Skip to Content.
Sympa Menu

sm-commit - [SM-Commit] GIT changes to master grimoire by Vlad Glagolev (0ed62c2b96012e1f46120296ba593c87e9c05443)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Vlad Glagolev <scm AT sourcemage.org>
  • To: sm-commit AT lists.ibiblio.org
  • Subject: [SM-Commit] GIT changes to master grimoire by Vlad Glagolev (0ed62c2b96012e1f46120296ba593c87e9c05443)
  • Date: Mon, 28 Jan 2013 16:13:47 -0600

GIT changes to master grimoire by Vlad Glagolev <stealth AT sourcemage.org>:

database/mysql/DETAILS | 3
database/mysql/HISTORY | 3
database/redis/DETAILS | 5 -
database/redis/HISTORY | 4
kernels/linux/HISTORY | 4
kernels/linux/info/patches/maintenance_patches_3/patch-3.0.59 | 5 +
kernels/linux/info/patches/maintenance_patches_3/patch-3.0.60 | 5 +
kernels/linux/info/patches/maintenance_patches_3/patch-3.0.61 | 5 +
kernels/linux/info/patches/maintenance_patches_3/patch-3.4.26 | 5 +
kernels/linux/info/patches/maintenance_patches_3/patch-3.4.27 | 5 +
kernels/linux/info/patches/maintenance_patches_3/patch-3.4.28 | 5 +
mail/dovecot/DETAILS | 4
mail/dovecot/HISTORY | 4
utils/xen/DETAILS | 2
utils/xen/HISTORY | 8 +
utils/xen/INSTALL | 6 -
utils/xen/PRE_BUILD | 5 +
utils/xen/xsa-27-1.patch | 12 ++
utils/xen/xsa-33.patch | 21 ++++
utils/xen/xsa-41-1.patch | 41 ++++++++
utils/xen/xsa-41.patch | 46
++++++++++
21 files changed, 189 insertions(+), 9 deletions(-)

New commits:
commit 0ed62c2b96012e1f46120296ba593c87e9c05443
Author: Vlad Glagolev <stealth AT sourcemage.org>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

linux: => 3.4.28 (lts)

commit 527c6b3d76a36e082f7f55ee25eb3f19c8b09d49
Author: Vlad Glagolev <stealth AT sourcemage.org>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

linux: => 3.0.61 (lts)

commit 7a2a1fc8b6e1bbc04199ce91587a02b2e4d1f223
Author: Vlad Glagolev <stealth AT sourcemage.org>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

xen: security update

commit a10913a8243acd371701ef6bf482ace27fb39746
Author: Vlad Glagolev <stealth AT sourcemage.org>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

dovecot: => 2.0.21 (security)

commit 577a1b2298d5790a20771c53951a87c706198794
Author: Vlad Glagolev <stealth AT sourcemage.org>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

mysql: => 5.1.66 (security)

commit 451910d450747441900749753ff4a7232aed4955
Author: Vlad Glagolev <stealth AT sourcemage.org>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

redis: => 2.6.9 (security)

diff --git a/database/mysql/DETAILS b/database/mysql/DETAILS
index 093b8cf..952d803 100755
--- a/database/mysql/DETAILS
+++ b/database/mysql/DETAILS
@@ -4,7 +4,8 @@ if [[ $OLD == y ]]; then

SECURITY_PATCH=4
else
- VERSION=5.1.61
+ VERSION=5.1.66
+ SECURITY_PATCH=1
fi
SOURCE=$SPELL-$VERSION.tar.gz
SOURCE2=$SOURCE.asc
diff --git a/database/mysql/HISTORY b/database/mysql/HISTORY
index 2a9dba1..3c9f378 100644
--- a/database/mysql/HISTORY
+++ b/database/mysql/HISTORY
@@ -1,3 +1,6 @@
+2013-01-29 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS: updated spell to 5.1.66; SECURITY_PATCH++ (CVE-2012-5611)
+
2012-06-26 Eric Sandall <sandalle AT sourcemage.org>
* CONFIGURE: Cleanup MSQL_ENGINES for "none"
* BUILD: Fix plugin configure flags
diff --git a/database/redis/DETAILS b/database/redis/DETAILS
index b4badce..c2e4920 100755
--- a/database/redis/DETAILS
+++ b/database/redis/DETAILS
@@ -1,8 +1,9 @@
SPELL=redis
- VERSION=2.6.7
+ VERSION=2.6.9
+ SECURITY_PATCH=1
SOURCE=$SPELL-$VERSION.tar.gz
SOURCE_URL[0]=http://redis.googlecode.com/files/$SOURCE
-
SOURCE_HASH=sha512:60ac4f5ae9fed038117cbcb5d81c0c1c6bb274ff9ed3792dbd5bac4bc5db835b87431c41a99ca1d455638171a587a27bdec882b175db69945d1493bcb62278cc
+
SOURCE_HASH=sha512:5263bccd4e175dd00318436be3818c07b880ba6f2e2552e1811d909fddf1fbbff5addbd684e116bd7f8cca727c61f6f45cd264fff61d2ffad18d57f6ae0456e5
SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
LICENSE[0]=BSD
WEB_SITE=http://redis.io/
diff --git a/database/redis/HISTORY b/database/redis/HISTORY
index dfb5cf3..9e0eff6 100644
--- a/database/redis/HISTORY
+++ b/database/redis/HISTORY
@@ -1,3 +1,7 @@
+2013-01-29 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS: updated spell to 2.6.9; SECURITY_PATCH++ (CVE-2013-0178 and
+ CVE-2013-0180 fixed in 2.6.8)
+
2012-12-03 Vlad Glagolev <stealth AT sourcemage.org>
* DETAILS: updated spell to 2.6.7

diff --git a/kernels/linux/HISTORY b/kernels/linux/HISTORY
index 8439ef1..bcd6adc 100644
--- a/kernels/linux/HISTORY
+++ b/kernels/linux/HISTORY
@@ -1,3 +1,7 @@
+2013-01-29 Vlad Glagolev <stealth AT sourcemage.org>
+ * info/patches/maintenance_patches_3/patch-3.0.{59-61}: added
+ * info/patches/maintenance_patches_3/patch-3.4.{26-28}: added
+
2013-01-28 Ladislav Hagara <hgr AT vabo.cz>
* latest.defaults: LATEST_maintenance_patches_3=patch-3.7.5
* info/patches/maintenance_patches_3/patch-3.7.5: added
diff --git a/kernels/linux/info/patches/maintenance_patches_3/patch-3.0.59
b/kernels/linux/info/patches/maintenance_patches_3/patch-3.0.59
new file mode 100755
index 0000000..1a4bd60
--- /dev/null
+++ b/kernels/linux/info/patches/maintenance_patches_3/patch-3.0.59
@@ -0,0 +1,5 @@
+appliedkernels="3.0"
+patchversion="${appliedkernels}.59"
+source="patch-${patchversion}.bz2"
+source_url="${KERNEL_URL}/pub/linux/kernel/v3.0/${source}"
+sha1sum="a78602dd69a4ae6d73e3c31bac49d8df75ff0507"
diff --git a/kernels/linux/info/patches/maintenance_patches_3/patch-3.0.60
b/kernels/linux/info/patches/maintenance_patches_3/patch-3.0.60
new file mode 100755
index 0000000..b84db23
--- /dev/null
+++ b/kernels/linux/info/patches/maintenance_patches_3/patch-3.0.60
@@ -0,0 +1,5 @@
+appliedkernels="3.0"
+patchversion="${appliedkernels}.60"
+source="patch-${patchversion}.bz2"
+source_url="${KERNEL_URL}/pub/linux/kernel/v3.0/${source}"
+sha1sum="47b2422d7b8c1f37af5508678b6a8d1d28bbc50b"
diff --git a/kernels/linux/info/patches/maintenance_patches_3/patch-3.0.61
b/kernels/linux/info/patches/maintenance_patches_3/patch-3.0.61
new file mode 100755
index 0000000..f69f59a
--- /dev/null
+++ b/kernels/linux/info/patches/maintenance_patches_3/patch-3.0.61
@@ -0,0 +1,5 @@
+appliedkernels="3.0"
+patchversion="${appliedkernels}.61"
+source="patch-${patchversion}.bz2"
+source_url="${KERNEL_URL}/pub/linux/kernel/v3.0/${source}"
+sha1sum="e746ae3def097d9dea8167927571c4719d812acb"
diff --git a/kernels/linux/info/patches/maintenance_patches_3/patch-3.4.26
b/kernels/linux/info/patches/maintenance_patches_3/patch-3.4.26
new file mode 100755
index 0000000..c2d520a
--- /dev/null
+++ b/kernels/linux/info/patches/maintenance_patches_3/patch-3.4.26
@@ -0,0 +1,5 @@
+appliedkernels="3.4"
+patchversion="${appliedkernels}.26"
+source="patch-${patchversion}.bz2"
+source_url="${KERNEL_URL}/pub/linux/kernel/v3.x/${source}"
+sha1sum="88a9e1b1cde17bffa167149d18b954ec90e7300f"
diff --git a/kernels/linux/info/patches/maintenance_patches_3/patch-3.4.27
b/kernels/linux/info/patches/maintenance_patches_3/patch-3.4.27
new file mode 100755
index 0000000..4be7118
--- /dev/null
+++ b/kernels/linux/info/patches/maintenance_patches_3/patch-3.4.27
@@ -0,0 +1,5 @@
+appliedkernels="3.4"
+patchversion="${appliedkernels}.27"
+source="patch-${patchversion}.bz2"
+source_url="${KERNEL_URL}/pub/linux/kernel/v3.x/${source}"
+sha1sum="91c8dad5c40b22e96a9a6b9b3abdd53f0105d058"
diff --git a/kernels/linux/info/patches/maintenance_patches_3/patch-3.4.28
b/kernels/linux/info/patches/maintenance_patches_3/patch-3.4.28
new file mode 100755
index 0000000..6f0fde7
--- /dev/null
+++ b/kernels/linux/info/patches/maintenance_patches_3/patch-3.4.28
@@ -0,0 +1,5 @@
+appliedkernels="3.4"
+patchversion="${appliedkernels}.28"
+source="patch-${patchversion}.bz2"
+source_url="${KERNEL_URL}/pub/linux/kernel/v3.x/${source}"
+sha1sum="3741dcb826d8cbbe79c28dc661860ace7ddba9d0"
diff --git a/mail/dovecot/DETAILS b/mail/dovecot/DETAILS
index 089c8af..38be93e 100755
--- a/mail/dovecot/DETAILS
+++ b/mail/dovecot/DETAILS
@@ -1,5 +1,5 @@
SPELL=dovecot
- VERSION=2.0.20
+ VERSION=2.0.21
SOURCE=$SPELL-$VERSION.tar.gz
SOURCE2=$SOURCE.sig
SOURCE2_IGNORE=signature
@@ -18,7 +18,7 @@ if [[ "$DOVECOT_PIGEONHOLE" == "y" ]]; then
fi
SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
ENTERED=20030224
- SECURITY_PATCH=5
+ SECURITY_PATCH=6
LICENSE[0]=LGPL2.1/LGPL2/MIT/BSD/PublicDomain
WEB_SITE=http://www.dovecot.org/
KEYWORDS="mail"
diff --git a/mail/dovecot/HISTORY b/mail/dovecot/HISTORY
index f49673c..bd39a09 100644
--- a/mail/dovecot/HISTORY
+++ b/mail/dovecot/HISTORY
@@ -1,3 +1,7 @@
+2013-01-29 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS: updated spell to 2.0.21; SECURITY_PATCH++ (fixes several
+ crashes not reported via CVEs)
+
2012-04-09 Andraž "ruskie" Levstik <ruskie+f03a580f AT codemages.net>
* DETAILS: updated spell to 2.0.20, pigeonhole to 0.2.6

diff --git a/utils/xen/DETAILS b/utils/xen/DETAILS
index dd80218..2cef0ce 100755
--- a/utils/xen/DETAILS
+++ b/utils/xen/DETAILS
@@ -1,6 +1,6 @@
SPELL=xen
VERSION=4.1.4
- SECURITY_PATCH=5
+ SECURITY_PATCH=6
SOURCE=${SPELL}-${VERSION}.tar.gz
SOURCE2=$SOURCE.sig
SOURCE2_IGNORE=signature
diff --git a/utils/xen/HISTORY b/utils/xen/HISTORY
index 118a9bf..97c01d6 100644
--- a/utils/xen/HISTORY
+++ b/utils/xen/HISTORY
@@ -1,3 +1,11 @@
+2013-01-29 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS: security update
+ * INSTALL: corrected multijob build
+ * PRE_BUILD: apply patches
+ * xsa-27-1.patch: added, to fix CVE-2012-5511
+ * xsa-33.patch: added, to fix CVE-2012-5634
+ * xsa-41{,-1}.patch: added, to fix CVE-2012-6075
+
2012-12-22 Vlad Glagolev <stealth AT sourcemage.org>
* DETAILS: updated spell to 4.1.4
* PRE_BUILD: removed patches
diff --git a/utils/xen/INSTALL b/utils/xen/INSTALL
index a60a3c6..0e01ff7 100755
--- a/utils/xen/INSTALL
+++ b/utils/xen/INSTALL
@@ -1,13 +1,13 @@
unset LDFLAGS &&
unset CFLAGS &&

+make_single &&
make install-xen install-tools &&

if [[ $XEN_STUBDOM == y ]]; then
- make_single &&
- make install-stubdom &&
- make_normal
+ make install-stubdom
fi &&
+make_normal &&

if [[ $INIT_INSTALLED ]]; then
install_config_file "$SPELL_DIRECTORY/init.d/xend.conf" \
diff --git a/utils/xen/PRE_BUILD b/utils/xen/PRE_BUILD
index c7f9a4a..f45d57a 100755
--- a/utils/xen/PRE_BUILD
+++ b/utils/xen/PRE_BUILD
@@ -1,6 +1,11 @@
default_pre_build &&
cd ${SOURCE_DIRECTORY} &&

+patch -p1 < "$SPELL_DIRECTORY/xsa-27-1.patch" &&
+patch -p1 < "$SPELL_DIRECTORY/xsa-33.patch" &&
+patch -p1 < "$SPELL_DIRECTORY/xsa-41.patch" &&
+patch -p1 < "$SPELL_DIRECTORY/xsa-41-1.patch" &&
+
if [[ $XEN_UPINIT != y ]]; then
sedit "s:all install-initd:all:" tools/hotplug/Linux/Makefile
fi &&
diff --git a/utils/xen/xsa-27-1.patch b/utils/xen/xsa-27-1.patch
new file mode 100644
index 0000000..4260b20
--- /dev/null
+++ b/utils/xen/xsa-27-1.patch
@@ -0,0 +1,12 @@
+--- a/xen/arch/x86/mm/paging.c Wed Jan 16 14:15:12 2013 +0000
++++ b/xen/arch/x86/mm/paging.c Thu Jan 17 11:17:32 2013 +0000
+@@ -534,7 +534,8 @@ int paging_log_dirty_range(struct domain
+
+ size = ((nr + BITS_PER_LONG - 1) / BITS_PER_LONG) * sizeof (long);
+ rv = 0;
+- for ( off = 0; !rv && off < size; off += sizeof zeroes )
++ off = 0;
++ while ( !rv && off < size )
+ {
+ int todo = min(size - off, (int) PAGE_SIZE);
+ if ( copy_to_guest_offset(dirty_bitmap, off, zeroes, todo) )
diff --git a/utils/xen/xsa-33.patch b/utils/xen/xsa-33.patch
new file mode 100644
index 0000000..d0bdeb4
--- /dev/null
+++ b/utils/xen/xsa-33.patch
@@ -0,0 +1,21 @@
+VT-d: fix interrupt remapping source validation for devices behind
+legacy bridges
+
+Using SVT_VERIFY_BUS here doesn't make sense; native Linux also
+uses SVT_VERIFY_SID_SQ here instead.
+
+This is XSA-33 / CVE-2012-5634.
+
+Signed-off-by: Jan Beulich <jbeulich AT suse.com>
+
+--- a/xen/drivers/passthrough/vtd/intremap.c
++++ b/xen/drivers/passthrough/vtd/intremap.c
+@@ -499,7 +499,7 @@ static void set_msi_source_id(struct pci_dev *pdev,
struct iremap_entry *ire)
+ set_ire_sid(ire, SVT_VERIFY_BUS, SQ_ALL_16,
+ (bus << 8) | pdev->bus);
+ else if ( pdev_type(bus, devfn) == DEV_TYPE_LEGACY_PCI_BRIDGE )
+- set_ire_sid(ire, SVT_VERIFY_BUS, SQ_ALL_16,
++ set_ire_sid(ire, SVT_VERIFY_SID_SQ, SQ_ALL_16,
+ PCI_BDF2(bus, devfn));
+ }
+ break;
diff --git a/utils/xen/xsa-41-1.patch b/utils/xen/xsa-41-1.patch
new file mode 100644
index 0000000..4ca750b
--- /dev/null
+++ b/utils/xen/xsa-41-1.patch
@@ -0,0 +1,41 @@
+From 2c0331f4f7d241995452b99afaf0aab00493334a Mon Sep 17 00:00:00 2001
+From: Michael Contreras <michael AT inetric.com>
+Date: Wed, 5 Dec 2012 13:31:30 -0500
+Subject: [PATCH] e1000: Discard oversized packets based on SBP|LPE
+
+Discard packets longer than 16384 when !SBP to match the hardware behavior.
+
+Signed-off-by: Michael Contreras <michael AT inetric.com>
+Signed-off-by: Stefan Hajnoczi <stefanha AT redhat.com>
+---
+ hw/e1000.c | 7 +++++--
+ 1 files changed, 5 insertions(+), 2 deletions(-)
+
+diff --git a/hw/e1000.c b/hw/e1000.c
+index 92fb00a..8fd1654 100644
+--- a/tools/ioemu-qemu-xen/hw/e1000.c
++++ b/tools/ioemu-qemu-xen/hw/e1000.c
+@@ -61,6 +61,8 @@ static int debugflags = DBGBIT(TXERR) | DBGBIT(GENERAL);
+
+ /* this is the size past which hardware will drop packets when setting
LPE=0 */
+ #define MAXIMUM_ETHERNET_VLAN_SIZE 1522
++/* this is the size past which hardware will drop packets when setting
LPE=1 */
++#define MAXIMUM_ETHERNET_LPE_SIZE 16384
+
+ /*
+ * HW models:
+@@ -809,8 +811,9 @@ e1000_receive(NetClientState *nc, const uint8_t *buf,
size_t size)
+ }
+
+ /* Discard oversized packets if !LPE and !SBP. */
+- if (size > MAXIMUM_ETHERNET_VLAN_SIZE
+- && !(s->mac_reg[RCTL] & E1000_RCTL_LPE)
++ if ((size > MAXIMUM_ETHERNET_LPE_SIZE ||
++ (size > MAXIMUM_ETHERNET_VLAN_SIZE
++ && !(s->mac_reg[RCTL] & E1000_RCTL_LPE)))
+ && !(s->mac_reg[RCTL] & E1000_RCTL_SBP)) {
+ return size;
+ }
+--
+1.7.0.4
+
diff --git a/utils/xen/xsa-41.patch b/utils/xen/xsa-41.patch
new file mode 100644
index 0000000..64f60c5
--- /dev/null
+++ b/utils/xen/xsa-41.patch
@@ -0,0 +1,46 @@
+From b0d9ffcd0251161c7c92f94804dcf599dfa3edeb Mon Sep 17 00:00:00 2001
+From: Michael Contreras <michael AT inetric.com>
+Date: Sun, 2 Dec 2012 20:11:22 -0800
+Subject: [PATCH] e1000: Discard packets that are too long if !SBP and !LPE
+
+The e1000_receive function for the e1000 needs to discard packets longer than
+1522 bytes if the SBP and LPE flags are disabled. The linux driver assumes
+this behavior and allocates memory based on this assumption.
+
+Signed-off-by: Michael Contreras <michael AT inetric.com>
+Signed-off-by: Anthony Liguori <aliguori AT us.ibm.com>
+---
+ hw/e1000.c | 10 ++++++++++
+ 1 files changed, 10 insertions(+), 0 deletions(-)
+
+diff --git a/hw/e1000.c b/hw/e1000.c
+index cb7e7e8..5537ad2 100644
+--- a/tools/ioemu-qemu-xen/hw/e1000.c
++++ b/tools/ioemu-qemu-xen/hw/e1000.c
+@@ -59,6 +59,9 @@ static int debugflags = DBGBIT(TXERR) | DBGBIT(GENERAL);
+ #define PNPMMIO_SIZE 0x20000
+ #define MIN_BUF_SIZE 60 /* Min. octets in an ethernet frame sans FCS */
+
++/* this is the size past which hardware will drop packets when setting
LPE=0 */
++#define MAXIMUM_ETHERNET_VLAN_SIZE 1522
++
+ /*
+ * HW models:
+ * E1000_DEV_ID_82540EM works with Windows and Linux
+@@ -805,6 +808,13 @@ e1000_receive(NetClientState *nc, const uint8_t *buf,
size_t size)
+ size = sizeof(min_buf);
+ }
+
++ /* Discard oversized packets if !LPE and !SBP. */
++ if (size > MAXIMUM_ETHERNET_VLAN_SIZE
++ && !(s->mac_reg[RCTL] & E1000_RCTL_LPE)
++ && !(s->mac_reg[RCTL] & E1000_RCTL_SBP)) {
++ return size;
++ }
++
+ if (!receive_filter(s, buf, size))
+ return size;
+
+--
+1.7.0.4
+



  • [SM-Commit] GIT changes to master grimoire by Vlad Glagolev (0ed62c2b96012e1f46120296ba593c87e9c05443), Vlad Glagolev, 01/28/2013

Archive powered by MHonArc 2.6.24.

Top of Page