contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program without the -dSAFER option, which allows remote attackers to create, overwrite, rename, or delete arbitrary files via a crafted document.
The (1) gendef.sh, (2) doc/fixinfo.sh, and (3) contrib/gdiffmk/tests/runtests.in scripts in GNU troff (aka groff) 1.21 and earlier allow local users to overwrite arbitrary files via a symlink attack on a gro#####.tmp or /tmp/##### temporary file.
The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directo…
The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file, a differe…
contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file.
VuXML only (0) · listed, port not fixed yet
None. pkg audit reports nothing for this version.
Fixed (2)
VuXML entries whose affected range this version has left.
Utilize USE_ICONV. Fix PLIST_SUB when WITHOUT_INFO is defined and OSVERSION >= 470000. Rename for-loop iterators FILE to F, to avoid overriding FILE variable provided by bsd.port.mk. Stop using sub make in post-install rules.
Use ${MASTER_SITE_DEBIAN} instead of ${MASTER_SITE_GNU} for fetching the source archive of groff-1.18.1 until it will be uploaded at ftp.gnu.org again.
PR: 57490
Support .In macro in the text.
Submitted by: horikawa
Grouping MASTER_SITES and DIST_FILES. [1] Suppress warning "locale: not found" by nroff as /usr/bin/nroff does. [1] Support ja_JP.EUC in nroff for backward compatibility. PORTREVISION up.
Submitted by: kuriyama [1]
Japanese version of groff-1.17.
To format Japanese manual entries, -dlang=ja_JP.eucJP is required, e.g.
$ groff -dlang=ja_JP.eucJP -man -Tnippon ifconfig.8
To format English manual entries (if you want to use this instead of
/usr/bin/grof), -dlang=ja_JP.eucJP should not be used.
Submitted by:okazaki (MAINTAINER)
1) Install up-to-date tmac suite from recent 4-STABLE live-tree instead of copying unknown stock versions from /usr/share/tmac.
Submitted by: Yoshisato Yanagisawa <Yoshisato.Yanagisawa@is.titech.ac.jp>,
Kazuo Horikawa <horikawa@psinet.com>
at: [man-jp 3155], [man-jp 3158]
2) Read mdoc localization file not only in localized tty mode
but in all troff mode. This tweak avoids the problem that
headers and footers are not displayed for translated manual
pages when troff output device was a non typewriter-like one.
Submitted by: MORI Kouji <moriko@hh.iij4u.or.jp> at: [man-jp 2723]
Obey %%PORTDOCS%%. Increment PORTREVISION.
Fix last change. Use ${PERL} to modify troffrc and eqnrc instead of ${PATCH} with a static diff `files/rc.diff'. Remove entries of garbage files from `pkg-plist'.
USE ${MASTER_SITE_LOCAL} for PATCH_SITES, since the previous patch site was disappeared from the Net. Change maintainer's mail address.
Submitted by: distfiles survey from Bill Fenner.
Update with the new PORT{NAME,VERSION}/PKGNAME{PRE,SUF}FIX variables.
Now try to use those variables everywhere around DIST* and PATCH*
definitions as far as possible, for ease of the future updates and the
neatness.
Okay, 60% of `japanese' ports have been done. :)
o update the base version of GNU groff to 1.11.1 o update PATCH_SITES and PATCH_FILES too o change MAINTAINER to me <okazaki@be.to> (approved by Horikawa-san <horikawa@jp.FreeBSD.ORG>, the director of jpman: FreeBSD Japanese Manual Project) o use MANx and MANCOMPRESSED variable o use PATCH instead of /usr/bin/patch o sort PLIST
Most of the work of this fix was done by the force of
Kentaro Inagaki <inagaki@tg.rim.or.jp>, thanks!
PR: 15682
Submitted by: maintainer
Protect the pre-fetch: target with .if !defined(MASTER_SITE_OVERRIDE), because this master site should already have the tarball, not the uuencoded pieces. Submitted by: Andreas Schulz <ats@freebsd.first.gmd.de>
Temporary fix to pkg_create problem, instead of listing all the files just specify the directory name. (This is NOT recommended as a long- term fix and I'm going to back it out as soon as the pkg_create problem is corrected.)