summaryrefslogtreecommitdiff
path: root/support
diff options
context:
space:
mode:
authorNorbert Preining <norbert@preining.info>2025-01-30 03:04:48 +0000
committerNorbert Preining <norbert@preining.info>2025-01-30 03:04:48 +0000
commitee4393e9e0d2a84e56e06872bc1e937c2574db71 (patch)
treeb255fa215f7cbe2d362c6c8a0eeaa22d8a7e532f /support
parenta9078ab6d9c5b76d9fae7c384f722a6300ab7cbf (diff)
CTAN sync 202501300304
Diffstat (limited to 'support')
-rw-r--r--support/texlab/CHANGELOG.md7
-rw-r--r--support/texlab/Cargo.lock3
-rw-r--r--support/texlab/Cargo.toml3
-rw-r--r--support/texlab/crates/base-db/Cargo.toml2
-rw-r--r--support/texlab/crates/ipc/Cargo.toml1
-rw-r--r--support/texlab/crates/ipc/src/lib.rs4
-rw-r--r--support/texlab/texlab.14
-rw-r--r--support/texlab/texlab.pdfbin26642 -> 26630 bytes
8 files changed, 18 insertions, 6 deletions
diff --git a/support/texlab/CHANGELOG.md b/support/texlab/CHANGELOG.md
index e13d9261d5..f56a43ed9c 100644
--- a/support/texlab/CHANGELOG.md
+++ b/support/texlab/CHANGELOG.md
@@ -5,6 +5,13 @@ All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+## [5.22.1] - 2024-01-29
+
+### Security
+
+- Don't store IPC socket (`texlab.sock`) in temp directory
+ (see [CWE-379](https://cwe.mitre.org/data/definitions/379.html), [#1331](https://github.com/latex-lsp/texlab/pull/1331/))
+
## [5.22.0] - 2024-01-26
### Added
diff --git a/support/texlab/Cargo.lock b/support/texlab/Cargo.lock
index d0bcd39a4e..27bf73491b 100644
--- a/support/texlab/Cargo.lock
+++ b/support/texlab/Cargo.lock
@@ -940,6 +940,7 @@ name = "ipc"
version = "0.0.0"
dependencies = [
"crossbeam-channel",
+ "dirs 6.0.0",
"expect-test",
"log",
"parser",
@@ -1794,7 +1795,7 @@ dependencies = [
[[package]]
name = "texlab"
-version = "5.22.0"
+version = "5.22.1"
dependencies = [
"anyhow",
"base-db",
diff --git a/support/texlab/Cargo.toml b/support/texlab/Cargo.toml
index fe64849bca..6773d86607 100644
--- a/support/texlab/Cargo.toml
+++ b/support/texlab/Cargo.toml
@@ -3,7 +3,7 @@ members = ["crates/*"]
resolver = "2"
[workspace.package]
-version = "5.22.0"
+version = "5.22.1"
license = "GPL-3.0"
authors = [
"Eric Förster <eric.foerster@outlook.com>",
@@ -16,6 +16,7 @@ rust-version = "1.80"
anyhow = "1.0.95"
criterion = "0.5.1"
crossbeam-channel = "0.5.14"
+dirs = "6.0.0"
expect-test = "1.5.1"
itertools = "0.13.0"
log = "0.4.25"
diff --git a/support/texlab/crates/base-db/Cargo.toml b/support/texlab/crates/base-db/Cargo.toml
index f3b57ed9c3..0764393b4c 100644
--- a/support/texlab/crates/base-db/Cargo.toml
+++ b/support/texlab/crates/base-db/Cargo.toml
@@ -8,7 +8,7 @@ rust-version.workspace = true
[dependencies]
bibtex-utils = { path = "../bibtex-utils" }
-dirs = "6.0.0"
+dirs.workspace = true
distro = { path = "../distro" }
itertools.workspace = true
line-index = { path = "../line-index" }
diff --git a/support/texlab/crates/ipc/Cargo.toml b/support/texlab/crates/ipc/Cargo.toml
index c00b98ff12..a10cb45ad9 100644
--- a/support/texlab/crates/ipc/Cargo.toml
+++ b/support/texlab/crates/ipc/Cargo.toml
@@ -8,6 +8,7 @@ rust-version.workspace = true
[dependencies]
crossbeam-channel.workspace = true
+dirs.workspace = true
serde.workspace = true
serde_json.workspace = true
log.workspace = true
diff --git a/support/texlab/crates/ipc/src/lib.rs b/support/texlab/crates/ipc/src/lib.rs
index 3da3239064..3d6bb40326 100644
--- a/support/texlab/crates/ipc/src/lib.rs
+++ b/support/texlab/crates/ipc/src/lib.rs
@@ -12,7 +12,9 @@ use std::os::unix::net::{UnixListener, UnixStream};
use uds_windows::{UnixListener, UnixStream};
fn socket_path() -> PathBuf {
- std::env::temp_dir().join("texlab.sock")
+ dirs::runtime_dir()
+ .unwrap_or(std::env::temp_dir())
+ .join("texlab.sock")
}
pub fn send_request<T: Serialize>(msg: T) -> io::Result<()> {
diff --git a/support/texlab/texlab.1 b/support/texlab/texlab.1
index 92555a24da..c5607737a9 100644
--- a/support/texlab/texlab.1
+++ b/support/texlab/texlab.1
@@ -1,7 +1,7 @@
.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.49.1.
-.TH TEXLAB "1" "January 2025" "texlab 5.22.0" "User Commands"
+.TH TEXLAB "1" "January 2025" "texlab 5.22.1" "User Commands"
.SH NAME
-texlab \- manual page for texlab 5.22.0
+texlab \- manual page for texlab 5.22.1
.SH SYNOPSIS
.B texlab
[\fI\,OPTIONS\/\fR] [\fI\,COMMAND\/\fR]
diff --git a/support/texlab/texlab.pdf b/support/texlab/texlab.pdf
index 8de2f9998a..a595072eee 100644
--- a/support/texlab/texlab.pdf
+++ b/support/texlab/texlab.pdf
Binary files differ