October 2014 - crux-commits

ports/opt (3.1): libxml2-python: update to 2.9.2
by crux＠crux.nu 17 Oct '14

17 Oct '14

commit 51c0fdfdd5935edc94a76fd85e1dad4b744b5f7b Author: Juergen Daubert <jue(a)jue.li> Date: Fri Oct 17 12:08:58 2014 +0200 libxml2-python: update to 2.9.2 diff --git a/libxml2-python/.md5sum b/libxml2-python/.md5sum index 74de85e..f93ad34 100644 --- a/libxml2-python/.md5sum +++ b/libxml2-python/.md5sum @@ -1,2 +1,2 @@ -9c0cfef285d5c4a5c80d00904ddab380 libxml2-2.9.1.tar.gz -3addaad95e18fcfe2e465377a39a097e libxml2-python-config.patch +9e6a9aca9d155737868b3dc5fd82f788 libxml2-2.9.2.tar.gz +80fdb13ebd1e5d320783dc94d8b9c6d7 libxml2-python-config.patch diff --git a/libxml2-python/Pkgfile b/libxml2-python/Pkgfile index 0f5ea65..adca0a0 100644 --- a/libxml2-python/Pkgfile +++ b/libxml2-python/Pkgfile @@ -4,7 +4,7 @@ # Depends on: python libxml2 name=libxml2-python -version=2.9.1 +version=2.9.2 release=1 source=(ftp://xmlsoft.org/libxml2/libxml2-$version.tar.gz \ $name-config.patch) diff --git a/libxml2-python/libxml2-python-config.patch b/libxml2-python/libxml2-python-config.patch index 4271310..e2342a9 100644 --- a/libxml2-python/libxml2-python-config.patch +++ b/libxml2-python/libxml2-python-config.patch @@ -1,7 +1,7 @@ -diff -Nru libxml2-2.9.1.orig/python/Makefile.in libxml2-2.9.1/python/Makefile.in ---- libxml2-2.9.1.orig/python/Makefile.in 2013-04-19 09:58:10.989142606 +0200 -+++ libxml2-2.9.1/python/Makefile.in 2013-04-19 10:02:26.390025067 +0200 -@@ -435,7 +435,7 @@ +diff -Nru libxml2-2.9.2.orig/python/Makefile.in libxml2-2.9.2/python/Makefile.in +--- libxml2-2.9.2.orig/python/Makefile.in 2014-10-17 12:04:08.614853413 +0200 ++++ libxml2-2.9.2/python/Makefile.in 2014-10-17 12:04:25.037581668 +0200 +@@ -495,7 +495,7 @@ @WITH_PYTHON_TRUE@python_LTLIBRARIES = libxml2mod.la @WITH_PYTHON_TRUE@libxml2mod_la_SOURCES = libxml.c libxml_wrap.h libxml2-py.h libxml2-py.c types.c @WITH_PYTHON_TRUE@libxml2mod_la_LDFLAGS = $(CYGWIN_EXTRA_LDFLAGS) $(WIN32_EXTRA_LDFLAGS) -module -avoid-version \

1 0

ports/opt (3.1): [notify] libxml2: update to 2.9.2
by crux＠crux.nu 17 Oct '14

17 Oct '14

commit 420a6f92355e3b558eb49300745d7d8913634cc9 Author: Juergen Daubert <jue(a)jue.li> Date: Fri Oct 17 12:06:45 2014 +0200 [notify] libxml2: update to 2.9.2 includes two security fixes, see https://mail.gnome.org/archives/xml/2014-October/msg00051.html diff --git a/libxml2/.footprint b/libxml2/.footprint index e568068..adf0898 100644 --- a/libxml2/.footprint +++ b/libxml2/.footprint @@ -54,11 +54,14 @@ drwxr-xr-x root/root usr/include/libxml2/libxml/ -rw-r--r-- root/root usr/include/libxml2/libxml/xpathInternals.h -rw-r--r-- root/root usr/include/libxml2/libxml/xpointer.h drwxr-xr-x root/root usr/lib/ +drwxr-xr-x root/root usr/lib/cmake/ +drwxr-xr-x root/root usr/lib/cmake/libxml2/ +-rw-r--r-- root/root usr/lib/cmake/libxml2/libxml2-config.cmake -rw-r--r-- root/root usr/lib/libxml2.a -rwxr-xr-x root/root usr/lib/libxml2.la -lrwxrwxrwx root/root usr/lib/libxml2.so -> libxml2.so.2.9.1 -lrwxrwxrwx root/root usr/lib/libxml2.so.2 -> libxml2.so.2.9.1 --rwxr-xr-x root/root usr/lib/libxml2.so.2.9.1 +lrwxrwxrwx root/root usr/lib/libxml2.so -> libxml2.so.2.9.2 +lrwxrwxrwx root/root usr/lib/libxml2.so.2 -> libxml2.so.2.9.2 +-rwxr-xr-x root/root usr/lib/libxml2.so.2.9.2 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/libxml-2.0.pc -rw-r--r-- root/root usr/lib/xml2Conf.sh diff --git a/libxml2/.md5sum b/libxml2/.md5sum index 446b233..d562ac4 100644 --- a/libxml2/.md5sum +++ b/libxml2/.md5sum @@ -1 +1 @@ -9c0cfef285d5c4a5c80d00904ddab380 libxml2-2.9.1.tar.gz +9e6a9aca9d155737868b3dc5fd82f788 libxml2-2.9.2.tar.gz diff --git a/libxml2/Pkgfile b/libxml2/Pkgfile index 36f3c62..2af5eb4 100644 --- a/libxml2/Pkgfile +++ b/libxml2/Pkgfile @@ -5,7 +5,7 @@ # Depends on: zlib name=libxml2 -version=2.9.1 +version=2.9.2 release=1 source=(ftp://xmlsoft.org/libxml2/$name-$version.tar.gz)

1 0

ports/opt (3.1): dovecot: update to 2.2.14
by crux＠crux.nu 17 Oct '14

17 Oct '14

commit 0952d181394e28e85a5bb46741e3fda3779c3255 Author: Juergen Daubert <jue(a)jue.li> Date: Fri Oct 17 12:06:36 2014 +0200 dovecot: update to 2.2.14 diff --git a/dovecot/.footprint b/dovecot/.footprint index fd33922..2c15b64 100644 --- a/dovecot/.footprint +++ b/dovecot/.footprint @@ -73,6 +73,7 @@ drwxr-xr-x root/root usr/include/dovecot/ -rw-r--r-- root/root usr/include/dovecot/auth.h -rw-r--r-- root/root usr/include/dovecot/backtrace-string.h -rw-r--r-- root/root usr/include/dovecot/base64.h +-rw-r--r-- root/root usr/include/dovecot/bits.h -rw-r--r-- root/root usr/include/dovecot/bsearch-insert-pos.h -rw-r--r-- root/root usr/include/dovecot/buffer.h -rw-r--r-- root/root usr/include/dovecot/charset-utf8.h @@ -107,6 +108,7 @@ drwxr-xr-x root/root usr/include/dovecot/ -rw-r--r-- root/root usr/include/dovecot/dict-transaction-memory.h -rw-r--r-- root/root usr/include/dovecot/dict.h -rw-r--r-- root/root usr/include/dovecot/dns-lookup.h +-rw-r--r-- root/root usr/include/dovecot/doveadm-dsync.h -rw-r--r-- root/root usr/include/dovecot/doveadm-dump.h -rw-r--r-- root/root usr/include/dovecot/doveadm-mail-iter.h -rw-r--r-- root/root usr/include/dovecot/doveadm-mail.h @@ -119,6 +121,8 @@ drwxr-xr-x root/root usr/include/dovecot/ -rw-r--r-- root/root usr/include/dovecot/dovecot-version.h -rw-r--r-- root/root usr/include/dovecot/dsasl-client-private.h -rw-r--r-- root/root usr/include/dovecot/dsasl-client.h +-rw-r--r-- root/root usr/include/dovecot/dsync-brain.h +-rw-r--r-- root/root usr/include/dovecot/dsync-ibc.h -rw-r--r-- root/root usr/include/dovecot/duplicate.h -rw-r--r-- root/root usr/include/dovecot/eacces-error.h -rw-r--r-- root/root usr/include/dovecot/env-util.h @@ -150,6 +154,7 @@ drwxr-xr-x root/root usr/include/dovecot/ -rw-r--r-- root/root usr/include/dovecot/hmac.h -rw-r--r-- root/root usr/include/dovecot/home-expand.h -rw-r--r-- root/root usr/include/dovecot/hostpid.h +-rw-r--r-- root/root usr/include/dovecot/http-auth.h -rw-r--r-- root/root usr/include/dovecot/http-client-private.h -rw-r--r-- root/root usr/include/dovecot/http-client.h -rw-r--r-- root/root usr/include/dovecot/http-date.h @@ -161,6 +166,8 @@ drwxr-xr-x root/root usr/include/dovecot/ -rw-r--r-- root/root usr/include/dovecot/http-request.h -rw-r--r-- root/root usr/include/dovecot/http-response-parser.h -rw-r--r-- root/root usr/include/dovecot/http-response.h +-rw-r--r-- root/root usr/include/dovecot/http-server-private.h +-rw-r--r-- root/root usr/include/dovecot/http-server.h -rw-r--r-- root/root usr/include/dovecot/http-transfer.h -rw-r--r-- root/root usr/include/dovecot/http-url.h -rw-r--r-- root/root usr/include/dovecot/imap-arg.h @@ -239,6 +246,7 @@ drwxr-xr-x root/root usr/include/dovecot/ -rw-r--r-- root/root usr/include/dovecot/istream-attachment-extractor.h -rw-r--r-- root/root usr/include/dovecot/istream-base64.h -rw-r--r-- root/root usr/include/dovecot/istream-binary-converter.h +-rw-r--r-- root/root usr/include/dovecot/istream-callback.h -rw-r--r-- root/root usr/include/dovecot/istream-chain.h -rw-r--r-- root/root usr/include/dovecot/istream-concat.h -rw-r--r-- root/root usr/include/dovecot/istream-crlf.h @@ -414,6 +422,7 @@ drwxr-xr-x root/root usr/include/dovecot/ -rw-r--r-- root/root usr/include/dovecot/quota-private.h -rw-r--r-- root/root usr/include/dovecot/quota.h -rw-r--r-- root/root usr/include/dovecot/quoted-printable.h +-rw-r--r-- root/root usr/include/dovecot/rand.h -rw-r--r-- root/root usr/include/dovecot/randgen.h -rw-r--r-- root/root usr/include/dovecot/raw-storage.h -rw-r--r-- root/root usr/include/dovecot/raw-sync.h @@ -495,6 +504,11 @@ lrwxrwxrwx root/root usr/lib/dovecot/deliver -> dovecot-lda lrwxrwxrwx root/root usr/lib/dovecot/libdovecot-compression.so -> libdovecot-compression.so.0.0.0 lrwxrwxrwx root/root usr/lib/dovecot/libdovecot-compression.so.0 -> libdovecot-compression.so.0.0.0 -rwxr-xr-x root/root usr/lib/dovecot/libdovecot-compression.so.0.0.0 +-rw-r--r-- root/root usr/lib/dovecot/libdovecot-dsync.a +-rwxr-xr-x root/root usr/lib/dovecot/libdovecot-dsync.la +lrwxrwxrwx root/root usr/lib/dovecot/libdovecot-dsync.so -> libdovecot-dsync.so.0.0.0 +lrwxrwxrwx root/root usr/lib/dovecot/libdovecot-dsync.so.0 -> libdovecot-dsync.so.0.0.0 +-rwxr-xr-x root/root usr/lib/dovecot/libdovecot-dsync.so.0.0.0 -rw-r--r-- root/root usr/lib/dovecot/libdovecot-lda.a -rwxr-xr-x root/root usr/lib/dovecot/libdovecot-lda.la lrwxrwxrwx root/root usr/lib/dovecot/libdovecot-lda.so -> libdovecot-lda.so.0.0.0 @@ -556,6 +570,9 @@ drwxr-xr-x root/root usr/lib/dovecot/modules/doveadm/ -rw-r--r-- root/root usr/lib/dovecot/modules/lib05_snarf_plugin.a -rwxr-xr-x root/root usr/lib/dovecot/modules/lib05_snarf_plugin.la -rwxr-xr-x root/root usr/lib/dovecot/modules/lib05_snarf_plugin.so +-rw-r--r-- root/root usr/lib/dovecot/modules/lib10_last_login_plugin.a +-rwxr-xr-x root/root usr/lib/dovecot/modules/lib10_last_login_plugin.la +-rwxr-xr-x root/root usr/lib/dovecot/modules/lib10_last_login_plugin.so -rw-r--r-- root/root usr/lib/dovecot/modules/lib10_mail_filter_plugin.a -rwxr-xr-x root/root usr/lib/dovecot/modules/lib10_mail_filter_plugin.la -rwxr-xr-x root/root usr/lib/dovecot/modules/lib10_mail_filter_plugin.so @@ -627,8 +644,10 @@ drwxr-xr-x root/root usr/lib/dovecot/modules/doveadm/ drwxr-xr-x root/root usr/man/ drwxr-xr-x root/root usr/man/man1/ -rw-r--r-- root/root usr/man/man1/deliver.1.gz +-rw-r--r-- root/root usr/man/man1/doveadm-acl.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-altmove.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-auth.1.gz +-rw-r--r-- root/root usr/man/man1/doveadm-backup.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-batch.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-config.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-copy.1.gz @@ -640,6 +659,7 @@ drwxr-xr-x root/root usr/man/man1/ -rw-r--r-- root/root usr/man/man1/doveadm-fetch.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-flags.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-force-resync.1.gz +-rw-r--r-- root/root usr/man/man1/doveadm-fts.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-help.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-import.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-index.1.gz @@ -650,12 +670,15 @@ drwxr-xr-x root/root usr/man/man1/ -rw-r--r-- root/root usr/man/man1/doveadm-mount.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-move.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-penalty.1.gz +-rw-r--r-- root/root usr/man/man1/doveadm-proxy.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-purge.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-pw.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-quota.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-reload.1.gz +-rw-r--r-- root/root usr/man/man1/doveadm-replicator.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-search.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-stop.1.gz +-rw-r--r-- root/root usr/man/man1/doveadm-sync.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-user.1.gz -rw-r--r-- root/root usr/man/man1/doveadm-who.1.gz -rw-r--r-- root/root usr/man/man1/doveadm.1.gz diff --git a/dovecot/.md5sum b/dovecot/.md5sum index b7cd055..d16f90d 100644 --- a/dovecot/.md5sum +++ b/dovecot/.md5sum @@ -1,3 +1,3 @@ 7eaa958040fbd7169c86134439d4b632 dovecot -a3eb1c0b1822c4f2b0fe9247776baa71 dovecot-2.2.13.tar.gz +03315255920ee1c4b11039945246a8af dovecot-2.2.14.tar.gz 346f4af957cd9fabaee1bc3c729f300f dovecot-config.patch diff --git a/dovecot/Pkgfile b/dovecot/Pkgfile index ba3d12d..4ed9889 100644 --- a/dovecot/Pkgfile +++ b/dovecot/Pkgfile @@ -4,7 +4,7 @@ # Depends on: zlib bzip2 openssl tcp_wrappers libcap name=dovecot -version=2.2.13 +version=2.2.14 release=1 source=(http://dovecot.org/releases/2.2/$name-$version.tar.gz \ dovecot-config.patch dovecot)

1 0

ports/opt (3.1): lsof: 4.87 -> 4.88
by crux＠crux.nu 16 Oct '14

16 Oct '14

commit 718c4fdeebbc6cd2bb8dee7d7807d0877db32760 Author: Thomas Penteker <tek(a)serverop.de> Date: Thu Oct 16 23:24:53 2014 +0200 lsof: 4.87 -> 4.88 diff --git a/lsof/.md5sum b/lsof/.md5sum index d083abc..572ad40 100644 --- a/lsof/.md5sum +++ b/lsof/.md5sum @@ -1 +1 @@ -80e2a76d0e05826db910ec88e631296c lsof_4.87.tar.bz2 +1b29c10db4aa88afcaeeaabeef6790db lsof_4.88.tar.bz2 diff --git a/lsof/Pkgfile b/lsof/Pkgfile index 2af56d5..5a7a5af 100644 --- a/lsof/Pkgfile +++ b/lsof/Pkgfile @@ -4,7 +4,7 @@ # Packager: sten, nick dot steeves at shaw dot ca name=lsof -version=4.87 +version=4.88 release=1 source=(ftp://ftp.fu-berlin.de/pub/unix/tools/lsof/lsof_$version.tar.bz2)

1 0

ports/opt (3.1): mpg123: update to 1.21.0
by crux＠crux.nu 16 Oct '14

16 Oct '14

commit e98ae8258609448a4db858671796ae1bef22b4d4 Author: Juergen Daubert <jue(a)jue.li> Date: Thu Oct 16 19:08:50 2014 +0200 mpg123: update to 1.21.0 diff --git a/mpg123/.md5sum b/mpg123/.md5sum index e146463..b361d13 100644 --- a/mpg123/.md5sum +++ b/mpg123/.md5sum @@ -1 +1 @@ -1b3e8765aa608e306ede1ec507b67b23 mpg123-1.20.1.tar.bz2 +13a9df5d4e7aa110e4ae27cf30128ce9 mpg123-1.21.0.tar.bz2 diff --git a/mpg123/Pkgfile b/mpg123/Pkgfile index 8961c7c..7d09451 100644 --- a/mpg123/Pkgfile +++ b/mpg123/Pkgfile @@ -4,7 +4,7 @@ # Depends on: libtool, alsa-lib name=mpg123 -version=1.20.1 +version=1.21.0 release=1 source=(http://www.mpg123.de/download/$name-$version.tar.bz2)

1 0

ports/opt (3.1): fakeroot: update to 1.20.2
by crux＠crux.nu 16 Oct '14

16 Oct '14

commit 58b5b3aa329c171d63d0c90fea51aa83d210fbd9 Author: Juergen Daubert <jue(a)jue.li> Date: Thu Oct 16 19:04:38 2014 +0200 fakeroot: update to 1.20.2 diff --git a/fakeroot/.md5sum b/fakeroot/.md5sum index 4270f1c..43d5e0a 100644 --- a/fakeroot/.md5sum +++ b/fakeroot/.md5sum @@ -1 +1 @@ -ef246a7cadf85282180a1e27f7377a26 fakeroot_1.20.1.orig.tar.bz2 +a4b4564a75024aa96c86e4d1017ac786 fakeroot_1.20.2.orig.tar.bz2 diff --git a/fakeroot/Pkgfile b/fakeroot/Pkgfile index d81a6f4..d23f200 100644 --- a/fakeroot/Pkgfile +++ b/fakeroot/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: Juergen Daubert, jue at crux dot nu name=fakeroot -version=1.20.1 +version=1.20.2 release=1 source=(http://ftp.debian.org/debian/pool/main/f/$name/${name}_$version.ori…

1 0

ports/core (3.1): dhcpcd: update to 6.5.0
by crux＠crux.nu 16 Oct '14

16 Oct '14

commit e726210a2a0614dbbfa7c3353b69e80edc0f34c7 Author: Juergen Daubert <jue(a)jue.li> Date: Thu Oct 16 18:00:15 2014 +0200 dhcpcd: update to 6.5.0 diff --git a/dhcpcd/.md5sum b/dhcpcd/.md5sum index ff0e011..a469cd8 100644 --- a/dhcpcd/.md5sum +++ b/dhcpcd/.md5sum @@ -1 +1 @@ -b2289237a5b666a11178a9517c3f1240 dhcpcd-6.4.7.tar.bz2 +1c4de66bfd353dd97d34b120c8401d5a dhcpcd-6.5.0.tar.bz2 diff --git a/dhcpcd/Pkgfile b/dhcpcd/Pkgfile index ef8a4dd..3621745 100644 --- a/dhcpcd/Pkgfile +++ b/dhcpcd/Pkgfile @@ -4,7 +4,7 @@ # Depends on: eudev name=dhcpcd -version=6.4.7 +version=6.5.0 release=1 source=(http://roy.marples.name/downloads/dhcpcd/$name-$version.tar.bz2)

1 0

ports/core (3.1): sysklogd: update to 1.5.1
by crux＠crux.nu 16 Oct '14

16 Oct '14

commit 520dab34ad9993eb440e1580033800550102f3fe Author: Juergen Daubert <jue(a)jue.li> Date: Thu Oct 16 17:59:40 2014 +0200 sysklogd: update to 1.5.1 diff --git a/sysklogd/.md5sum b/sysklogd/.md5sum index b0bf520..f7742c8 100644 --- a/sysklogd/.md5sum +++ b/sysklogd/.md5sum @@ -1,6 +1,5 @@ 41dfad9077311e159c793216adf90723 rotatelog a1bb71ed6b0ce791cb7f9fa0089a09ef sysklogd -e053094e8103165f98ddafe828f6ae4b sysklogd-1.5.tar.gz -b87e652115b7b2d0cd1615a2323fcfbe sysklogd-1.5_CVE-2014-3634.diff +c70599ab0d037fde724f7210c2c8d7f8 sysklogd-1.5.1.tar.gz 844e5e75944beb8cf4f39a0535e56ba4 syslog f8d478b8d60c1d3879f4a10a955db6e5 syslog.conf diff --git a/sysklogd/Pkgfile b/sysklogd/Pkgfile index 379b8ca..6b1f8c8 100644 --- a/sysklogd/Pkgfile +++ b/sysklogd/Pkgfile @@ -3,21 +3,14 @@ # Maintainer: CRUX System Team, core-ports at crux dot nu name=sysklogd -version=1.5 -release=6 -source=(http://www.ibiblio.org/pub/Linux/system/daemons/$name-$version.tar.gz \ - rotatelog syslog syslog.conf sysklogd - $name-${version}_CVE-2014-3634.diff) +version=1.5.1 +release=1 +source=(http://www.infodrom.org/projects/$name/download/$name-$version.tar.gz \ + rotatelog syslog syslog.conf sysklogd) build() { cd $name-$version - # http://seclists.org/oss-sec/2014/q4/79 - patch -p1 -i $SRC/$name-${version}_CVE-2014-3634.diff - - # don't try to fclose(NULL) - sed -i -e '192d' ksym_mod.c - mkdir -p $PKG/usr/sbin \ $PKG/etc/{cron/weekly,rc.d} \ $PKG/var/log \ diff --git a/sysklogd/sysklogd-1.5_CVE-2014-3634.diff b/sysklogd/sysklogd-1.5_CVE-2014-3634.diff deleted file mode 100644 index bc64756..0000000 --- a/sysklogd/sysklogd-1.5_CVE-2014-3634.diff +++ /dev/null @@ -1,91 +0,0 @@ -From 43797330e75d7d4687b7ae6926a996c3c85c2679 Mon Sep 17 00:00:00 2001 -From: mancha <mancha1 AT zoho DOT com> -Date: Wed, 1 Oct 2014 -Subject: CVE-2014-3634 - -Rainer Gerhards, rsyslog project leader, discovered an issue in rsyslogd -where invalid priority values can trigger DoS and potentially RCE. - -As his analysis reveals, the cause of the problem identified in rsyslog's -rsyslogd also exists in sysklogd's syslogd (from which rsyslogd was forked) -and stems from the use of a (LOG_FACMASK|LOG_PRIMASK) mask to detect invalid -priority values. - -In sysklogd's syslogd, invalid priority values between 192 and 1023 (directly -or arrived at via overflow wraparound) can propagate through code causing -out-of-bounds access to the f_pmask array within the 'filed' structure by up -to 104 bytes past its end. Though most likely insufficient to reach -unallocated memory because there are around 544 bytes past f_pmask in 'filed' -(mod packing and other differences), incorrect access of fields at higher -positions of the 'filed' structure definition can cause unexpected behavior -including message mis-classification, forwarding issues, message loss, -or other. - -This patch imposes a restriction on PRI message parts and requires they -be properly-delimited priority value strings that have non-negative -numerical values not exceeding 191. As before, sysklogd's syslogd permits -zero padding to not break compatibility with RFC-non-compliant loggers that -issue PRIs such as <0091>. Messages without well-formed PRI parts get -logged with priority user.notice (13). (c.f. RFC 3164) - -Thanks to Rainer Gerhards for the initial report and analysis. - -[1] http://www.rsyslog.com/remote-syslog-pri-vulnerability/ -[2] http://www.rsyslog.com/remote-syslog-pri-vulnerability-cve-2014-3683/ - ---- - syslogd.c | 25 +++++++++++++++++++------ - 1 file changed, 19 insertions(+), 6 deletions(-) - ---- a/syslogd.c -+++ b/syslogd.c -@@ -632,6 +632,8 @@ int funix[MAXFUNIX] = { -1, }; - #define TABLE_ALLPRI 0xFF /* Value to indicate all priorities in f_pmask */ - #define LOG_MARK LOG_MAKEPRI(LOG_NFACILITIES, 0) /* mark "facility" */ - -+#define MAX_PRI 191 /* Maximum Priority per RFC 3164 */ -+ - /* - * Flags to logmsg(). - */ -@@ -1491,23 +1493,34 @@ void printline(hname, msg) - register char *p, *q; - register unsigned char c; - char line[MAXLINE + 1]; -- int pri; -+ unsigned int pri; // Valid Priority values are 0-191 -+ int prilen=0; // Track Priority value string len -+ int msglen; - - /* test for special codes */ -+ msglen=strlen(msg); - pri = DEFUPRI; - p = msg; - - if (*p == '<') { - pri = 0; -- while (isdigit(*++p)) -- { -- pri = 10 * pri + (*p - '0'); -+ while (--msglen > 0 && isdigit((unsigned char)*++p) && -+ pri <= MAX_PRI) { -+ pri = 10 * pri + (*p - '0'); -+ prilen++; - } -- if (*p == '>') -+ if (*p == '>' && prilen) - ++p; -+ else { -+ pri = DEFUPRI; -+ p = msg; -+ } - } -- if (pri &~ (LOG_FACMASK|LOG_PRIMASK)) -+ -+ if ((pri &~ (LOG_FACMASK|LOG_PRIMASK)) || (pri > MAX_PRI)) { - pri = DEFUPRI; -+ p = msg; -+ } - - memset (line, 0, sizeof(line)); - q = line;

1 0

ports/core (3.1): gettext: updated to 0.19.3
by crux＠crux.nu 16 Oct '14

16 Oct '14

commit 4572183b7b3eb8cafb999edf185df6b4da694f1b Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Thu Oct 16 17:05:20 2014 +0200 gettext: updated to 0.19.3 diff --git a/gettext/.footprint b/gettext/.footprint index f3d8957..867dc63 100644 --- a/gettext/.footprint +++ b/gettext/.footprint @@ -36,17 +36,17 @@ drwxr-xr-x root/root usr/lib/gettext/ lrwxrwxrwx root/root usr/lib/libasprintf.so -> libasprintf.so.0.0.0 lrwxrwxrwx root/root usr/lib/libasprintf.so.0 -> libasprintf.so.0.0.0 -rwxr-xr-x root/root usr/lib/libasprintf.so.0.0.0 --rwxr-xr-x root/root usr/lib/libgettextlib-0.19.2.so +-rwxr-xr-x root/root usr/lib/libgettextlib-0.19.3.so -rwxr-xr-x root/root usr/lib/libgettextlib.la -lrwxrwxrwx root/root usr/lib/libgettextlib.so -> libgettextlib-0.19.2.so +lrwxrwxrwx root/root usr/lib/libgettextlib.so -> libgettextlib-0.19.3.so -rw-r--r-- root/root usr/lib/libgettextpo.a -rwxr-xr-x root/root usr/lib/libgettextpo.la lrwxrwxrwx root/root usr/lib/libgettextpo.so -> libgettextpo.so.0.5.2 lrwxrwxrwx root/root usr/lib/libgettextpo.so.0 -> libgettextpo.so.0.5.2 -rwxr-xr-x root/root usr/lib/libgettextpo.so.0.5.2 --rwxr-xr-x root/root usr/lib/libgettextsrc-0.19.2.so +-rwxr-xr-x root/root usr/lib/libgettextsrc-0.19.3.so -rwxr-xr-x root/root usr/lib/libgettextsrc.la -lrwxrwxrwx root/root usr/lib/libgettextsrc.so -> libgettextsrc-0.19.2.so +lrwxrwxrwx root/root usr/lib/libgettextsrc.so -> libgettextsrc-0.19.3.so -rw-r--r-- root/root usr/lib/preloadable_libintl.so drwxr-xr-x root/root usr/man/ drwxr-xr-x root/root usr/man/man1/ diff --git a/gettext/.md5sum b/gettext/.md5sum index c8d261f..2be0ffe 100644 --- a/gettext/.md5sum +++ b/gettext/.md5sum @@ -1 +1 @@ -6898a2fc5d711b17278a59cfbfc10bc5 gettext-0.19.2.tar.gz +c365029ffc866fc4e485d9e5ca60b260 gettext-0.19.3.tar.gz diff --git a/gettext/Pkgfile b/gettext/Pkgfile index 16fa62b..9fcf4f3 100644 --- a/gettext/Pkgfile +++ b/gettext/Pkgfile @@ -4,7 +4,7 @@ # Depends on: ncurses acl name=gettext -version=0.19.2 +version=0.19.3 release=1 source=(http://ftp.gnu.org/gnu/$name/$name-$version.tar.gz)

1 0

ports/opt (3.1): [notify] flash-player-plugin: updated to 11.2.202.411
by crux＠crux.nu 16 Oct '14

16 Oct '14

commit ae45a6ac2f3645d47b070f19ead456c75b99d28d Author: Jose V Beneyto <sepen(a)crux.nu> Date: Thu Oct 16 06:36:21 2014 +0200 [notify] flash-player-plugin: updated to 11.2.202.411 Security update: http://helpx.adobe.com/security/products/flash-player/apsb14-22.html diff --git a/flash-player-plugin/.md5sum b/flash-player-plugin/.md5sum index 0c6a823..3b18536 100644 --- a/flash-player-plugin/.md5sum +++ b/flash-player-plugin/.md5sum @@ -1 +1 @@ -be59fd5b1076cb8ee5ec480b0a38aa08 flash-plugin-11.2.202.406-release.x86_64.rpm +764a1c2fd0617e0be89558a52bec9f89 flash-plugin-11.2.202.411-release.x86_64.rpm diff --git a/flash-player-plugin/Pkgfile b/flash-player-plugin/Pkgfile index 37541e4..c706f10 100644 --- a/flash-player-plugin/Pkgfile +++ b/flash-player-plugin/Pkgfile @@ -5,7 +5,7 @@ # Depends on: name=flash-player-plugin -version=11.2.202.406 +version=11.2.202.411 release=1 source=(http://fpdownload.macromedia.com/get/flashplayer/pdc/$version/flash…

1 0