Skip to Content.
Sympa Menu

sm-commit - [SM-Commit] GIT changes to stable-0.62 grimoire by Vlad Glagolev (edaa7df3e39c13066bfc506c91694b11656a3522)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Vlad Glagolev <scm AT sourcemage.org>
  • To: sm-commit AT lists.ibiblio.org
  • Subject: [SM-Commit] GIT changes to stable-0.62 grimoire by Vlad Glagolev (edaa7df3e39c13066bfc506c91694b11656a3522)
  • Date: Sun, 22 Oct 2017 15:42:51 +0000

GIT changes to stable-0.62 grimoire by Vlad Glagolev <stealth AT sourcemage.org>:

audio-players/lame/DETAILS | 5
audio-players/lame/HISTORY | 3
libs/libxml2/0003-Fix-NULL-pointer-deref-in-XPointer-range-to.patch | 53
----------
libs/libxml2/DETAILS | 7 -
libs/libxml2/HISTORY | 4
libs/libxml2/PRE_BUILD | 5
net/dnsmasq/DETAILS | 10 +
net/dnsmasq/HISTORY | 11 ++
net/dnsmasq/kelly.gpg |binary
9 files changed, 30 insertions(+), 68 deletions(-)

New commits:
commit edaa7df3e39c13066bfc506c91694b11656a3522
Author: Thomas Orgis <sobukus AT sourcemage.org>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

lame: version 3.100, ++SECURITY_PATH

A new release after a long time, prompted by various fixes for
a rush of CVEs recently.

(cherry picked from commit 191f229a823192bdc8f6611d75c6f2710383f7a3)

Conflicts:
audio-players/lame/HISTORY

commit 137c5b356baadb31966b16e3d38286111591bbed
Author: Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

libs/libxml2: version 2.9.5, security update

(cherry picked from commit 82871fd37abfae050adb378320cca5a732ea0a10)

commit c825f0332db4fb40dd320298dda11db76cad7cdc
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

dnsmasq-2.78 - SECURITY FIX

(cherry picked from commit 647d2d294af0b9b2d21ab548b6bd5e65fbe3fd04)

commit 2eedb2536b86d3f36d50d5dda30d1be0e966672a
Author: Treeve Jelbert <treeve AT sourcemage.org>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

dnsmasq: => 2.75

(cherry picked from commit 6f11907da64af3b985e837af20d4ea9d099597d4)

diff --git a/audio-players/lame/DETAILS b/audio-players/lame/DETAILS
index ca81642..5fc59d3 100755
--- a/audio-players/lame/DETAILS
+++ b/audio-players/lame/DETAILS
@@ -1,6 +1,7 @@
SPELL=lame
- VERSION=3.99.5
-
SOURCE_HASH=sha512:ce62d7eb9fc8c53c343374ded30f11153a296910f0be7e649197bca7412c6660aad1aa6143d56b750f866229eb492cf7bb4f682535c383fb4aa57d7077d8b4d8
+ VERSION=3.100
+ SECURITY_PATCH=1
+
SOURCE_HASH=sha512:0844b9eadb4aacf8000444621451277de365041cc1d97b7f7a589da0b7a23899310afd4e4d81114b9912aa97832621d20588034715573d417b2923948c08634b
# SOURCE_GPG=gurus.gpg:$SOURCE.sig:WORKS_FOR_ME
SOURCE=$SPELL-$VERSION.tar.gz
SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
diff --git a/audio-players/lame/HISTORY b/audio-players/lame/HISTORY
index 54233dd..051302c 100644
--- a/audio-players/lame/HISTORY
+++ b/audio-players/lame/HISTORY
@@ -1,3 +1,6 @@
+2017-10-15 Thomas Orgis <sobukus AT sourcemage.org>
+ * DETAILS: verison 3.100, ++SECURITY_PATCH
+
2012-03-02 Vlad Glagolev <stealth AT sourcemage.org>
* DETAILS: updated spell to 3.99.5

diff --git
a/libs/libxml2/0003-Fix-NULL-pointer-deref-in-XPointer-range-to.patch
b/libs/libxml2/0003-Fix-NULL-pointer-deref-in-XPointer-range-to.patch
deleted file mode 100644
index eed5b2e..0000000
--- a/libs/libxml2/0003-Fix-NULL-pointer-deref-in-XPointer-range-to.patch
+++ /dev/null
@@ -1,53 +0,0 @@
-From: Nick Wellnhofer <wellnhofer AT aevum.de>
-Date: Sat, 25 Jun 2016 12:35:50 +0200
-Subject: Fix NULL pointer deref in XPointer range-to
-
-- Check for errors after evaluating first operand.
-- Add sanity check for empty stack.
-
-Found with afl-fuzz.
----
- result/XPath/xptr/viderror | 4 ++++
- test/XPath/xptr/viderror | 1 +
- xpath.c | 7 ++++++-
- 3 files changed, 11 insertions(+), 1 deletion(-)
- create mode 100644 result/XPath/xptr/viderror
- create mode 100644 test/XPath/xptr/viderror
-
-diff --git a/result/XPath/xptr/viderror b/result/XPath/xptr/viderror
-new file mode 100644
-index 0000000..d589882
---- /dev/null
-+++ b/result/XPath/xptr/viderror
-@@ -0,0 +1,4 @@
-+
-+========================
-+Expression: xpointer(non-existing-fn()/range-to(id('chapter2')))
-+Object is empty (NULL)
-diff --git a/test/XPath/xptr/viderror b/test/XPath/xptr/viderror
-new file mode 100644
-index 0000000..da8c53b
---- /dev/null
-+++ b/test/XPath/xptr/viderror
-@@ -0,0 +1 @@
-+xpointer(non-existing-fn()/range-to(id('chapter2')))
-diff --git a/xpath.c b/xpath.c
-index 113bce6..751665b 100644
---- a/xpath.c
-+++ b/xpath.c
-@@ -14005,9 +14005,14 @@ xmlXPathCompOpEval(xmlXPathParserContextPtr ctxt,
xmlXPathStepOpPtr op)
- xmlNodeSetPtr oldset;
- int i, j;
-
-- if (op->ch1 != -1)
-+ if (op->ch1 != -1) {
- total +=
- xmlXPathCompOpEval(ctxt, &comp->steps[op->ch1]);
-+ CHECK_ERROR0;
-+ }
-+ if (ctxt->value == NULL) {
-+ XP_ERROR0(XPATH_INVALID_OPERAND);
-+ }
- if (op->ch2 == -1)
- return (total);
-
diff --git a/libs/libxml2/DETAILS b/libs/libxml2/DETAILS
index a00bd2c..00cd4ac 100755
--- a/libs/libxml2/DETAILS
+++ b/libs/libxml2/DETAILS
@@ -1,8 +1,7 @@
SPELL=libxml2
- VERSION=2.9.4
-
SOURCE_HASH=sha512:f5174ab1a3a0ec0037a47f47aa47def36674e02bfb42b57f609563f84c6247c585dbbb133c056953a5adb968d328f18cbc102eb0d00d48eb7c95478389e5daf9
- SECURITY_PATCH=11
- PATCHLEVEL=1
+ VERSION=2.9.5
+
SOURCE_HASH=sha512:197dbd1722e5f90eea43837323352f48d215e198aa6b95685645ef7511e2beba8aadc0dd67e099c945120c5dbe7f8c9da5f376b22f447059e9ffa941c1bfd175
+ SECURITY_PATCH=12
SOURCE=$SPELL-$VERSION.tar.gz
SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
SOURCE_URL[0]=ftp://xmlsoft.org/$SPELL/$SOURCE
diff --git a/libs/libxml2/HISTORY b/libs/libxml2/HISTORY
index 1f31008..ba2652f 100644
--- a/libs/libxml2/HISTORY
+++ b/libs/libxml2/HISTORY
@@ -1,3 +1,7 @@
+2017-09-06 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
+ * DETAILS: version 2.9.5, SECURITY_PATCH++
+ * 0003-Fix-NULL-pointer-deref-in-XPointer-range-to.patch, PRE_BUILD:
removed
+
2016-09-17 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
* DETAILS: PATCHLEVEL++
* PRE_BUILD, 0003-Fix-NULL-pointer-deref-in-XPointer-range-to.patch:
diff --git a/libs/libxml2/PRE_BUILD b/libs/libxml2/PRE_BUILD
deleted file mode 100755
index 6c70496..0000000
--- a/libs/libxml2/PRE_BUILD
+++ /dev/null
@@ -1,5 +0,0 @@
-default_pre_build &&
-cd "$SOURCE_DIRECTORY" &&
-
-patch -p1 <
"$SPELL_DIRECTORY/0003-Fix-NULL-pointer-deref-in-XPointer-range-to.patch"
-
diff --git a/net/dnsmasq/DETAILS b/net/dnsmasq/DETAILS
index fc2b3fa..4e9cebf 100755
--- a/net/dnsmasq/DETAILS
+++ b/net/dnsmasq/DETAILS
@@ -1,11 +1,13 @@
SPELL=dnsmasq
- VERSION=2.72
-
SOURCE_HASH=sha512:d84b89c987966a5f5880aa329833626b0a017628dd6aa667bdad880d1c5f101a386dddb439eb6983d58952a36f25670bf58df94281b89320f02895a3e6af4cec
-# SOURCE_GPG="gurus.gpg:$SOURCE.sig:WORKS_FOR_ME"
+ VERSION=2.78
SOURCE=$SPELL-$VERSION.tar.xz
SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
SOURCE_URL[0]=http://www.thekelleys.org.uk/dnsmasq/$SOURCE
- SECURITY_PATCH=2
+ SOURCE2=$SOURCE.asc
+ SOURCE2_URL[0]=${SOURCE_URL[0]}.asc
+ SOURCE_GPG=kelly.gpg:$SOURCE.asc:UPSTREAM_KEY
+ SOURCE2_IGNORE=signature
+ SECURITY_PATCH=3
LICENSE[0]=GPL
WEB_SITE=http://www.thekelleys.org.uk/dnsmasq/doc.html
KEYWORDS="net"
diff --git a/net/dnsmasq/HISTORY b/net/dnsmasq/HISTORY
index 149c623..432e6aa 100644
--- a/net/dnsmasq/HISTORY
+++ b/net/dnsmasq/HISTORY
@@ -1,3 +1,14 @@
+2017-10-02 Treeve Jelbert <treeve AT sourcemage.org>
+ * DETAILS: version 2.78
+ SECURITY_PATCH++ fixes muliple CVE
+ CVE-2015-3294 CVE-2017-13704 CVE-2017-14491 CVE-2017-14492
CVE-2017-14493
+ CVE-2017-14496 CVE-2017-14495
+ * DETAILS: add gpg checking
+ * kelly.gpg: added Simon Kelley <simon AT thekelleys.org.uk>
+
+2016-01-01 Treeve Jelbert <treeve AT sourcemage.org>
+ * DETAILS: version 2.75
+
2015-01-05 Treeve Jelbert <treeve AT sourcemage.org>
* DETAILS: version 2.72
* PRE_BUILD: strip various config flags
diff --git a/net/dnsmasq/kelly.gpg b/net/dnsmasq/kelly.gpg
new file mode 100644
index 0000000..117dcea
Binary files /dev/null and b/net/dnsmasq/kelly.gpg differ



  • [SM-Commit] GIT changes to stable-0.62 grimoire by Vlad Glagolev (edaa7df3e39c13066bfc506c91694b11656a3522), Vlad Glagolev, 10/22/2017

Archive powered by MHonArc 2.6.24.

Top of Page