[SM-Commit] GIT changes to devel-xorg-modular grimoire by Vlad Glagolev (0f66e4db44f55959544a37f9a9fd9a4e9648dbb7)

Vlad Glagolev scm at sourcemage.org
Mon Jan 9 16:46:13 EST 2012


GIT changes to devel-xorg-modular grimoire by Vlad Glagolev <stealth at sourcemage.org>:

 dev/null                                  |binary
 ftp/proftpd/DETAILS                       |    2 -
 ftp/proftpd/HISTORY                       |    3 +
 http/nginx/DETAILS                        |    4 +-
 http/nginx/HISTORY                        |    3 +
 net/unbound/DETAILS                       |    6 +--
 net/unbound/HISTORY                       |    4 ++
 utils/ipmitool/DETAILS                    |    9 ++--
 utils/ipmitool/HISTORY                    |    5 ++
 utils/ipmitool/PRE_BUILD                  |    4 ++
 utils/ipmitool/umask.patch                |   10 +++++
 utils/openipmi/BUILD                      |    3 +
 utils/openipmi/CONFIGURE                  |    4 ++
 utils/openipmi/DEPENDS                    |   58 ++++++++++++++++++++++++++++++
 utils/openipmi/DETAILS                    |   20 ++++------
 utils/openipmi/HISTORY                    |    7 +++
 utils/openipmi/OpenIPMI-2.0.18.tar.gz.sig |    0 
 17 files changed, 118 insertions(+), 24 deletions(-)

New commits:
commit 6f178b559f1e8cf3ec47e7f4bbebec6a99e3d362
Author: Vlad Glagolev <stealth at sourcemage.org>
Commit: Vlad Glagolev <stealth at sourcemage.org>

    openipmi: => 2.0.19

commit bc55e2a1cc5ac577badd6c590eba8075d06b339d
Author: Vlad Glagolev <stealth at sourcemage.org>
Commit: Vlad Glagolev <stealth at sourcemage.org>

    nginx: => 1.0.11 (stable), 1.1.12 (devel)

commit 9c93b19663b0d4d1cff249cd3d244b8ffc7fd95d
Author: Vlad Glagolev <stealth at sourcemage.org>
Commit: Vlad Glagolev <stealth at sourcemage.org>

    ipmitool: security update

commit 2e2880d60ea3d68f8522d9ebf270f0b86ab74b4f
Author: Vlad Glagolev <stealth at sourcemage.org>
Commit: Vlad Glagolev <stealth at sourcemage.org>

    unbound: => 1.4.14 (security)

commit 5c41beefd7f09bc81e1b3aa225e778132059e58c
Author: Vlad Glagolev <stealth at sourcemage.org>
Commit: Vlad Glagolev <stealth at sourcemage.org>

    proftpd: this was a security update

diff --git a/ftp/proftpd/DETAILS b/ftp/proftpd/DETAILS
index 735b1d0..03ee949 100755
--- a/ftp/proftpd/DETAILS
+++ b/ftp/proftpd/DETAILS
@@ -1,6 +1,6 @@
            SPELL=proftpd
          VERSION=1.3.4a
-  SECURITY_PATCH=1
+  SECURITY_PATCH=2
           SOURCE=$SPELL-$VERSION.tar.bz2
          SOURCE2=$SOURCE.asc
   SOURCE2_IGNORE=signature
diff --git a/ftp/proftpd/HISTORY b/ftp/proftpd/HISTORY
index 46939d3..99ac8f3 100644
--- a/ftp/proftpd/HISTORY
+++ b/ftp/proftpd/HISTORY
@@ -1,3 +1,6 @@
+2012-01-09 Vlad Glagolev <stealth at sourcemage.org>
+	* DETAILS: SECURITY_PATCH++ (CVE-2011-4130)
+
 2012-01-08 George Sherwood <gsherwood at sourcemage.org>
 	* DETAILS: Updated to version 1.3.4a
 
diff --git a/http/nginx/DETAILS b/http/nginx/DETAILS
index 6400c66..265d4c6 100755
--- a/http/nginx/DETAILS
+++ b/http/nginx/DETAILS
@@ -6,7 +6,7 @@ fi
 
 case "$NGINX_RELEASE" in
   stable)
-         VERSION=1.0.10
+         VERSION=1.0.11
   SECURITY_PATCH=1
   ;;
   legacy)
@@ -17,7 +17,7 @@ case "$NGINX_RELEASE" in
   SECURITY_PATCH=2
   ;;
   devel)
-         VERSION=1.1.10
+         VERSION=1.1.12
   SECURITY_PATCH=1
   ;;
 esac
diff --git a/http/nginx/HISTORY b/http/nginx/HISTORY
index 297a4ec..83c7296 100644
--- a/http/nginx/HISTORY
+++ b/http/nginx/HISTORY
@@ -1,3 +1,6 @@
+2012-01-10 Vlad Glagolev <stealth at sourcemage.org>
+	* DETAILS: updated spell to 1.0.11 (stable), 1.1.12 (devel)
+
 2011-12-02 Vlad Glagolev <stealth at sourcemage.org>
 	* DETAILS: updated spell to 1.1.10 (devel)
 
diff --git a/net/unbound/DETAILS b/net/unbound/DETAILS
index 9500951..0f3553e 100755
--- a/net/unbound/DETAILS
+++ b/net/unbound/DETAILS
@@ -1,10 +1,10 @@
            SPELL=unbound
-         VERSION=1.4.13
-  SECURITY_PATCH=1
+         VERSION=1.4.14
+  SECURITY_PATCH=2
           SOURCE=$SPELL-$VERSION.tar.gz
 SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
    SOURCE_URL[0]=http://www.unbound.net/downloads/$SOURCE
-     SOURCE_HASH=sha512:eb14f695eb917e9419d98b91058942732b15f4ace3529bf26fff8f8661858b9a19d621f07024f654260d6079a05e3c48a71d271096421365c29dc5a321e3ac17
+     SOURCE_HASH=sha512:9e1180334f8b5d71886279f4bf35f1958a062890d932c07b7c648167ca38689a3f11fe498a4e53a1499fde6038987feb0dded0deb561f91830616a7f94f8f49b
         WEB_SITE=http://www.unbound.net/
          ENTERED=20110104
          LICENSE=BSD
diff --git a/net/unbound/HISTORY b/net/unbound/HISTORY
index 5a7feaf..3c4640d 100644
--- a/net/unbound/HISTORY
+++ b/net/unbound/HISTORY
@@ -1,3 +1,7 @@
+2012-01-09 Vlad Glagolev <stealth at sourcemage.org>
+	* DETAILS: updated spell to 1.4.14; SECURITY_PATCH++
+	  (CVE-2011-4528, CVE-2011-4869)
+
 2011-12-13 Vlad Glagolev <stealth at sourcemage.org>
 	* DETAILS: updated spell to 1.4.13
 	* DEPENDS: added missing deps
diff --git a/utils/ipmitool/DETAILS b/utils/ipmitool/DETAILS
index 26d4d88..e1d9930 100755
--- a/utils/ipmitool/DETAILS
+++ b/utils/ipmitool/DETAILS
@@ -1,15 +1,14 @@
            SPELL=ipmitool
          VERSION=1.8.11
+  SECURITY_PATCH=1
      SOURCE_HASH=sha512:48093790baf2532887ac87de9b55fbe38f46f271b84e6152e6b0ba11170b29aad78dfcd42036389750edbedff325476b8366b3ea1401b97148b8bc8c1bd71e4b
           SOURCE="$SPELL-$VERSION.tar.gz"
    SOURCE_URL[0]="$SOURCEFORGE_URL/$SPELL/$SOURCE"
 SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
-        WEB_SITE="http://$SPELL.sourceforge.net"
-   FRESHMEAT_URL="http://freshmeat.net/projects/$SPELL/"
+        WEB_SITE=http://ipmitool.sourceforge.net
       LICENSE[0]='BSD'
-         UPDATED=20060214
-           SHORT='A command-line utility to control IPMI-enabled devices'
-## Auto-generated from Freshmeat.net's project descriptor
+         ENTERED=20060214
+           SHORT="command-line utility to control IPMI-enabled devices"
 cat << EOF
 IPMItool is a simple command-line interface to systems that support the
 Intelligent Platform Management Interface (IPMI) specification. It provides
diff --git a/utils/ipmitool/HISTORY b/utils/ipmitool/HISTORY
index fc76260..2135e79 100644
--- a/utils/ipmitool/HISTORY
+++ b/utils/ipmitool/HISTORY
@@ -1,3 +1,8 @@
+2012-01-10 Vlad Glagolev <stealth at sourcemage.org>
+	* DETAILS: SECURITY_PATCH=1; UPDATED -> ENTERED; cleaned up
+	* PRE_BUILD: added, to apply the patch
+	* umask.patch: added, to fix security issue (CVE-2011-4339)
+
 2011-10-14 Bor Kraljič <pyrobor at ver.si>
 	* DETAILS: fixed long description wrap (scripted)
 
diff --git a/utils/ipmitool/PRE_BUILD b/utils/ipmitool/PRE_BUILD
new file mode 100755
index 0000000..06fbbe0
--- /dev/null
+++ b/utils/ipmitool/PRE_BUILD
@@ -0,0 +1,4 @@
+default_pre_build &&
+cd "$SOURCE_DIRECTORY" &&
+
+patch -p0 < "$SPELL_DIRECTORY/umask.patch"
diff --git a/utils/ipmitool/umask.patch b/utils/ipmitool/umask.patch
new file mode 100644
index 0000000..58b9898
--- /dev/null
+++ b/utils/ipmitool/umask.patch
@@ -0,0 +1,10 @@
+--- lib/helper.c.orig
++++ lib/helper.c
+@@ -427,7 +427,6 @@ ipmi_start_daemon(struct ipmi_intf *intf
+ #endif
+ 
+ 	chdir("/");
+-	umask(0);
+ 
+ 	for (fd=0; fd<64; fd++) {
+ 		if (fd != intf->fd)
diff --git a/utils/openipmi/BUILD b/utils/openipmi/BUILD
index 589720d..d22e99f 100755
--- a/utils/openipmi/BUILD
+++ b/utils/openipmi/BUILD
@@ -1,2 +1,3 @@
 make_single &&
-default_build
+default_build &&
+make_normal
diff --git a/utils/openipmi/CONFIGURE b/utils/openipmi/CONFIGURE
new file mode 100755
index 0000000..db30bda
--- /dev/null
+++ b/utils/openipmi/CONFIGURE
@@ -0,0 +1,4 @@
+config_query_list OPENIPMI_GLIB "Build OS handler (via glib)?" \
+                                2.0 \
+                                1.2 \
+                                no
diff --git a/utils/openipmi/DEPENDS b/utils/openipmi/DEPENDS
new file mode 100755
index 0000000..f78cabb
--- /dev/null
+++ b/utils/openipmi/DEPENDS
@@ -0,0 +1,58 @@
+depends popt &&
+depends ncurses &&
+
+optional_depends gdbm "" "" "for local SDR caching" &&
+
+if [[ $OPENIPMI_GLIB == 2.0 ]]; then
+  depends glib2 "--with-glib --without-glib12 --with-glibver=$OPENIPMI_GLIB"
+elif [[ $OPENIPMI_GLIB == 1.2 ]]; then
+  depends glib "--with-glib12 --without-glib --with-glibver=$OPENIPMI_GLIB"
+else
+  OPTS="--without-glib --without-glib12 $OPTS"
+fi &&
+
+if [[ $OPENIPMI_GLIB != no ]]; then
+  depends pkgconfig
+fi &&
+
+optional_depends net-snmp \
+                 "--with-ucdsnmp" \
+                 "--without-ucdsnmp" \
+                 "for SNMP support" &&
+
+optional_depends openssl \
+                 "--with-openssl" \
+                 "--without-openssl" \
+                 "for IPMI 2.0 RMCP+ encryption and authentication support" &&
+
+# needs testing
+optional_depends tcl \
+                 "--with-tcl" \
+                 "--without-tcl" \
+                 "for Tcl OS handler (also needed for GUI)" &&
+
+optional_depends swig \
+                 "--with-swig" \
+                 "--without-swig" \
+                 "for language bindings support" &&
+
+if is_depends_enabled $SPELL swig; then
+  optional_depends perl \
+                   "--with-perl" \
+                   "--without-perl" \
+                   "for Perl support" &&
+
+  optional_depends python \
+                   "--with-python" \
+                   "--without-python" \
+                   "for Python support (also needed for GUI)" &&
+
+  if is_depends_enabled $SPELL tcl && \
+     is_depends_enabled $SPELL python && \
+     is_depends_enabled python tk; then
+       # could be "optional_depends python -sub TK" if we had that
+       config_query_option OPENIPMI_OPTS "Enable GUI?" y \
+                                         "--with-tkinter" \
+                                         "--without-tkinter"
+  fi
+fi
diff --git a/utils/openipmi/DETAILS b/utils/openipmi/DETAILS
index dc1f4cf..eedbff5 100755
--- a/utils/openipmi/DETAILS
+++ b/utils/openipmi/DETAILS
@@ -1,17 +1,15 @@
            SPELL=openipmi
-         VERSION=2.0.18
-#     SOURCE_HASH='sha512:d87a63a9fa209476622ebd69bc82e44b6841686a50c7f60165a8f32f77e4634797e5a54cac8d349869ceed40ce6d7f998edf5c55d05d6510dd174482d05d11a8'
-          SOURCE="OpenIPMI-$VERSION.tar.gz"
-      SOURCE_GPG="gurus.gpg:$SOURCE.sig:WORKS_FOR_ME"
-   SOURCE_URL[0]="$SOURCEFORGE_URL/$SPELL/$SOURCE"
-SOURCE_DIRECTORY="$BUILD_DIRECTORY/OpenIPMI-$VERSION"
-        WEB_SITE="http://$SPELL.sourceforge.net/"
-   FRESHMEAT_URL="http://freshmeat.net/projects/$SPELL/"
-      LICENSE[0]='LGPL'
-           SHORT='An IPMI device driver and support library'
+          SPELLX=OpenIPMI
+         VERSION=2.0.19
+     SOURCE_HASH=sha512:ee95eb64b7cde3f22c8444a5f8e3172808b0bb9a3a7034c1302c5f568c1cc0852a44ccc836924267b5f9901f7a8a3f4c66272cc0b663aa55689d7529841217cb
+          SOURCE="$SPELLX-$VERSION.tar.gz"
+   SOURCE_URL[0]=$SOURCEFORGE_URL/$SPELL/$SOURCE
+SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELLX-$VERSION"
+        WEB_SITE=http://openipmi.sourceforge.net/
+      LICENSE[0]=LGPL
+           SHORT="IPMI device driver and support library"
 cat << EOF
 OpenIPMI is an effort to create a full-function IPMI system to allow full
 access to all IPMI information on a server and to abstract it to a level that
 will make it easy to use.
 EOF
-## Auto-generated from Freshmeat.net's project descriptor
diff --git a/utils/openipmi/HISTORY b/utils/openipmi/HISTORY
index cb3299c..242fcfc 100644
--- a/utils/openipmi/HISTORY
+++ b/utils/openipmi/HISTORY
@@ -1,3 +1,9 @@
+2012-01-10 Vlad Glagolev <stealth at sourcemage.org>
+	* DETAILS: updated spell to 2.0.19; cleaned up
+	* BUILD: added make_normal
+	* DEPENDS: added, for missing dependencies
+	* CONFIGURE: added, to select glib branch
+
 2010-12-22 Eric Sandall <sandalle at sourcemage.org>
 	* DETAILS: Updated to 2.0.18
 	  Removed UPDATED
@@ -14,4 +20,3 @@
 
 2006-03-06 Sergey Lipnevich <sergey at sourcemage.org>
 	* ALL: spell created.
-
diff --git a/utils/openipmi/OpenIPMI-2.0.18.tar.gz.sig b/utils/openipmi/OpenIPMI-2.0.18.tar.gz.sig
deleted file mode 100644
index 7c2f604..0000000
Binary files a/utils/openipmi/OpenIPMI-2.0.18.tar.gz.sig and /dev/null differ


More information about the SM-Commit mailing list