Skip to content

Commit

Permalink
atril: don't enable dvi support by default. bump pkgrevision.
Browse files Browse the repository at this point in the history
This option is pulling in t1lib. t1lib is an enormous security risk.
It hasn't seen maintenance since 2011 and we have local patches for
security issues from 2011.

Given the lack of attention, it's likely there are more security
issues lurking.

Documents are usually obtained from untrusted sources, and thus are
considered a remote attack vector
Documents may embed their own fonts. If one embeds a T1 font, it might
be parsed by this unmaintained library.

To avoid this risk, rip out the t1lib dependency.
  • Loading branch information
coypoop committed Oct 28, 2019
1 parent 2e997b0 commit 3c7139d
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 4 deletions.
4 changes: 2 additions & 2 deletions print/atril/Makefile
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# $NetBSD: Makefile,v 1.49 2019/10/19 12:46:06 nia Exp $
# $NetBSD: Makefile,v 1.50 2019/10/28 21:49:22 maya Exp $

PKGREVISION= 5
PKGREVISION= 6
.include "../../meta-pkgs/mate/Makefile.common"

DISTNAME= atril-${VERSION:R}.1
Expand Down
4 changes: 2 additions & 2 deletions print/atril/options.mk
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
# $NetBSD: options.mk,v 1.3 2019/03/06 05:48:55 gutteridge Exp $
# $NetBSD: options.mk,v 1.4 2019/10/28 21:49:22 maya Exp $

PKG_OPTIONS_VAR= PKG_OPTIONS.atril
PKG_SUPPORTED_OPTIONS= dbus pdf ps xps dvi djvu tiff gdk-pixbuf keyring introspection
PKG_SUGGESTED_OPTIONS= dbus pdf ps xps dvi djvu tiff gdk-pixbuf keyring
PKG_SUGGESTED_OPTIONS= dbus pdf ps xps djvu tiff gdk-pixbuf keyring

.include "../../mk/bsd.options.mk"

Expand Down

0 comments on commit 3c7139d

Please sign in to comment.