From 0d04028ca5781b0ddeb2ae843a60934050c6f959 Mon Sep 17 00:00:00 2001 From: Leo Famulari Date: Mon, 10 Jul 2017 15:04:58 -0400 Subject: [PATCH] gnu: man-db: Update to 2.7.6.1 [fixes CVE-2015-1336]. * gnu/packages/man.scm (man-db): Update to 2.7.6.1. [arguments]: Add '--disable-cache-owner' to #:configure-flags. --- gnu/packages/man.scm | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/gnu/packages/man.scm b/gnu/packages/man.scm index 101892a0a..0fdc69aea 100644 --- a/gnu/packages/man.scm +++ b/gnu/packages/man.scm @@ -57,14 +57,14 @@ a flexible and convenient way.") (define-public man-db (package (name "man-db") - (version "2.7.5") + (version "2.7.6.1") (source (origin (method url-fetch) (uri (string-append "mirror://savannah/man-db/man-db-" version ".tar.xz")) (sha256 (base32 - "056a3il7agfazac12yggcg4gf412yq34k065im0cpfxbcw6xskaw")))) + "0gqgs4zc3r87apns0k5qp689p2ylxx2596s2mkmkxjjay99brv88")))) (build-system gnu-build-system) (arguments '(#:phases @@ -93,7 +93,12 @@ a flexible and convenient way.") (xz (assoc-ref %build-inputs "xz")) (util (assoc-ref %build-inputs "util-linux"))) ;; Invoke groff, less, gzip, bzip2, and xz directly from the store. - (append (list "--disable-setuid" ;; Disable setuid man user. + (append (list ;; Disable setuid man user. + "--disable-setuid" + ;; Don't constrain ownership of system-wide cache files. + ;; Otherwise creating the manpage database fails with + ;; with man-db > 2.7.5. + "--disable-cache-owner" (string-append "--with-pager=" less "/bin/less") (string-append "--with-gzip=" gzip "/bin/gzip") (string-append "--with-bzip2=" bzip2 "/bin/gzip") -- 2.13.2