From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:43808) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dV2AY-0005kt-RG for guix-patches@gnu.org; Tue, 11 Jul 2017 16:54:07 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dV2AU-00029V-Tj for guix-patches@gnu.org; Tue, 11 Jul 2017 16:54:06 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:59941) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dV2AU-00029R-Kn for guix-patches@gnu.org; Tue, 11 Jul 2017 16:54:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1dV2AU-0004jk-9s for guix-patches@gnu.org; Tue, 11 Jul 2017 16:54:02 -0400 Subject: [bug#27649] Update man-db to 2.7.6.1 Resent-Message-ID: From: Marius Bakke In-Reply-To: <20170711014307.GA25070@jasmine.lan> References: <20170711014307.GA25070@jasmine.lan> Date: Tue, 11 Jul 2017 22:53:18 +0200 Message-ID: <87wp7ek85d.fsf@fastmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: Leo Famulari , 27649@debbugs.gnu.org --=-=-= Content-Type: text/plain Leo Famulari writes: > This updates man-db to the latest release, 2.7.6.1. > > I tested that the manual-database profile hook still works. For that, I > had to pass the new configuration option 'disable-cache-owner', or else > the test suite and manpage database generation would fail. > > See this commit for more info (Separate cache owner from --enable-setuid > option): > > https://git.savannah.gnu.org/cgit/man-db.git/commit/?id=0f8b5518949866075c25787bdc4e9c064597c21e That commit message was confusingly familiar :-) > From 0d04028ca5781b0ddeb2ae843a60934050c6f959 Mon Sep 17 00:00:00 2001 > From: Leo Famulari > Date: Mon, 10 Jul 2017 15:04:58 -0400 > Subject: [PATCH] gnu: man-db: Update to 2.7.6.1 [fixes CVE-2015-1336]. [...] > @@ -93,7 +93,12 @@ a flexible and convenient way.") > (xz (assoc-ref %build-inputs "xz")) > (util (assoc-ref %build-inputs "util-linux"))) > ;; Invoke groff, less, gzip, bzip2, and xz directly from the store. > - (append (list "--disable-setuid" ;; Disable setuid man user. > + (append (list ;; Disable setuid man user. > + "--disable-setuid" > + ;; Don't constrain ownership of system-wide cache files. > + ;; Otherwise creating the manpage database fails with > + ;; with man-db > 2.7.5. Double 'with'. I'm not even sure the second sentence is necessary, YMMV :-) > + "--disable-cache-owner" LGTM. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEu7At3yzq9qgNHeZDoqBt8qM6VPoFAlllOr8ACgkQoqBt8qM6 VPqJKgf9G4RMen1z2HhVQtusrzDoir8DOgU4OLrO03GzIFHMh/4Ov4hV1kOVgJ3b hlpM9mUhtkWtJwj+QZmYU5fUwHCKo+XDGQRwrm+xjs+MW98ZXgCKfmcQyWS3fZPw E92TlBha/uebdm41WvCZKk4q4GRMe3JGCdRN1c7/jvCWm7cAQn7DncB5NF0kF0sK vOOzcYLtxLuyMFunmhmhYLTOlq38sZf5LK5f6o0E5fqt6wptqzQveoCXBqA80c0n W8UQry0aiF8FWWwKt+I9XdlpMyExRGhH9vkniawH21d0gJK2hKXvW5TygxXFnjAp L6i1geZroTuiFEg7zhuVKltdJvY7Og== =V5mF -----END PGP SIGNATURE----- --=-=-=--