From 7ea7eb2248cf8cc48ab92c3ea747252107e6e576 Mon Sep 17 00:00:00 2001 From: Tobias Geerinckx-Rice Date: Tue, 16 Jan 2018 17:09:41 +0100 Subject: gnu: lxde: Use HTTPS for lxde.org home pages. * gnu/packages/lxde.scm (libfm, lxappearance, lxrandr, lxtask, lxterminal) (menu-cache, pcmanfm, lxmenu-data, lxde-icon-theme, lxde-common, lxinput) (lxsession, lxpanel)[home-page]: Use HTTPS. --- gnu/packages/lxde.scm | 26 +++++++++++++------------- 1 file changed, 13 insertions(+), 13 deletions(-) (limited to 'gnu/packages/lxde.scm') diff --git a/gnu/packages/lxde.scm b/gnu/packages/lxde.scm index 7d0aaa6503..c616917bb7 100644 --- a/gnu/packages/lxde.scm +++ b/gnu/packages/lxde.scm @@ -68,7 +68,7 @@ (define-public libfm (synopsis "File management support (core library)") (description "LibFM provides file management functions built on top of Glib/GIO giving a higher-level API.") - (home-page "http://lxde.org") + (home-page "https://lxde.org") (license license:gpl2+))) (define-public libfm-extra @@ -101,7 +101,7 @@ (define-public lxappearance (synopsis "LXDE GTK+ theme switcher") (description "LXAppearance is a desktop-independent GTK+ theme switcher able to change themes, icons, and fonts used by GTK+ applications.") - (home-page "http://lxde.org") + (home-page "https://lxde.org") (license license:gpl2+))) (define-public lxrandr @@ -127,7 +127,7 @@ (define-public lxrandr full frontend of it. LXRandR only gives you some easy and quick options which are intuitive. It's suitable for laptop users who frequently uses projectors or external monitor.") - (home-page "http://lxde.org") + (home-page "https://lxde.org") (license license:gpl2+))) (define-public lxtask @@ -151,7 +151,7 @@ (define-public lxtask (description "LXTask is a lightweight task manager derived from Xfce task manager with all dependencies on Xfce removed. LXTask is based on the GTK+ toolkit. It allows users to monitor and control of running processes.") - (home-page "http://lxde.org") + (home-page "https://lxde.org") (license license:gpl2+))) (define-public lxterminal @@ -181,7 +181,7 @@ (define-public lxterminal multiple tabs and has only minimal dependencies thus being completely desktop-independent. In order to reduce memory usage and increase the performance, all instances of the terminal are sharing a single process.") - (home-page "http://lxde.org") + (home-page "https://lxde.org") (license license:gpl2+))) (define-public menu-cache @@ -203,7 +203,7 @@ (define-public menu-cache (synopsis "LXDE implementation of the freedesktop menu's cache") (description "Menu-cache is a library creating and utilizing caches to speed up the access to freedesktop.org defined application menus.") - (home-page "http://lxde.org") + (home-page "https://lxde.org") (license license:lgpl2.1+))) (define-public pcmanfm @@ -232,7 +232,7 @@ (define-public pcmanfm (synopsis "LXDE file manager") (description "PCMan is a lightweight GTK+ based file manager, compliant with freedesktop.org standard.") - (home-page "http://lxde.org") + (home-page "https://lxde.org") (license license:gpl2+))) (define-public lxmenu-data @@ -255,7 +255,7 @@ (define-public lxmenu-data (description "Lxmenu-data provides files required to build freedesktop.org menu spec-compliant desktop menus for LXDE.") - (home-page "http://lxde.org") + (home-page "https://lxde.org") (license license:lgpl2.1+))) (define-public lxde-icon-theme @@ -276,7 +276,7 @@ (define-public lxde-icon-theme (synopsis "LXDE default icon theme based on nuoveXT2") (description "Lxde-icon-theme provides an default icon theme for LXDE.") - (home-page "http://lxde.org") + (home-page "https://lxde.org") (license license:lgpl3))) (define-public lxde-common @@ -315,7 +315,7 @@ (define-public lxde-common (synopsis "Common files of the LXDE Desktop") (description "Lxde-common provides common files of the LXDE Desktop.") - (home-page "http://lxde.org") + (home-page "https://lxde.org") (license license:gpl2+))) (define-public lxinput @@ -340,7 +340,7 @@ (define-public lxinput (description "Lxinput provides a small program to configure keyboard and mouse in LXDE.") - (home-page "http://lxde.org") + (home-page "https://lxde.org") (license license:gpl2+))) (define-public lxsession @@ -392,7 +392,7 @@ (define-public lxsession (synopsis "Lightweight X11 session manager") (description "Lxsession provides an lightweight X11 session manager.") - (home-page "http://lxde.org") + (home-page "https://lxde.org") (license license:gpl2+))) (define-public lxpanel @@ -443,7 +443,7 @@ (define-public lxpanel (synopsis "X11 Desktop panel for LXDE") (description "Lxpanel provides an X11 desktop panel for LXDE.") - (home-page "http://lxde.org") + (home-page "https://lxde.org") (license license:gpl2+))) (define-public lxde -- cgit v1.2.3 From b87bf3bbd4fbf064b2d22e4ba5a0727b1fb983b5 Mon Sep 17 00:00:00 2001 From: Tobias Geerinckx-Rice Date: Thu, 18 Jan 2018 01:02:51 +0100 Subject: gnu: lxterminal: Update to 0.3.1. * gnu/packages/lxde.scm (lxterminal): Update to 0.3.1. [source]: Remove patch for fixed CVE. [arguments]: No longer skip test suite which appear to be fixed. * gnu/packages/patches/lxterminal-CVE-2016-10369.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it. --- gnu/local.mk | 1 - gnu/packages/lxde.scm | 10 ++---- .../patches/lxterminal-CVE-2016-10369.patch | 37 ---------------------- 3 files changed, 3 insertions(+), 45 deletions(-) delete mode 100644 gnu/packages/patches/lxterminal-CVE-2016-10369.patch (limited to 'gnu/packages/lxde.scm') diff --git a/gnu/local.mk b/gnu/local.mk index b89077e876..5d43fac5ad 100644 --- a/gnu/local.mk +++ b/gnu/local.mk @@ -889,7 +889,6 @@ dist_patch_DATA = \ %D%/packages/patches/luminance-hdr-qt-printer.patch \ %D%/packages/patches/lvm2-static-link.patch \ %D%/packages/patches/lxsession-use-gapplication.patch \ - %D%/packages/patches/lxterminal-CVE-2016-10369.patch \ %D%/packages/patches/make-impure-dirs.patch \ %D%/packages/patches/mars-install.patch \ %D%/packages/patches/mars-sfml-2.3.patch \ diff --git a/gnu/packages/lxde.scm b/gnu/packages/lxde.scm index c616917bb7..02dacd3e87 100644 --- a/gnu/packages/lxde.scm +++ b/gnu/packages/lxde.scm @@ -4,6 +4,7 @@ ;;; Copyright © 2017 ng0 ;;; Copyright © 2017 Mathieu Othacehe ;;; Copyright © 2017 Brendan Tildesley +;;; Copyright © 2018 Tobias Geerinckx-Rice ;;; ;;; This file is part of GNU Guix. ;;; @@ -157,21 +158,16 @@ (define-public lxtask (define-public lxterminal (package (name "lxterminal") - (version "0.3.0") + (version "0.3.1") (source (origin (method url-fetch) (uri (string-append "mirror://sourceforge/lxde/LXTerminal" "%20%28terminal%20emulator%29/LXTerminal%20" version "/" name "-" version ".tar.xz")) - (patches (search-patches "lxterminal-CVE-2016-10369.patch")) (sha256 (base32 - "1yf76s15zvfw0h42b0ay1slpq47khgjmcry8ki2z812zar9lchia")))) + "0jrc3m0hbxcmcgahwjlm46s2350gh80ggb6a90xy0h6xqa3z73fd")))) (build-system gnu-build-system) - (arguments - `(;; Tests for "po" fail with "No rule to make target '../src/encoding.c' - ;; needed by 'lxterminal.pot'. Stop." - #:tests? #f)) (inputs `(("gtk+" ,gtk+-2) ("vte" ,vte/gtk+-2))) (native-inputs `(("intltool" ,intltool) diff --git a/gnu/packages/patches/lxterminal-CVE-2016-10369.patch b/gnu/packages/patches/lxterminal-CVE-2016-10369.patch deleted file mode 100644 index 809eef08da..0000000000 --- a/gnu/packages/patches/lxterminal-CVE-2016-10369.patch +++ /dev/null @@ -1,37 +0,0 @@ -Fix CVE-2016-10369: - -https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10369 - -Patch copied from upstream source repository: - -https://git.lxde.org/gitweb/?p=lxde/lxterminal.git;a=commit;h=f99163c6ff8b2f57c5f37b1ce5d62cf7450d4648 - -From f99163c6ff8b2f57c5f37b1ce5d62cf7450d4648 Mon Sep 17 00:00:00 2001 -From: Yao Wei -Date: Mon, 8 May 2017 00:47:55 +0800 -Subject: [PATCH] fix: use g_get_user_runtime_dir for socket directory - -This bug is pointed out by stackexchange user that putting socket file in -/tmp is a potential risk. Putting the socket dir in user directory could -mitigate the risk. ---- - src/unixsocket.c | 3 ++- - 1 file changed, 2 insertions(+), 1 deletion(-) - -diff --git a/src/unixsocket.c b/src/unixsocket.c -index 4c660ac..f88284c 100644 ---- a/src/unixsocket.c -+++ b/src/unixsocket.c -@@ -140,7 +140,8 @@ gboolean lxterminal_socket_initialize(LXTermWindow * lxtermwin, gint argc, gchar - * This function returns TRUE if this process should keep running and FALSE if it should exit. */ - - /* Formulate the path for the Unix domain socket. */ -- gchar * socket_path = g_strdup_printf("/tmp/.lxterminal-socket%s-%s", gdk_display_get_name(gdk_display_get_default()), g_get_user_name()); -+ gchar * socket_path = g_strdup_printf("%s/.lxterminal-socket-%s", g_get_user_runtime_dir(), gdk_display_get_name(gdk_display_get_default())); -+ printf("%s\n", socket_path); - - /* Create socket. */ - int fd = socket(PF_UNIX, SOCK_STREAM, 0); --- -2.1.4 - -- cgit v1.2.3