Skip to Content.
Sympa Menu

sm-commit - [SM-Commit] GIT changes to stable-rc-0.10 grimoire by Eric Sandall (26a2d1f42b84ddc73c36f7805c64eefe48e2156e)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Eric Sandall <scm AT sourcemage.org>
  • To: sm-commit AT lists.ibiblio.org
  • Subject: [SM-Commit] GIT changes to stable-rc-0.10 grimoire by Eric Sandall (26a2d1f42b84ddc73c36f7805c64eefe48e2156e)
  • Date: Thu, 17 May 2007 12:19:12 -0500

GIT changes to stable-rc-0.10 grimoire by Eric Sandall
<sandalle AT sourcemage.org>:

dev/null |binary
disk/ntfs-3g/DETAILS | 5 +++--
disk/ntfs-3g/HISTORY | 6 ++++++
graphics-libs/libpng/DETAILS | 6 +++---
graphics-libs/libpng/HISTORY | 5 +++++
net/samba/DETAILS | 10 +++++-----
net/samba/HISTORY | 16 ++++++++++++++++
net/samba/PRE_BUILD | 1 +
net/samba/pie.patch | 11 +++++++++++
net/samba/samba-3.0.24.tar.gz.sig | 0
10 files changed, 50 insertions(+), 10 deletions(-)

New commits:
commit 26a2d1f42b84ddc73c36f7805c64eefe48e2156e
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Eric Sandall <sandalle AT sourcemage.org>

libpng-1.2.18
(cherry picked from commit c3978f5e3f20fb3ebb86e57f0393777125055a57)

commit ac1ceb1d0c0acf5033a7378c65e9e6ad83c1cb77
Author: Ladislav Hagara <ladislav.hagara AT unob.cz>
Commit: Eric Sandall <sandalle AT sourcemage.org>

samba: added patch [Bug 13782]
(cherry picked from commit 1f632a97b3cd0f716af1e08501d2f93210cfe39d)

commit 8c95714d7017ff63d3d3d31c2b5a1946c8b61413
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Eric Sandall <sandalle AT sourcemage.org>

samba-3.0.25
(cherry picked from commit 063f650fb2d637a1501762368586c0361103668d)

commit e6830cc2624b1cb6bd2df55a151ef1954c96decd
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Eric Sandall <sandalle AT sourcemage.org>

ntfs-3g-1.516
(cherry picked from commit 968cebc0c447fe211a3a89a9e5a13601b878889d)

diff --git a/disk/ntfs-3g/DETAILS b/disk/ntfs-3g/DETAILS
index 5cd9b73..caf22e7 100755
--- a/disk/ntfs-3g/DETAILS
+++ b/disk/ntfs-3g/DETAILS
@@ -1,12 +1,13 @@
SPELL=ntfs-3g
- VERSION=1.417
-
SOURCE_HASH=sha512:14a4af303406ec249b4499ad9bdbafd7b7141a620674b1f021ebc22e4278fd0503375168a0a1ceadf1ba2c6c38f1bdf384c9f71c9de608872424f9c28ba21c6b
+ VERSION=1.516
+
SOURCE_HASH=sha512:a33984334bc950c974ece5812d5c72edae26b52806a9f5300605eaf23f42810ba5b618c7a96c38278e9f859cb7dad94d262b612ead1cf59cb26421013adb7947
SOURCE=$SPELL-$VERSION.tgz
SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
WEB_SITE=http://www.ntfs-3g.org/
SOURCE_URL[0]=$WEB_SITE/$SOURCE
LICENSE[0]=GPL
ENTERED=20060730
+ SECURITY_PATCH=1
KEYWORDS="ntfs driver"
SHORT="full access to ntfs file system"
cat << EOF
diff --git a/disk/ntfs-3g/HISTORY b/disk/ntfs-3g/HISTORY
index 3ef0c02..6279521 100644
--- a/disk/ntfs-3g/HISTORY
+++ b/disk/ntfs-3g/HISTORY
@@ -1,3 +1,9 @@
+2007-05-17 Treeve Jelbert <treeve AT sourcemage.org>
+ * DETAILS: version 1.516
+ SECURITY_PATCH=1
+ fix: Linux security exploit if ntfs-3g was setuid and the FUSE
+ kernel driver wasn't loaded yet during mount
+
2007-04-18 Treeve Jelbert <treeve AT sourcemage.org>
* DETAILS: version 1.417

diff --git a/graphics-libs/libpng/DETAILS b/graphics-libs/libpng/DETAILS
index 26a3209..c97d3f1 100755
--- a/graphics-libs/libpng/DETAILS
+++ b/graphics-libs/libpng/DETAILS
@@ -1,7 +1,7 @@
SPELL=libpng
- VERSION=1.2.16
-
SOURCE_HASH=sha512:cbeecc89130e050783829f7489e48def8f5cb280b68f00fcdca17276911b285e5a601a7c6b6d747dcf98ec6b0078ac71d853b487054fd85c6deed8930a3ceb38
- SECURITY_PATCH=1
+ VERSION=1.2.18
+
SOURCE_HASH=sha512:7d9df67576364681cfb8e207881429b80ae1e96ccb54c1ce315684827ae521321d2090570763c9fecb504e256abf6a5d72b3853980078ebc0ba224442e00fae0
+ SECURITY_PATCH=2
SOURCE=$SPELL-$VERSION.tar.bz2
SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
SOURCE_URL[0]=$SOURCEFORGE_URL/$SPELL/$SOURCE
diff --git a/graphics-libs/libpng/HISTORY b/graphics-libs/libpng/HISTORY
index 97f8d5b..d20d50e 100644
--- a/graphics-libs/libpng/HISTORY
+++ b/graphics-libs/libpng/HISTORY
@@ -1,3 +1,8 @@
+2007-05-16 Treeve Jelbert <treeve AT sourcemage.org>
+ * DETAILS: version 1.2.18
+ * SECURITY_PATCH++
+ Fixes CVE-2007-2445
+
2007-01-31 Treeve Jelbert <treeve AT sourcemage.org>
* DETAILS: version 1.2.16

diff --git a/net/samba/DETAILS b/net/samba/DETAILS
index dfaa5f7..bb44a83 100755
--- a/net/samba/DETAILS
+++ b/net/samba/DETAILS
@@ -1,5 +1,6 @@
SPELL=samba
- VERSION=3.0.24
+ VERSION=3.0.25
+
SOURCE_HASH=sha512:86d6070513bdbd1a656ec5c64bf81dfadac8271955a39e96e712d8ebc016756fba071cc2df3bcaad086963b8022d39cb7e177f4772e4c047369c4afc77ae3a8c
SOURCE=$SPELL-$VERSION.tar.gz
SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
SOURCE_URL[0]=http://us1.samba.org/samba/ftp/$SOURCE
@@ -7,16 +8,15 @@ SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION

SOURCE_URL[2]=ftp://www.mirror.ac.uk/sites/ftp.samba.org/pub/$SPELL/$SOURCE
SOURCE_URL[3]=ftp://de.samba.org/samba.org/$SOURCE
SOURCE_URL[4]=http://us1.samba.org/samba/ftp/old-versions/$SOURCE
-#
SOURCE_HASH=sha512:c9235befbea78c5d3c703ef6060e139d28ecaa24ce7784c508f1601
- SOURCE_GPG="gurus.gpg:${SOURCE}.sig"
+# SOURCE_GPG="gurus.gpg:${SOURCE}.sig"
if [[ "$SAMBA_VSCAN" == "y" ]] ; then
VSCAN_VERSION=0.3.6b
SOURCE2=$SPELL-vscan-$VSCAN_VERSION.tar.bz2
SOURCE2_URL[0]=$SOURCEFORGE_URL/openantivirus/$SOURCE2

SOURCE2_HASH=sha512:9e1fba0f59bf10450a6f6a17aa261ae321385fd539b9757d57bfe8fea29ceccdef01427bbf7327f906000ecae41b87ed85853151be52f9ceb2dce0afc519f063
fi
- SECURITY_PATCH=2
- PATCHLEVEL=1
+ SECURITY_PATCH=3
+ PATCHLEVEL=2
LICENSE[0]=GPL
WEB_SITE=http://www.samba.org/
KEYWORDS="net"
diff --git a/net/samba/HISTORY b/net/samba/HISTORY
index b334095..01b3243 100644
--- a/net/samba/HISTORY
+++ b/net/samba/HISTORY
@@ -1,3 +1,19 @@
+2007-05-17 Ladislav Hagara <hgr AT vabo.cz>
+ * PRE_BUILD, pie.patch: added patch [Bug 13782]
+
+2007-05-16 Treeve Jelbert <treeve AT sourcemage.org>
+ * DETAILS: version 3.0.35
+ SECURITY_PATCH++
+ o CVE-2007-2444
+ Local SID/Name translation bug can result in
+ user privilege elevation
+ o CVE-2007-2446
+ Multiple heap overflows allow remote code execution
+ o CVE-2007-2447
+ Unescaped user input parameters are passed as
+ arguments to /bin/sh allowing for remote command execution
+ fixes bug #13782
+
2007-02-05 Eric Sandall <sandalle AT sourcemage.org>
* DETAILS: Updated to 3.0.24 (Security update)
o CVE-2007-0452 (Potential Denial of Service bug in smbd)
diff --git a/net/samba/PRE_BUILD b/net/samba/PRE_BUILD
index 0292bd6..d742b1c 100755
--- a/net/samba/PRE_BUILD
+++ b/net/samba/PRE_BUILD
@@ -2,6 +2,7 @@ default_pre_build &&
cd $SOURCE_DIRECTORY &&

sedit 's!libsmbclient.*\$(LIBDIR)!&/..!' source/Makefile.in &&
+patch -p2 < $SCRIPT_DIRECTORY/pie.patch &&

if [[ "$SAMBA_VSCAN" == "y" ]] ; then
cd $SOURCE_DIRECTORY/examples/VFS/ &&
diff --git a/net/samba/pie.patch b/net/samba/pie.patch
new file mode 100644
index 0000000..f92cb1d
--- /dev/null
+++ b/net/samba/pie.patch
@@ -0,0 +1,11 @@
+--- branches/SAMBA_3_0_25/source/python/setup.py 2007/02/05 15:28:11
21153
++++ branches/SAMBA_3_0_25/source/python/setup.py 2007/05/14 09:47:58
22840
+@@ -67,6 +67,8 @@
+ libraries.append(lib[2:])
+ elif lib[0:8] == ("-pthread"):
+ pass # Skip linker flags
++ elif lib[0:4] == ("-pie"):
++ pass # Skip linker flags
+ elif lib[0:2] == "-L":
+ library_dirs.append(lib[2:])
+ elif lib[0:2] in ("-W","-s"):
diff --git a/net/samba/samba-3.0.24.tar.gz.sig
b/net/samba/samba-3.0.24.tar.gz.sig
deleted file mode 100644
index f3199c2..0000000
Binary files a/net/samba/samba-3.0.24.tar.gz.sig and /dev/null differ



  • [SM-Commit] GIT changes to stable-rc-0.10 grimoire by Eric Sandall (26a2d1f42b84ddc73c36f7805c64eefe48e2156e), Eric Sandall, 05/17/2007

Archive powered by MHonArc 2.6.24.

Top of Page