GNU bug report logs - #27649
Update man-db to 2.7.6.1

Previous Next

Full log

View this message in rfc822 format

From: Marius Bakke <mbakke <at> fastmail.com>
To: Leo Famulari <leo <at> famulari.name>, 27649 <at> debbugs.gnu.org
Subject: [bug#27649] Update man-db to 2.7.6.1
Date: Tue, 11 Jul 2017 22:53:18 +0200

[Message part 1 (text/plain, inline)]

Leo Famulari <leo <at> famulari.name> writes:

> This updates man-db to the latest release, 2.7.6.1.
>
> I tested that the manual-database profile hook still works. For that, I
> had to pass the new configuration option 'disable-cache-owner', or else
> the test suite and manpage database generation would fail.
>
> See this commit for more info (Separate cache owner from --enable-setuid
> option):
>
> https://git.savannah.gnu.org/cgit/man-db.git/commit/?id=0f8b5518949866075c25787bdc4e9c064597c21e

That commit message was confusingly familiar :-)

> From 0d04028ca5781b0ddeb2ae843a60934050c6f959 Mon Sep 17 00:00:00 2001
> From: Leo Famulari <leo <at> famulari.name>
> Date: Mon, 10 Jul 2017 15:04:58 -0400
> Subject: [PATCH] gnu: man-db: Update to 2.7.6.1 [fixes CVE-2015-1336].

[...]

> @@ -93,7 +93,12 @@ a flexible and convenient way.")
>               (xz    (assoc-ref %build-inputs "xz"))
>               (util  (assoc-ref %build-inputs "util-linux")))
>           ;; Invoke groff, less, gzip, bzip2, and xz directly from the store.
> -         (append (list "--disable-setuid" ;; Disable setuid man user.
> +         (append (list ;; Disable setuid man user.
> +                       "--disable-setuid"
> +                       ;; Don't constrain ownership of system-wide cache files.
> +                       ;; Otherwise creating the manpage database fails with
> +                       ;; with man-db > 2.7.5.

Double 'with'. I'm not even sure the second sentence is necessary, YMMV :-)

> +                       "--disable-cache-owner"

LGTM.

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.