sm-commit AT lists.ibiblio.org
Subject: Source Mage code commit list
List archive
[SM-Commit] GIT changes to master grimoire by Treeve Jelbert (2099df5c93c7ba5fd02efe75126f553df39820f5)
- From: Treeve Jelbert <scm AT sourcemage.org>
- To: sm-commit AT lists.ibiblio.org
- Subject: [SM-Commit] GIT changes to master grimoire by Treeve Jelbert (2099df5c93c7ba5fd02efe75126f553df39820f5)
- Date: Mon, 28 Aug 2017 09:04:05 +0000
GIT changes to master grimoire by Treeve Jelbert <treeve AT sourcemage.org>:
disk/libblockdev/DETAILS | 4
disk/libblockdev/HISTORY | 3
kde5-net/kio-extras/DEPENDS | 9 +-
kde5-net/kio-extras/HISTORY | 3
net/libmnl/DETAILS | 6 -
net/libmnl/HISTORY | 3
printer/cups-filters/DETAILS | 4
printer/cups-filters/HISTORY | 3
science-libs/eigen3/DETAILS | 6 -
science-libs/eigen3/HISTORY | 3
shell-term-fm/bash/DETAILS | 2
shell-term-fm/bash/HISTORY | 3
shell-term-fm/bash/patches/bash43-047 | 150
++++++++++++++++++++++++++++++++++
shell-term-fm/bash/patches/bash43-048 | 54 ++++++++++++
14 files changed, 239 insertions(+), 14 deletions(-)
New commits:
commit 2099df5c93c7ba5fd02efe75126f553df39820f5
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Treeve Jelbert <treeve AT sourcemage.org>
bash: => 4.3-048
commit dd159aaf0e6776760f2b4682df9895c618f6b8af
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Treeve Jelbert <treeve AT sourcemage.org>
libblockdev: => 2.11-1
commit b50404588fcfc146823d6074de574e5e15d5664e
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Treeve Jelbert <treeve AT sourcemage.org>
eigen3: => 3.3.4
commit 3dac9ff6a6d18cecfc7ad6cee484676cbf8f31c2
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Treeve Jelbert <treeve AT sourcemage.org>
libmnl: => 1.0.4
commit 84b1408494775805b639bd65ae5f134e71a502d8
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Treeve Jelbert <treeve AT sourcemage.org>
cups-filters: => 1.17.2
commit 5ec3ce8d77c009f406055646bfe6e3795439cb85
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Treeve Jelbert <treeve AT sourcemage.org>
kio-extras - tweak depends
diff --git a/disk/libblockdev/DETAILS b/disk/libblockdev/DETAILS
index 914d658..9b0a91e 100755
--- a/disk/libblockdev/DETAILS
+++ b/disk/libblockdev/DETAILS
@@ -1,6 +1,6 @@
SPELL=libblockdev
- VERSION=2.10-1
-
SOURCE_HASH=sha512:f808fd327b0e250cfb97a06ea716b5eb5c6812301b7da1cd6b757b3af44ceca038fe549f607b71fa395cfb1da6c70c20c8a224953fbc30ebe36c3d0e897eb15b
+ VERSION=2.11-1
+
SOURCE_HASH=sha512:986fc37c69755b262b9a093cd7e9c5be5b8225e2ff37ef4157db63eaa0f47298813971ef09c76d70b5da3881b8cd8f8c8c365a6e9da3fa52e8fc2875d560ab57
SOURCE="$SPELL-$VERSION.tar.gz"
SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
WEB_SITE=https://github.com/storaged-project/libblockdev
diff --git a/disk/libblockdev/HISTORY b/disk/libblockdev/HISTORY
index d3dd4a0..51ce3c8 100644
--- a/disk/libblockdev/HISTORY
+++ b/disk/libblockdev/HISTORY
@@ -1,3 +1,6 @@
+2017-08-28 Treeve Jelbert <treeve AT sourcemage.org>
+ * DETAILS: version 2.11-1
+
2017-07-24 Treeve Jelbert <treeve AT sourcemage.org>
* DETAILS: version 2.10-1
spell created
diff --git a/kde5-net/kio-extras/DEPENDS b/kde5-net/kio-extras/DEPENDS
index fbed5d7..2fc792e 100755
--- a/kde5-net/kio-extras/DEPENDS
+++ b/kde5-net/kio-extras/DEPENDS
@@ -1,4 +1,5 @@
source $GRIMOIRE/KDE5_DEPENDS
+depends qtsvg &&
depends kactivities5 &&
depends karchive &&
depends kbookmarks &&
@@ -6,11 +7,9 @@ depends kconfig &&
depends kconfigwidgets &&
depends kcoreaddons &&
depends kdbusaddons &&
-depends kdelibs4support &&
depends kdnssd &&
depends kdoctools &&
-depends kguiaddons
-depends khtml &&
+depends kguiaddons &&
depends kiconthemes &&
depends kio &&
depends kpty &&
@@ -20,6 +19,10 @@ depends pkgconfig &&
depends JPEG &&
depends shared-mime-info &&
+optional_depends khtml '' ' -DCMAKE_DISABLE_FIND_PACKAGE_KF5KHtml=1'
'build the man kioslave' &&
+if is_depends_enabled $SPELL khtml;then
+ depends gperf
+fi &&
optional_depends libmtp '' '' 'Media Transfer Protocol support' &&
optional_depends libssh '' '' 'SFTP support' &&
optional_depends samba '' '' 'SMB/CIFS support' &&
diff --git a/kde5-net/kio-extras/HISTORY b/kde5-net/kio-extras/HISTORY
index 663e193..d884ef4 100644
--- a/kde5-net/kio-extras/HISTORY
+++ b/kde5-net/kio-extras/HISTORY
@@ -1,3 +1,6 @@
+2017-08-27 Treeve Jelbert <treeve AT sourcemage.org>
+ * DEPENDS: add qtsvg, remove kdelibs4support; khtml optional
+
2017-08-17 Treeve Jelbert <treeve AT sourcemage.org>
* DETAILS: version 17.08.0
diff --git a/net/libmnl/DETAILS b/net/libmnl/DETAILS
index ea9af1f..78107b9 100755
--- a/net/libmnl/DETAILS
+++ b/net/libmnl/DETAILS
@@ -1,13 +1,13 @@
SPELL=libmnl
- VERSION=1.0.3
+ VERSION=1.0.4
SOURCE=$SPELL-$VERSION.tar.bz2
SOURCE2=$SOURCE.sig
- SOURCE_URL[0]=http://www.netfilter.org/projects/$SPELL/files/$SOURCE
+ SOURCE_URL[0]=https://www.netfilter.org/projects/$SPELL/files/$SOURCE
SOURCE2_URL[0]=${SOURCE_URL[0]}.sig
SOURCE_GPG=netfilter.gpg:$SOURCE2:UPSTREAM_KEY
SOURCE2_IGNORE=signature
SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
- WEB_SITE=http://www.netfilter.org/
+ WEB_SITE=https://www.netfilter.org/
ENTERED=20110926
LICENSE[0]=GPL
SHORT="netfilter libmnl"
diff --git a/net/libmnl/HISTORY b/net/libmnl/HISTORY
index d832e2c..35f8d1f 100644
--- a/net/libmnl/HISTORY
+++ b/net/libmnl/HISTORY
@@ -1,3 +1,6 @@
+2017-08-28 Treeve Jelbert <treeve AT sourcemage.org>
+ * DETAILS: version 1.0.4
+
2013-12-24 Vlad Glagolev <stealth AT sourcemage.org>
* DETAILS: updated spell to 1.0.3
diff --git a/printer/cups-filters/DETAILS b/printer/cups-filters/DETAILS
index 505601d..21ae89b 100755
--- a/printer/cups-filters/DETAILS
+++ b/printer/cups-filters/DETAILS
@@ -1,6 +1,6 @@
SPELL=cups-filters
- VERSION=1.16.2
-
SOURCE_HASH=sha512:51af09b6a14eb550b4cfaa2d593b700f8ffd16c084b2a489d846d49c8f045f1ed45572b01d16a982b7293a5acf4372bbf0f2eda1c17a9f7b19870de95f634d9d
+ VERSION=1.17.2
+
SOURCE_HASH=sha512:16287824f807d66da7d43fd59471ae91225c95b737dda0a3ce9b687749a34fd8703e22e61915cf56ef694d58fb9e480220a1426a8fc06211fc88f2ce70c11ff0
SECURITY_PATCH=3
# SOURCE_GPG="gurus.gpg:${SOURCE}.sig"
SOURCE=$SPELL-$VERSION.tar.xz
diff --git a/printer/cups-filters/HISTORY b/printer/cups-filters/HISTORY
index 3cd5c3e..03be125 100644
--- a/printer/cups-filters/HISTORY
+++ b/printer/cups-filters/HISTORY
@@ -1,3 +1,6 @@
+2017-08-28 Treeve Jelbert <treeve AT sourcemage.org>
+ * DETAILS: version 1.17.2
+
2017-08-21 Treeve Jelbert <treeve AT sourcemage.org>
* DETAILS: version 1.16.2
diff --git a/science-libs/eigen3/DETAILS b/science-libs/eigen3/DETAILS
index c99fba2..6b84ca6 100755
--- a/science-libs/eigen3/DETAILS
+++ b/science-libs/eigen3/DETAILS
@@ -1,8 +1,8 @@
SPELL=eigen3
SPELLX=eigen
- SX=67e894c6cd8f
- VERSION=3.3.3
-
SOURCE_HASH=sha512:bb5a8b761371e516f0a344a7c9f6e369e21c2907c8548227933ca6010fc607a66c8d6ff7c41b1aec3dea7d482ce8c2a09e38ae5c7a2c5b16bdd8007e7a81ecc3
+ SX=5a0156e40feb
+ VERSION=3.3.4
+
SOURCE_HASH=sha512:d67a3fd8f7ce811af65fc1d43ec347dadf9c643a49135f7e455fc303773bad09e80a125282c7dfca7a1993b79e1f66576ac92418119fbb0fa50c1a581b957c0d
# the following sha must be updated every time
SOURCE_DIRECTORY=$BUILD_DIRECTORY/eigen-eigen-$SX
SOURCE=eigen-$VERSION.tar.bz2
diff --git a/science-libs/eigen3/HISTORY b/science-libs/eigen3/HISTORY
index 50c28f2..9abdef9 100644
--- a/science-libs/eigen3/HISTORY
+++ b/science-libs/eigen3/HISTORY
@@ -1,3 +1,6 @@
+2017-08-28 Treeve Jelbert <treeve AT sourcemage.org>
+ * DETAILS: version 3.3.4
+
2017-03-14 Treeve Jelbert <treeve AT sourcemage.org>
* DETAILS: version 3.3.3
diff --git a/shell-term-fm/bash/DETAILS b/shell-term-fm/bash/DETAILS
index 72da458..fb37920 100755
--- a/shell-term-fm/bash/DETAILS
+++ b/shell-term-fm/bash/DETAILS
@@ -1,5 +1,5 @@
SPELL=bash
- VERSION=4.3-046
+ VERSION=4.3-048
XVERSION=${VERSION%%-*}
SECURITY_PATCH=8
BASH_PATCHLEVEL=${VERSION#*-}
diff --git a/shell-term-fm/bash/HISTORY b/shell-term-fm/bash/HISTORY
index 6d7e9b7..a6a4424 100644
--- a/shell-term-fm/bash/HISTORY
+++ b/shell-term-fm/bash/HISTORY
@@ -1,3 +1,6 @@
+2016-08-28 Treeve Jelbert <treeve AT sourcemage.org>
+ * DETAILS, patches/bash43-04[78]: more patches
+
2016-07-09 Treeve Jelbert <treeve AT sourcemage.org>
* DETAILS, patches/bash43-04[456]: more patches
2016-03-19 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
diff --git a/shell-term-fm/bash/patches/bash43-047
b/shell-term-fm/bash/patches/bash43-047
new file mode 100644
index 0000000..316e3af
--- /dev/null
+++ b/shell-term-fm/bash/patches/bash43-047
@@ -0,0 +1,150 @@
+ BASH PATCH REPORT
+ =================
+
+Bash-Release: 4.3
+Patch-ID: bash43-047
+
+Bug-Reported-by: Bernd Dietzel
+Bug-Reference-ID:
+Bug-Reference-URL:
https://bugs.launchpad.net/ubuntu/+source/bash/+bug/1507025
+
+Bug-Description:
+
+Bash performs word expansions on the prompt strings after the special
+escape sequences are expanded. If a malicious user can modify the system
+hostname or change the name of the bash executable and coerce a user into
+executing it, and the new name contains word expansions (including
+command substitution), bash will expand them in prompt strings containing
+the \h or \H and \s escape sequences, respectively.
+
+Patch (apply with `patch -p0'):
+
+*** ../bash-4.3-patched/parse.y 2015-08-13 15:11:54.000000000 -0400
+--- parse.y 2016-03-07 15:44:14.000000000 -0500
+***************
+*** 5259,5263 ****
+ int result_size, result_index;
+ int c, n, i;
+! char *temp, octal_string[4];
+ struct tm *tm;
+ time_t the_time;
+--- 5259,5263 ----
+ int result_size, result_index;
+ int c, n, i;
+! char *temp, *t_host, octal_string[4];
+ struct tm *tm;
+ time_t the_time;
+***************
+*** 5407,5411 ****
+ case 's':
+ temp = base_pathname (shell_name);
+! temp = savestring (temp);
+ goto add_string;
+
+--- 5407,5415 ----
+ case 's':
+ temp = base_pathname (shell_name);
+! /* Try to quote anything the user can set in the file system */
+! if (promptvars || posixly_correct)
+! temp = sh_backslash_quote_for_double_quotes (temp);
+! else
+! temp = savestring (temp);
+ goto add_string;
+
+***************
+*** 5497,5503 ****
+ case 'h':
+ case 'H':
+! temp = savestring (current_host_name);
+! if (c == 'h' && (t = (char *)strchr (temp, '.')))
+ *t = '\0';
+ goto add_string;
+
+--- 5501,5515 ----
+ case 'h':
+ case 'H':
+! t_host = savestring (current_host_name);
+! if (c == 'h' && (t = (char *)strchr (t_host, '.')))
+ *t = '\0';
++ if (promptvars || posixly_correct)
++ /* Make sure that expand_prompt_string is called with a
++ second argument of Q_DOUBLE_QUOTES if we use this
++ function here. */
++ temp = sh_backslash_quote_for_double_quotes (t_host);
++ else
++ temp = savestring (t_host);
++ free (t_host);
+ goto add_string;
+
+*** ../bash-4.3-patched/y.tab.c 2015-08-13 15:11:54.000000000 -0400
+--- y.tab.c 2016-03-07 15:44:14.000000000 -0500
+***************
+*** 7571,7575 ****
+ int result_size, result_index;
+ int c, n, i;
+! char *temp, octal_string[4];
+ struct tm *tm;
+ time_t the_time;
+--- 7571,7575 ----
+ int result_size, result_index;
+ int c, n, i;
+! char *temp, *t_host, octal_string[4];
+ struct tm *tm;
+ time_t the_time;
+***************
+*** 7719,7723 ****
+ case 's':
+ temp = base_pathname (shell_name);
+! temp = savestring (temp);
+ goto add_string;
+
+--- 7719,7727 ----
+ case 's':
+ temp = base_pathname (shell_name);
+! /* Try to quote anything the user can set in the file system */
+! if (promptvars || posixly_correct)
+! temp = sh_backslash_quote_for_double_quotes (temp);
+! else
+! temp = savestring (temp);
+ goto add_string;
+
+***************
+*** 7809,7815 ****
+ case 'h':
+ case 'H':
+! temp = savestring (current_host_name);
+! if (c == 'h' && (t = (char *)strchr (temp, '.')))
+ *t = '\0';
+ goto add_string;
+
+--- 7813,7827 ----
+ case 'h':
+ case 'H':
+! t_host = savestring (current_host_name);
+! if (c == 'h' && (t = (char *)strchr (t_host, '.')))
+ *t = '\0';
++ if (promptvars || posixly_correct)
++ /* Make sure that expand_prompt_string is called with a
++ second argument of Q_DOUBLE_QUOTES if we use this
++ function here. */
++ temp = sh_backslash_quote_for_double_quotes (t_host);
++ else
++ temp = savestring (t_host);
++ free (t_host);
+ goto add_string;
+
+*** ../bash-4.3/patchlevel.h 2012-12-29 10:47:57.000000000 -0500
+--- patchlevel.h 2014-03-20 20:01:28.000000000 -0400
+***************
+*** 26,30 ****
+ looks for to find the patch level (for the sccs version string). */
+
+! #define PATCHLEVEL 46
+
+ #endif /* _PATCHLEVEL_H_ */
+--- 26,30 ----
+ looks for to find the patch level (for the sccs version string). */
+
+! #define PATCHLEVEL 47
+
+ #endif /* _PATCHLEVEL_H_ */
diff --git a/shell-term-fm/bash/patches/bash43-048
b/shell-term-fm/bash/patches/bash43-048
new file mode 100644
index 0000000..6a8588e
--- /dev/null
+++ b/shell-term-fm/bash/patches/bash43-048
@@ -0,0 +1,54 @@
+ BASH PATCH REPORT
+ =================
+
+Bash-Release: 4.3
+Patch-ID: bash43-048
+
+Bug-Reported-by: up201407890 AT alunos.dcc.fc.up.pt
+Bug-Reference-ID:
<20151210201649.126444eionzfsam8 AT webmail.alunos.dcc.fc.up.pt>
+Bug-Reference-URL:
http://lists.gnu.org/archive/html/bug-bash/2015-12/msg00054.html
+
+Bug-Description:
+
+If a malicious user can inject a value of $SHELLOPTS containing `xtrace'
+and a value for $PS4 that includes a command substitution into a shell
+running as root, bash will expand the command substitution as part of
+expanding $PS4 when it executes a traced command.
+
+Patch (apply with `patch -p0'):
+
+*** ../bash-4.3-patched/variables.c 2015-11-26 12:31:21.000000000 -0500
+--- variables.c 2015-12-23 10:19:01.000000000 -0500
+***************
+*** 496,500 ****
+ set_if_not ("PS2", secondary_prompt);
+ }
+! set_if_not ("PS4", "+ ");
+
+ /* Don't allow IFS to be imported from the environment. */
+--- 496,504 ----
+ set_if_not ("PS2", secondary_prompt);
+ }
+!
+! if (current_user.euid == 0)
+! bind_variable ("PS4", "+ ", 0);
+! else
+! set_if_not ("PS4", "+ ");
+
+ /* Don't allow IFS to be imported from the environment. */
+
+*** ../bash-4.3/patchlevel.h 2012-12-29 10:47:57.000000000 -0500
+--- patchlevel.h 2014-03-20 20:01:28.000000000 -0400
+***************
+*** 26,30 ****
+ looks for to find the patch level (for the sccs version string). */
+
+! #define PATCHLEVEL 47
+
+ #endif /* _PATCHLEVEL_H_ */
+--- 26,30 ----
+ looks for to find the patch level (for the sccs version string). */
+
+! #define PATCHLEVEL 48
+
+ #endif /* _PATCHLEVEL_H_ */
- [SM-Commit] GIT changes to master grimoire by Treeve Jelbert (2099df5c93c7ba5fd02efe75126f553df39820f5), Treeve Jelbert, 08/28/2017
Archive powered by MHonArc 2.6.24.