commit bbfffdb46cf7f13735982861ae81bc79865f0b23 Author: Juergen Daubert <jue@jue.li> Date: Thu Aug 16 13:15:11 2018 +0200 rpcbind: update to 1.2.5 diff --git a/rpcbind/.footprint b/rpcbind/.footprint index 42b8460bc..04cb342ae 100644 --- a/rpcbind/.footprint +++ b/rpcbind/.footprint @@ -3,8 +3,9 @@ drwxr-xr-x root/root etc/rc.d/ -rwxr-xr-x root/root etc/rc.d/rpcbind drwxr-xr-x root/root sbin/ -rwxr-xr-x root/root sbin/rpcbind --rwxr-xr-x root/root sbin/rpcinfo drwxr-xr-x root/root usr/ +drwxr-xr-x root/root usr/bin/ +-rwxr-xr-x root/root usr/bin/rpcinfo drwxr-xr-x root/root usr/share/ drwxr-xr-x root/root usr/share/man/ drwxr-xr-x root/root usr/share/man/man8/ diff --git a/rpcbind/.md5sum b/rpcbind/.md5sum index 6d612eb59..de2508c5a 100644 --- a/rpcbind/.md5sum +++ b/rpcbind/.md5sum @@ -1,3 +1,2 @@ 78bfe054cf620249b228350f5e8730f7 rpcbind -cf10cd41ed8228fc54c316191c1f07fe rpcbind-0.2.4.tar.bz2 -db5756cdc1cf70ccf2d3e90d44fe404a rpcbind-CVE-2017-8779.patch +ed46f09b9c0fa2d49015f6431bc5ea7b rpcbind-1.2.5.tar.bz2 diff --git a/rpcbind/.signature b/rpcbind/.signature index 0cb048ab7..acead72af 100644 --- a/rpcbind/.signature +++ b/rpcbind/.signature @@ -1,7 +1,6 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/czjOQ51fjLRbMFJ+uZMCx8E2MpFQFAsPpG3rWqEFsR3ozDXf6Hd6gBpeeHv+quiS9P0toGhGYJDaztPydv1cws= -SHA256 (Pkgfile) = cbc90f456a15e54cc46459d88bae02b267b5155dfeef401704e2736ffc321525 -SHA256 (.footprint) = 6d7a05e556df2d89ba9965aa2c7afac7c362edb73ca0be465ba237dc4d2ac5e1 -SHA256 (rpcbind-0.2.4.tar.bz2) = 074a9a530dc7c11e0d905aa59bcb0847c009313f02e98d3d798aa9568f414c66 -SHA256 (rpcbind-CVE-2017-8779.patch) = df10706a774370ea9dd0c3ba65d7574088a82a0ab80a6c87164f0382f30b83fe +RWSE3ohX2g5d/e5xTS5zF7vQw7dWqRE0D7WUqDQiwFClgtqoYD+qpGo3GWxCztjDAMxDiKW0aSvQ5VtD5gk57Uy3xJQj4QkqSgA= +SHA256 (Pkgfile) = 530d6b85529e0515938e6a334873f4bfceeb2560472d9e8395e824d4a3ed633d +SHA256 (.footprint) = 1ddf9f1f75433e98fa2bfaae830f7115428f650b285ebc3e845da09a84290502 +SHA256 (rpcbind-1.2.5.tar.bz2) = 2ce360683963b35c19c43f0ee2c7f18aa5b81ef41c3fdbd15ffcb00b8bffda7a SHA256 (rpcbind) = b8173ec0b927705100eab42f24797ac36ea7c5987475cba47474b5c73a117f1a diff --git a/rpcbind/Pkgfile b/rpcbind/Pkgfile index 4613c1f7f..46006ef8d 100644 --- a/rpcbind/Pkgfile +++ b/rpcbind/Pkgfile @@ -4,23 +4,19 @@ # Depends on: libtirpc name=rpcbind -version=0.2.4 -release=3 +version=1.2.5 +release=1 source=(http://downloads.sourceforge.net/project/$name/$name/$version/$name-$version... \ - rpcbind-CVE-2017-8779.patch rpcbind) + rpcbind) build() { cd $name-$version - # security fix, see - # http://openwall.com/lists/oss-security/2017/05/03/12 - patch -p1 -i $SRC/rpcbind-CVE-2017-8779.patch - # use sunrpc instead of rpcbind as service-name sed '/servname\[\]/s/rpcbind/sunrpc/' -i src/rpcbind.c ./configure --prefix=/usr \ - --bindir=/sbin \ + --sbindir=/sbin \ --disable-libwrap \ --without-systemdsystemunitdir diff --git a/rpcbind/rpcbind-CVE-2017-8779.patch b/rpcbind/rpcbind-CVE-2017-8779.patch deleted file mode 100644 index 5c58cab5f..000000000 --- a/rpcbind/rpcbind-CVE-2017-8779.patch +++ /dev/null @@ -1,24 +0,0 @@ -# http://openwall.com/lists/oss-security/2017/05/03/12 -# https://github.com/guidovranken/rpcbomb - -diff --git a/src/rpcb_svc_com.c b/src/rpcb_svc_com.c -index 5862c26..e11f61b 100644 ---- a/src/rpcb_svc_com.c -+++ b/src/rpcb_svc_com.c -@@ -48,6 +48,7 @@ - #include <rpc/rpc.h> - #include <rpc/rpcb_prot.h> - #include <rpc/svc_dg.h> -+#include <rpc/rpc_com.h> - #include <netconfig.h> - #include <errno.h> - #include <syslog.h> -@@ -432,7 +433,7 @@ rpcbproc_taddr2uaddr_com(void *arg, struct svc_req *rqstp /*__unused*/, - static bool_t - xdr_encap_parms(XDR *xdrs, struct encap_parms *epp) - { -- return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), ~0)); -+ return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), RPC_MAXDATASIZE)); - } - - /*