From 74e6a27a58e946f528b44022cddd706d5fa2b74f Mon Sep 17 00:00:00 2001
From: Leo <thinkabit.ukim@gmail.com>
Date: Mon, 30 Mar 2020 12:08:34 -0300
Subject: [PATCH] main/screen: fix CVE-2020-9366
---
main/screen/APKBUILD | 13 ++++++++++---
1 file changed, 10 insertions(+), 3 deletions(-)
diff --git a/main/screen/APKBUILD b/main/screen/APKBUILD
index 01aa27a8a6cc..d9e501e94274 100644
--- a/main/screen/APKBUILD
+++ b/main/screen/APKBUILD
@@ -2,7 +2,7 @@
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=screen
pkgver=4.6.2
-pkgrel=0
+pkgrel=1
pkgdesc="A window manager that multiplexes a physical terminal"
url="http://ftp.gnu.org/gnu/screen/"
arch="all"
@@ -10,9 +10,15 @@ license="GPL-3.0-or-later"
options="!check" # No test suite.
makedepends="ncurses-dev ncurses"
subpackages="$pkgname-doc"
-source="https://ftp.gnu.org/gnu/$pkgname/$pkgname-$pkgver.tar.gz"
+source="https://ftp.gnu.org/gnu/$pkgname/$pkgname-$pkgver.tar.gz
+ https://git.savannah.gnu.org/cgit/screen.git/patch/?id=68386dfb1fa33471372a8cd2e74686758a2f527b
+ "
builddir="$srcdir/$pkgname-$pkgver"
+# secfixes:
+# 4.6.2-r1:
+# - CVE-2020-9366
+
build() {
cd "$builddir"
./configure \
@@ -38,4 +44,5 @@ package() {
install -Dm644 etc/screenrc "$pkgdir"/etc/skel/.screenrc
}
-sha512sums="224bd16ad5ae501d1b8bb7d2ba9cc19e6a0743de5a5b320109c2f6bf3b1ca564cc7094ed9211be13733d9d769cde77d13fe236341d448cad0518038ab1e85c99 screen-4.6.2.tar.gz"
+sha512sums="224bd16ad5ae501d1b8bb7d2ba9cc19e6a0743de5a5b320109c2f6bf3b1ca564cc7094ed9211be13733d9d769cde77d13fe236341d448cad0518038ab1e85c99 screen-4.6.2.tar.gz
+497a47b5f4952645f94bcc4594695db9f7a993f5d7c9b9142984804aee61b5cc571b7c666310cc651eb2428c6d39d5320923d464917fd925f57f1e13acb1db7d ?id=68386dfb1fa33471372a8cd2e74686758a2f527b"
--
GitLab