
+Forwarded: not needed
+Author: gregor herrmann <gregoa at debian.org>
+Last-Update: 2016-08-13
+
+--- a/scripts/clipbrowse
++++ b/scripts/clipbrowse
+@@ -1,7 +1,7 @@
+ #!/usr/bin/perl -w
+ use strict;
+ use Clipboard;
+-my $browser = $ENV{BROWSER} || 'chromium-browser "%s"';
++my $browser = $ENV{BROWSER} || 'sensible-browser %s';
+ $browser .= ' %s' unless $browser =~ /%s/;
+ my $query = Clipboard->paste;
+ $query =~ s/['"]/\\$&/;
+--- a/scripts/clipedit
++++ b/scripts/clipedit
+@@ -10,7 +10,7 @@
+ print $tmpfile $orig;
+ close $tmpfile;
+ 
+-my $ed = $ENV{VISUAL} || $ENV{EDITOR} || 'vim';
++my $ed = $ENV{VISUAL} || $ENV{EDITOR} || 'sensible-editor';
+ system($ed, $tmpfilename);
+ 
+ open $tmpfile, $tmpfilename or die "Failure to open $tmpfilename: $!";
diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644
index 0000000..0f15e50
--- /dev/null
+++ b/debian/patches/series
@@ -0,0 +1,3 @@
+insecure-tempfile.patch
+hurd.patch
+sensible.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libclipboard-perl.git



More information about the Pkg-perl-cvs-commits mailing list