Skip to Content.
Sympa Menu

sm-commit - [SM-Commit] GIT changes to master grimoire by Florian Franzmann (417d6900dbd058c6fd5eedda4ecb91a92734188d)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Florian Franzmann <scm AT sourcemage.org>
  • To: sm-commit AT lists.ibiblio.org
  • Subject: [SM-Commit] GIT changes to master grimoire by Florian Franzmann (417d6900dbd058c6fd5eedda4ecb91a92734188d)
  • Date: Wed, 26 Jan 2022 21:41:28 +0000

GIT changes to master grimoire by Florian Franzmann <bwlf AT bandrate.org>:

devel/mold/DETAILS
| 4
devel/mold/HISTORY
| 3
editors/vim/DETAILS
| 4
editors/vim/HISTORY
| 3
gnome2-libs/policykit/DETAILS
| 3
gnome2-libs/policykit/HISTORY
| 5
gnome2-libs/policykit/PRE_BUILD
| 4

gnome2-libs/policykit/patches/0001-pkexec-local-privilege-escalation-CVE-2021-4034.patch
| 79 ++++++++++
python-pypi/python-libarchive-c/DEPENDS
| 3
python-pypi/python-libarchive-c/DETAILS
| 4
python-pypi/python-libarchive-c/HISTORY
| 3
11 files changed, 107 insertions(+), 8 deletions(-)

New commits:
commit 417d6900dbd058c6fd5eedda4ecb91a92734188d
Author: Florian Franzmann <bwlf AT bandrate.org>
Commit: Florian Franzmann <bwlf AT bandrate.org>

gnome2-libs/policykit: fix CVE-2021-4034

This change fixes a trivially exploitable local privilege escalation.

commit 6b2eecc49457c3b779600216c5319d2aad7286fc
Author: Florian Franzmann <bwlf AT bandrate.org>
Commit: Florian Franzmann <bwlf AT bandrate.org>

python-pypi/python-libarchive-c: version 4.0

commit 80eae839f85ba22b1cd1c711e9cf9d0454c4d444
Author: Florian Franzmann <bwlf AT bandrate.org>
Commit: Florian Franzmann <bwlf AT bandrate.org>

editors/vim: version 8.2.4186

commit 7edf4eb9ed601ce5bd4691841464dd3b016bbe38
Author: Florian Franzmann <bwlf AT bandrate.org>
Commit: Florian Franzmann <bwlf AT bandrate.org>

devel/mold: version 1.0.2

diff --git a/devel/mold/DETAILS b/devel/mold/DETAILS
index fd21fec..f1cb72c 100755
--- a/devel/mold/DETAILS
+++ b/devel/mold/DETAILS
@@ -1,8 +1,8 @@
SPELL=mold
- VERSION=1.0.1
+ VERSION=1.0.2
SOURCE="$SPELL-$VERSION.tar.gz"

SOURCE_URL[0]=https://github.com/rui314/${SPELL}/archive/refs/tags/v${VERSION}.tar.gz
-
SOURCE_HASH=sha512:cc03a7db395362b97879c28942397d4443d12b72e067b6f979b1ece4d8aab06154b4c1a0f4c57d6ac505bcd4f892bf9a355ad281d628d4d544d8f70edaf34b72
+
SOURCE_HASH=sha512:27f6664e63c76c32a6e3ec8bfc4b204138926001f5431be94da9ce47a5d9d3b51aa634c5cd6df45be660d52ac0507f7b7eec17134e35db402db5747d2ecc3715
SOURCE_DIRECTORY="${BUILD_DIRECTORY}/${SPELL}-${VERSION}"
WEB_SITE="https://github.com/rui314/mold";
LICENSE[0]=AGPL
diff --git a/devel/mold/HISTORY b/devel/mold/HISTORY
index 0dab238..730601b 100644
--- a/devel/mold/HISTORY
+++ b/devel/mold/HISTORY
@@ -1,3 +1,6 @@
+2022-01-23 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
+ * DETAILS: version 1.0.2
+
2021-12-31 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
* DETAILS: version 1.0.1

diff --git a/editors/vim/DETAILS b/editors/vim/DETAILS
index 279c578..cbbae52 100755
--- a/editors/vim/DETAILS
+++ b/editors/vim/DETAILS
@@ -9,8 +9,8 @@ SOURCE_DIRECTORY="${BUILD_DIRECTORY}/${SPELL}-scm"
SOURCE_IGNORE="volatile"
FORCE_DOWNLOAD="on"
else
- VERSION=8.2.4023
-
SOURCE_HASH=sha512:3aef4dd73faf1142b5eba84a72325e65f5d681946bc82dcd098c1568d67667c2ac5c448bce832095efee02878510ecba929871619d7e8c9b4b056b4b47ea1ece
+ VERSION=8.2.4186
+
SOURCE_HASH=sha512:e0fc3e0b6e945e68c6c3fdfd63c00a5891df51f395ef3971723833ca7b87fd8fbd0d55e7eeb433ebbb4d8624ccb4f22ebbb85dc7f88aed92ccb4b9d203c3367f
SECURITY_PATCH=5
SOURCE=${SPELL}-${VERSION}.tar.gz
SOURCE_DIRECTORY=${BUILD_DIRECTORY}/${SPELL}-${VERSION}
diff --git a/editors/vim/HISTORY b/editors/vim/HISTORY
index 4936099..7cd4f16 100644
--- a/editors/vim/HISTORY
+++ b/editors/vim/HISTORY
@@ -1,3 +1,6 @@
+2022-01-23 Florian Franzmann <bwlf AT bandrate.org>
+ * DETAILS: version 8.2.4186
+
2022-01-07 Florian Franzmann <bwlf AT bandrate.org>
* DETAILS: version 8.2.4023

diff --git a/gnome2-libs/policykit/DETAILS b/gnome2-libs/policykit/DETAILS
index 2060c38..7d72a95 100755
--- a/gnome2-libs/policykit/DETAILS
+++ b/gnome2-libs/policykit/DETAILS
@@ -1,6 +1,7 @@
SPELL=policykit
VERSION=0.118
- SECURITY_PATCH=4
+ PATCHLEVEL=1
+ SECURITY_PATCH=5
SOURCE=polkit-$VERSION.tar.gz
SOURCE_DIRECTORY=$BUILD_DIRECTORY/polkit-$VERSION
SOURCE_URL[0]=https://www.freedesktop.org/software/polkit/releases/$SOURCE
diff --git a/gnome2-libs/policykit/HISTORY b/gnome2-libs/policykit/HISTORY
index 5a6a545..8567d92 100644
--- a/gnome2-libs/policykit/HISTORY
+++ b/gnome2-libs/policykit/HISTORY
@@ -1,3 +1,8 @@
+2022-01-26 Florian Franzmann <bwlf AT bandrate.org>
+ * DETAILS: SECURITY_PATCH++, PATCHLEVEL++
+ * PRE_BUILD,
patches/0001-pkexec-local-privilege-escalation-CVE-2021-4034.patch:
+ add patch that fixes CVE-2021-4034
+
2020-09-09 Treeve Jelbert <treeve AT sourcemage.org>
* DETAILS: version 0.118
* DEPENDS: needs mozjs 78
diff --git a/gnome2-libs/policykit/PRE_BUILD b/gnome2-libs/policykit/PRE_BUILD
new file mode 100755
index 0000000..3357329
--- /dev/null
+++ b/gnome2-libs/policykit/PRE_BUILD
@@ -0,0 +1,4 @@
+default_pre_build &&
+cd "$SOURCE_DIRECTORY" &&
+
+apply_patch_dir patches
diff --git
a/gnome2-libs/policykit/patches/0001-pkexec-local-privilege-escalation-CVE-2021-4034.patch

b/gnome2-libs/policykit/patches/0001-pkexec-local-privilege-escalation-CVE-2021-4034.patch
new file mode 100644
index 0000000..7ee53c4
--- /dev/null
+++
b/gnome2-libs/policykit/patches/0001-pkexec-local-privilege-escalation-CVE-2021-4034.patch
@@ -0,0 +1,79 @@
+From a2bf5c9c83b6ae46cbd5c779d3055bff81ded683 Mon Sep 17 00:00:00 2001
+From: Jan Rybar <jrybar AT redhat.com>
+Date: Tue, 25 Jan 2022 17:21:46 +0000
+Subject: [PATCH] pkexec: local privilege escalation (CVE-2021-4034)
+
+---
+ src/programs/pkcheck.c | 5 +++++
+ src/programs/pkexec.c | 23 ++++++++++++++++++++---
+ 2 files changed, 25 insertions(+), 3 deletions(-)
+
+diff --git a/src/programs/pkcheck.c b/src/programs/pkcheck.c
+index f1bb4e1..768525c 100644
+--- a/src/programs/pkcheck.c
++++ b/src/programs/pkcheck.c
+@@ -363,6 +363,11 @@ main (int argc, char *argv[])
+ local_agent_handle = NULL;
+ ret = 126;
+
++ if (argc < 1)
++ {
++ exit(126);
++ }
++
+ /* Disable remote file access from GIO. */
+ setenv ("GIO_USE_VFS", "local", 1);
+
+diff --git a/src/programs/pkexec.c b/src/programs/pkexec.c
+index 7698c5c..84e5ef6 100644
+--- a/src/programs/pkexec.c
++++ b/src/programs/pkexec.c
+@@ -488,6 +488,15 @@ main (int argc, char *argv[])
+ pid_t pid_of_caller;
+ gpointer local_agent_handle;
+
++
++ /*
++ * If 'pkexec' is called THIS wrong, someone's probably evil-doing. Don't
be nice, just bail out.
++ */
++ if (argc<1)
++ {
++ exit(127);
++ }
++
+ ret = 127;
+ authority = NULL;
+ subject = NULL;
+@@ -614,10 +623,10 @@ main (int argc, char *argv[])
+
+ path = g_strdup (pwstruct.pw_shell);
+ if (!path)
+- {
++ {
+ g_printerr ("No shell configured or error retrieving pw_shell\n");
+ goto out;
+- }
++ }
+ /* If you change this, be sure to change the if (!command_line)
+ case below too */
+ command_line = g_strdup (path);
+@@ -636,7 +645,15 @@ main (int argc, char *argv[])
+ goto out;
+ }
+ g_free (path);
+- argv[n] = path = s;
++ path = s;
++
++ /* argc<2 and pkexec runs just shell, argv is guaranteed to be
null-terminated.
++ * /-less shell shouldn't happen, but let's be defensive and don't
write to null-termination
++ */
++ if (argv[n] != NULL)
++ {
++ argv[n] = path;
++ }
+ }
+ if (access (path, F_OK) != 0)
+ {
+--
+2.34.1
+
diff --git a/python-pypi/python-libarchive-c/DEPENDS
b/python-pypi/python-libarchive-c/DEPENDS
index 8c09196..a398ac5 100755
--- a/python-pypi/python-libarchive-c/DEPENDS
+++ b/python-pypi/python-libarchive-c/DEPENDS
@@ -1 +1,2 @@
-depends python3
+depends python3 &&
+depends libarchive
diff --git a/python-pypi/python-libarchive-c/DETAILS
b/python-pypi/python-libarchive-c/DETAILS
index 82be511..89e0f5f 100755
--- a/python-pypi/python-libarchive-c/DETAILS
+++ b/python-pypi/python-libarchive-c/DETAILS
@@ -1,8 +1,8 @@
SPELL=python-libarchive-c
- VERSION=3.2
+ VERSION=4.0
SOURCE="$SPELL-$VERSION.tar.gz"
SOURCE_URL[0]=https://github.com/Changaco/${SPELL}/archive/$VERSION.tar.gz
-
SOURCE_HASH=sha512:d11a7da0e592b7fce5044b9ff2930e50004c15b166a76f7871b9d0d584cb6da5989c4ec79969439b00baffa564738af607cdf5e37141c6e879b8a76ae68c325c
+
SOURCE_HASH=sha512:1544713802789859ffa9a0d8f4e490f720bbd4d589aae8899d0d1fb6780f2cde0db96f3023c1c32eacea07ea325ac180797aebdb0e8e37093af53807f2e5c812
SOURCE_DIRECTORY="${BUILD_DIRECTORY}/${SPELL}-$VERSION"
WEB_SITE="https://github.com/Changaco/python-libarchive-c";
LICENSE[0]=CC0
diff --git a/python-pypi/python-libarchive-c/HISTORY
b/python-pypi/python-libarchive-c/HISTORY
index 5b76446..62ccfb6 100644
--- a/python-pypi/python-libarchive-c/HISTORY
+++ b/python-pypi/python-libarchive-c/HISTORY
@@ -1,3 +1,6 @@
+2022-01-23 Florian Franzmann <bwlf AT bandrate.org>
+ * DETAILS: version 4.0
+
2021-12-05 Florian Franzmann <bwlf AT bandrate.org>
* DETAILS: version 3.2




  • [SM-Commit] GIT changes to master grimoire by Florian Franzmann (417d6900dbd058c6fd5eedda4ecb91a92734188d), Florian Franzmann, 01/26/2022

Archive powered by MHonArc 2.6.24.

Top of Page