revision bump for security bug #494508

Package-Manager: portage-2.2.7/cvs/Linux i686
Manifest-Sign-Key: 0xC42EB5D6

4 files changed, 68 insertions, 3 deletions

diff --git a/dev-perl/Proc-Daemon/ChangeLog b/dev-perl/Proc-Daemon/ChangeLog
index 419ad3e73007..8e2e1882d47f 100644
--- a/dev-perl/Proc-Daemon/ChangeLog
+++ b/dev-perl/Proc-Daemon/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for dev-perl/Proc-Daemon
-# Copyright 1999-2012 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/dev-perl/Proc-Daemon/ChangeLog,v 1.36 2012/06/24 13:00:22 tove Exp $
+# Copyright 1999-2013 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/dev-perl/Proc-Daemon/ChangeLog,v 1.37 2013/12/17 12:45:07 zlogene Exp $
+
+*Proc-Daemon-0.140.0-r1 (17 Dec 2013)
+
+  17 Dec 2013; Mikle Kolyada <zlogene@gentoo.org>
+  +Proc-Daemon-0.140.0-r1.ebuild, +files/debian_pid.patch:
+  revision bump for security bug #494508
 
   24 Jun 2012; Torsten Veller <tove@gentoo.org> metadata.xml:
   Update CPAN upstream info
diff --git a/dev-perl/Proc-Daemon/Manifest b/dev-perl/Proc-Daemon/Manifest
index ee8464e13296..99b18263b80b 100644
--- a/dev-perl/Proc-Daemon/Manifest
+++ b/dev-perl/Proc-Daemon/Manifest
@@ -1,4 +1,18 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+AUX debian_pid.patch 905 SHA256 8795a1ddaabff4890943abd9085e598b76db009d2ac9900078c8562146d9aa32 SHA512 a7543d19476760471fce77accb1054c637cf86665c5806f0ac5c5e15a9bd21d2d92529e02a5bcaff01f9d6a7de88a22ae8e1a1e5e7377a305cc0b934435b5ce9 WHIRLPOOL 02125c5565e43689903d91cdaa74c612da3c9f521b65847fcd0c74225e81c18c3424ab7700a4320b8049284c93deaea43a443ca3d6ba8b5d186639b326c2b9b5
 DIST Proc-Daemon-0.14.tar.gz 14464 SHA256 8010d461a146b8c288a7b321e6e41e5b47b1774cae8cd7ee66cf2deca80b6f92 SHA512 d51b62e6ada2fc6702d582244a7db6171e942d0f3311e7be39cf503a7a17b73ed40916c1430fc7366dd6c97d72eb3e7af554c2ad1bc6d8fbf240bf3a2ed630ca WHIRLPOOL 5e3aa00d66f17e39165cbbf3fc11cfb6d01ddd0d8b80c5c7c55742ae392f83ab75b111d888c9c7f9e4311ccb69d92811c650b3e67d7cd9397f3601e8a1751723
+EBUILD Proc-Daemon-0.140.0-r1.ebuild 505 SHA256 e2909a273540febaabe827622e162df17b04687f1811c172e7c14af113953ffa SHA512 d32c20d6c99d5948857bb31082791371cafdfb8399ae88e7392fbc62211749ea4f12314f2db206efdd9838c3a206d3171e8049f953055ec6923bfc14b7eef1a3 WHIRLPOOL 4c8502b54cd5edf4f0b067b557d1049cc61b8ea6aac521f422881aa790d9975a2a768af59c675ac7d8325ed1ba1d9f8f9f37b88d1eefc504b6ed86c470f01172
 EBUILD Proc-Daemon-0.140.0.ebuild 453 SHA256 c6fd0aa5990be2fe383897d789a800e4c9eb7be5f79f9d9cd4f1db972402fac4 SHA512 7c60d1ad255f3a130658ce93f7ef593a135943268268239cff10e7d9526bcb7dfc5e7d172f2a9d039546527e072b85d507f4718dfffcf3034d6ad152048ad744 WHIRLPOOL 9ad1592e89d9fb6e7ff2d3753a8bdaa5173aff3e04ff2bd5877177dc60ff7dd9effd21403d8b665f67cdafa1f0eada41f5beacc02bbeb5ae7a440b237a1c58b9
-MISC ChangeLog 4306 SHA256 374fd3898abdb52f96749ac1c413e1c47e4db95475218a8e4f0007296d915873 SHA512 0003f4e6a856a44f2e0648d6a995d093f49b5f0db10697a2e1009a65138dd9b20cbfd299ea5cf571f2be84c619acaeb653ee1e7a2cd4576dbf4b9422a2c12c3a WHIRLPOOL 9ab2ccad698ee98be1c8bb2fb3ff69e4528ff262cf30fe9e6746915d72d2e1c71c7de4180a539a48736c2467c639080b4647040893a0b064d06704ba3f1bdd23
+MISC ChangeLog 4499 SHA256 0d2c8d2a4bfb71a4e954b58f18184699d840a6851525b72fa81555c0cc7c61cb SHA512 dc81d4235ad6b4ac7c7907032d5d41064c31aea736f3823b00df25bfd6f78446cfef145837ebf0a40a6bc7be0a658137ad0ddc7ff8acebbe43cd10303c8742ac WHIRLPOOL b1e53043b701cf770883e1b78a5be2570d625aa00b0e29d18bf57ae24a830f208612e40ab72c611ad02b2d598dee6cfb0bd83342c91c0a9df24438c36e6f6cd1
 MISC metadata.xml 296 SHA256 2950b6290b7e9bd991ecf9eb2974d7caac3e7b66ef469530688c7b405fd9bed5 SHA512 c20719159a94b1f3bfaa67615238415f6b4431ed7db5f9f3481978c4b1423ddc67a46466ec84e61327664777e1548fec41180430c40c14d2fe615a19f8d81f47 WHIRLPOOL 0186700cc6b18634dea9f1e26cd8e9f32a52f12f1ce5e93526e6b10a844a1f779993e03145643673c8d9f9bb877427eaaa82b93a5e35ad1a7105320a98e271a3
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.22 (GNU/Linux)
+
+iJwEAQEIAAYFAlKwSLEACgkQG9wOWsQutda0PwQAgJ/9Ahs9wc3KyL7P9w3W9r/e
+5NiMaGTVpMwM3szC2eYmzGRcGh3iK771Vc21uEBjBSA5cWWm2aqG6BeIn36/Qbwd
+gaEZhKFcKDfixobo2EbrkbJk4SWcIMNZhw3HVEG6agsi03VdNsWh1y9Q73p0gbTK
+AekmpakSIwrfIH1RthE=
+=A9qo
+-----END PGP SIGNATURE-----
diff --git a/dev-perl/Proc-Daemon/Proc-Daemon-0.140.0-r1.ebuild b/dev-perl/Proc-Daemon/Proc-Daemon-0.140.0-r1.ebuild
new file mode 100644
index 000000000000..269a58b82974
--- /dev/null
+++ b/dev-perl/Proc-Daemon/Proc-Daemon-0.140.0-r1.ebuild
@@ -0,0 +1,20 @@
+# Copyright 1999-2013 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/dev-perl/Proc-Daemon/Proc-Daemon-0.140.0-r1.ebuild,v 1.1 2013/12/17 12:45:07 zlogene Exp $
+
+EAPI=5
+
+MODULE_AUTHOR=DETI
+MODULE_SECTION=Proc
+MODULE_VERSION=0.14
+inherit perl-module
+
+DESCRIPTION="Perl Proc-Daemon -  Run Perl program as a daemon process"
+
+SLOT="0"
+KEYWORDS="~amd64 ~ppc ~ppc64 ~x86"
+IUSE=""
+
+PATCHES=( "${FILESDIR}"/debian_pid.patch )
+
+SRC_TEST="do"
diff --git a/dev-perl/Proc-Daemon/files/debian_pid.patch b/dev-perl/Proc-Daemon/files/debian_pid.patch
new file mode 100644
index 000000000000..646a8b212f47
--- /dev/null
+++ b/dev-perl/Proc-Daemon/files/debian_pid.patch
@@ -0,0 +1,25 @@
+Description: Fix too permissive umask
+Bug-Debian: http://bugs.debian.org/732283
+Bug: https://rt.cpan.org/Public/Bug/Display.html?id=91450
+Author: Axel Beckert <abe@debian.org>
+
+Index: libproc-daemon-perl/lib/Proc/Daemon.pm
+===================================================================
+--- libproc-daemon-perl.orig/lib/Proc/Daemon.pm	2013-08-29 16:50:09.000000000 +0200
++++ libproc-daemon-perl/lib/Proc/Daemon.pm	2013-12-16 20:20:36.000000000 +0100
+@@ -152,7 +152,7 @@
+             die "Can't <chdir> to $self->{work_dir}: $!" unless chdir $self->{work_dir};
+ 
+             # Clear the file creation mask.
+-            umask 0;
++            umask 066;
+ 
+             # Detach the child from the terminal (no controlling tty), make it the
+             # session-leader and the process-group-leader of a new process group.
+@@ -633,4 +633,4 @@
+     return $pid;
+ }
+ 
+-1;
+\ No newline at end of file
++1;