1
0
Fork 0
mirror of git://slackware.nl/current.git synced 2025-02-04 20:46:11 +01:00

Fri Feb 25 00:03:28 UTC 2022

patches/packages/cyrus-sasl-2.1.28-x86_64-1_slack15.0.txz:  Upgraded.
  This update fixes bugs and security issues.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19906
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24407
  (* Security fix *)
This commit is contained in:
Patrick J Volkerding 2022-02-25 00:03:28 +00:00 committed by Eric Hameleers
parent 2858060a50
commit a737ba20e2
10 changed files with 310 additions and 47 deletions

View file

@ -11,9 +11,25 @@
<description>Tracking Slackware development in git.</description>
<language>en-us</language>
<id xmlns="http://www.w3.org/2005/Atom">urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f</id>
<pubDate>Mon, 21 Feb 2022 20:21:38 GMT</pubDate>
<lastBuildDate>Tue, 22 Feb 2022 12:29:46 GMT</lastBuildDate>
<pubDate>Fri, 25 Feb 2022 00:03:28 GMT</pubDate>
<lastBuildDate>Fri, 25 Feb 2022 12:29:46 GMT</lastBuildDate>
<generator>maintain_current_git.sh v 1.17</generator>
<item>
<title>Fri, 25 Feb 2022 00:03:28 GMT</title>
<pubDate>Fri, 25 Feb 2022 00:03:28 GMT</pubDate>
<link>https://git.slackware.nl/current/tag/?h=20220225000328</link>
<guid isPermaLink="false">20220225000328</guid>
<description>
<![CDATA[<pre>
patches/packages/cyrus-sasl-2.1.28-x86_64-1_slack15.0.txz: Upgraded.
This update fixes bugs and security issues.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19906
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24407
(* Security fix *)
</pre>]]>
</description>
</item>
<item>
<title>Mon, 21 Feb 2022 20:21:38 GMT</title>
<pubDate>Mon, 21 Feb 2022 20:21:38 GMT</pubDate>

View file

@ -1,3 +1,11 @@
Fri Feb 25 00:03:28 UTC 2022
patches/packages/cyrus-sasl-2.1.28-x86_64-1_slack15.0.txz: Upgraded.
This update fixes bugs and security issues.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19906
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24407
(* Security fix *)
+--------------------------+
Mon Feb 21 20:21:38 UTC 2022
patches/packages/expat-2.4.6-x86_64-1_slack15.0.txz: Upgraded.
Fixed a regression introduced by the fix for CVE-2022-25313 that affects

View file

@ -1,20 +1,20 @@
Mon Feb 21 20:24:41 UTC 2022
Fri Feb 25 00:07:04 UTC 2022
Here is the file list for this directory. If you are using a
mirror site and find missing or extra files in the disk
subdirectories, please have the archive administrator refresh
the mirror.
drwxr-xr-x 12 root root 4096 2022-02-21 20:21 .
drwxr-xr-x 12 root root 4096 2022-02-25 00:03 .
-rw-r--r-- 1 root root 5767 2022-02-02 22:44 ./ANNOUNCE.15.0
-rw-r--r-- 1 root root 16617 2022-02-02 23:27 ./CHANGES_AND_HINTS.TXT
-rw-r--r-- 1 root root 1109576 2022-02-20 05:18 ./CHECKSUMS.md5
-rw-r--r-- 1 root root 163 2022-02-20 05:18 ./CHECKSUMS.md5.asc
-rw-r--r-- 1 root root 1110192 2022-02-21 20:25 ./CHECKSUMS.md5
-rw-r--r-- 1 root root 163 2022-02-21 20:25 ./CHECKSUMS.md5.asc
-rw-r--r-- 1 root root 17976 1994-06-10 02:28 ./COPYING
-rw-r--r-- 1 root root 35147 2007-06-30 04:21 ./COPYING3
-rw-r--r-- 1 root root 19573 2016-06-23 20:08 ./COPYRIGHT.TXT
-rw-r--r-- 1 root root 616 2006-10-02 04:37 ./CRYPTO_NOTICE.TXT
-rw-r--r-- 1 root root 1870433 2022-02-21 20:21 ./ChangeLog.txt
-rw-r--r-- 1 root root 1870789 2022-02-25 00:03 ./ChangeLog.txt
drwxr-xr-x 3 root root 4096 2013-03-20 22:17 ./EFI
drwxr-xr-x 2 root root 4096 2022-02-02 08:21 ./EFI/BOOT
-rw-r--r-- 1 root root 1187840 2021-06-15 19:16 ./EFI/BOOT/bootx64.efi
@ -25,7 +25,7 @@ drwxr-xr-x 2 root root 4096 2022-02-02 08:21 ./EFI/BOOT
-rwxr-xr-x 1 root root 2504 2019-07-05 18:54 ./EFI/BOOT/make-grub.sh
-rw-r--r-- 1 root root 10722 2013-09-21 19:02 ./EFI/BOOT/osdetect.cfg
-rw-r--r-- 1 root root 1273 2013-08-12 21:08 ./EFI/BOOT/tools.cfg
-rw-r--r-- 1 root root 1447968 2022-02-20 05:18 ./FILELIST.TXT
-rw-r--r-- 1 root root 1448777 2022-02-21 20:24 ./FILELIST.TXT
-rw-r--r-- 1 root root 1572 2012-08-29 18:27 ./GPG-KEY
-rw-r--r-- 1 root root 864745 2022-02-02 08:25 ./PACKAGES.TXT
-rw-r--r-- 1 root root 8034 2022-02-02 03:36 ./README.TXT
@ -737,19 +737,22 @@ drwxr-xr-x 2 root root 4096 2008-05-07 05:21 ./pasture/source/php/pear
-rwxr-xr-x 1 root root 9448 2018-05-16 22:38 ./pasture/source/php/php.SlackBuild
-rw-r--r-- 1 root root 775 2017-07-07 19:25 ./pasture/source/php/php.ini-development.diff.gz
-rw-r--r-- 1 root root 830 2005-12-09 05:18 ./pasture/source/php/slack-desc
drwxr-xr-x 4 root root 4096 2022-02-21 20:24 ./patches
-rw-r--r-- 1 root root 11410 2022-02-21 20:24 ./patches/CHECKSUMS.md5
-rw-r--r-- 1 root root 163 2022-02-21 20:24 ./patches/CHECKSUMS.md5.asc
-rw-r--r-- 1 root root 15533 2022-02-21 20:24 ./patches/FILE_LIST
-rw-r--r-- 1 root root 5138829 2022-02-21 20:24 ./patches/MANIFEST.bz2
-rw-r--r-- 1 root root 5572 2022-02-21 20:24 ./patches/PACKAGES.TXT
drwxr-xr-x 2 root root 4096 2022-02-21 20:24 ./patches/packages
drwxr-xr-x 4 root root 4096 2022-02-25 00:07 ./patches
-rw-r--r-- 1 root root 12098 2022-02-25 00:07 ./patches/CHECKSUMS.md5
-rw-r--r-- 1 root root 163 2022-02-25 00:07 ./patches/CHECKSUMS.md5.asc
-rw-r--r-- 1 root root 16445 2022-02-25 00:07 ./patches/FILE_LIST
-rw-r--r-- 1 root root 5149516 2022-02-25 00:07 ./patches/MANIFEST.bz2
-rw-r--r-- 1 root root 6072 2022-02-25 00:07 ./patches/PACKAGES.TXT
drwxr-xr-x 2 root root 4096 2022-02-25 00:07 ./patches/packages
-rw-r--r-- 1 root root 327 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txt
-rw-r--r-- 1 root root 10716 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txz
-rw-r--r-- 1 root root 163 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txz.asc
-rw-r--r-- 1 root root 326 2022-02-07 18:56 ./patches/packages/at-3.2.3-x86_64-1_slack15.0.txt
-rw-r--r-- 1 root root 43124 2022-02-07 18:56 ./patches/packages/at-3.2.3-x86_64-1_slack15.0.txz
-rw-r--r-- 1 root root 163 2022-02-07 18:56 ./patches/packages/at-3.2.3-x86_64-1_slack15.0.txz.asc
-rw-r--r-- 1 root root 373 2022-02-24 19:12 ./patches/packages/cyrus-sasl-2.1.28-x86_64-1_slack15.0.txt
-rw-r--r-- 1 root root 993108 2022-02-24 19:12 ./patches/packages/cyrus-sasl-2.1.28-x86_64-1_slack15.0.txz
-rw-r--r-- 1 root root 163 2022-02-24 19:12 ./patches/packages/cyrus-sasl-2.1.28-x86_64-1_slack15.0.txz.asc
-rw-r--r-- 1 root root 301 2022-02-21 19:06 ./patches/packages/expat-2.4.6-x86_64-1_slack15.0.txt
-rw-r--r-- 1 root root 128812 2022-02-21 19:06 ./patches/packages/expat-2.4.6-x86_64-1_slack15.0.txz
-rw-r--r-- 1 root root 163 2022-02-21 19:06 ./patches/packages/expat-2.4.6-x86_64-1_slack15.0.txz.asc
@ -771,7 +774,7 @@ drwxr-xr-x 2 root root 4096 2022-02-21 20:24 ./patches/packages
-rw-r--r-- 1 root root 354 2022-02-15 18:37 ./patches/packages/util-linux-2.37.4-x86_64-1_slack15.0.txt
-rw-r--r-- 1 root root 2805300 2022-02-15 18:37 ./patches/packages/util-linux-2.37.4-x86_64-1_slack15.0.txz
-rw-r--r-- 1 root root 163 2022-02-15 18:37 ./patches/packages/util-linux-2.37.4-x86_64-1_slack15.0.txz.asc
drwxr-xr-x 11 root root 4096 2022-02-21 20:04 ./patches/source
drwxr-xr-x 12 root root 4096 2022-02-24 20:55 ./patches/source
drwxr-xr-x 2 root root 4096 2022-01-16 05:07 ./patches/source/aaa_base
-rw-r--r-- 1 root root 11041 2022-02-15 04:49 ./patches/source/aaa_base/_aaa_base.tar.gz
-rwxr-xr-x 1 root root 3894 2022-02-15 05:07 ./patches/source/aaa_base/aaa_base.SlackBuild
@ -787,6 +790,13 @@ drwxr-xr-x 2 root root 4096 2022-02-07 18:45 ./patches/source/at
-rw-r--r-- 1 root root 428 2018-06-13 02:51 ./patches/source/at/doinst.sh.gz
-rw-r--r-- 1 root root 669 2018-06-14 18:38 ./patches/source/at/rc.atd
-rw-r--r-- 1 root root 776 2019-10-17 17:50 ./patches/source/at/slack-desc
drwxr-xr-x 2 root root 4096 2022-02-24 19:09 ./patches/source/cyrus-sasl
-rw-r--r-- 1 root root 1577929 2022-02-22 18:04 ./patches/source/cyrus-sasl/cyrus-sasl-2.1.28.tar.lz
-rwxr-xr-x 1 root root 4575 2022-02-24 19:11 ./patches/source/cyrus-sasl/cyrus-sasl.SlackBuild
-rw-r--r-- 1 root root 49 2022-02-24 19:01 ./patches/source/cyrus-sasl/cyrus-sasl.url
-rw-r--r-- 1 root root 275 2005-07-24 22:43 ./patches/source/cyrus-sasl/doinst.sh.gz
-rw-r--r-- 1 root root 584 2020-11-30 19:09 ./patches/source/cyrus-sasl/rc.saslauthd.gz
-rw-r--r-- 1 root root 831 2018-02-27 06:13 ./patches/source/cyrus-sasl/slack-desc
drwxr-xr-x 2 root root 4096 2022-02-21 18:57 ./patches/source/expat
-rw-r--r-- 1 root root 451100 2022-02-20 17:09 ./patches/source/expat/expat-2.4.6.tar.lz
-rw-r--r-- 1 root root 833 2022-02-20 17:09 ./patches/source/expat/expat-2.4.6.tar.lz.asc

View file

@ -0,0 +1,11 @@
cyrus-sasl: cyrus-sasl (Simple Authentication and Security Layer)
cyrus-sasl:
cyrus-sasl: This is the Cyrus SASL library. Cyrus SASL is used by mail programs
cyrus-sasl: on the client or server side to provide authentication and
cyrus-sasl: authorization services. See RFC 2222 for more information.
cyrus-sasl:
cyrus-sasl:
cyrus-sasl:
cyrus-sasl:
cyrus-sasl:
cyrus-sasl:

View file

@ -0,0 +1,138 @@
#!/bin/bash
# Copyright 2008, 2009, 2010, 2013, 2015, 2017, 2018, 2020 Patrick J. Volkerding, Sebeka, Minnesota, USA
# All rights reserved.
#
# Redistribution and use of this script, with or without modification, is
# permitted provided that the following conditions are met:
#
# 1. Redistributions of this script must retain the above copyright
# notice, this list of conditions and the following disclaimer.
#
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
# EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
# PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
# OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
# OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
# ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
cd $(dirname $0) ; CWD=$(pwd)
PKGNAM=cyrus-sasl
VERSION=${VERSION:-$(echo $PKGNAM-*.tar.?z* | cut -f 3- -d - | rev | cut -f 3- -d . | rev)}
BUILD=${BUILD:-1_slack15.0}
# Automatically determine the architecture we're building on:
if [ -z "$ARCH" ]; then
case "$( uname -m )" in
i?86) export ARCH=i586 ;;
arm*) export ARCH=arm ;;
# Unless $ARCH is already set, use uname -m for all other archs:
*) export ARCH=$( uname -m ) ;;
esac
fi
# If the variable PRINT_PACKAGE_NAME is set, then this script will report what
# the name of the created package would be, and then exit. This information
# could be useful to other scripts.
if [ ! -z "${PRINT_PACKAGE_NAME}" ]; then
echo "$PKGNAM-$(echo $VERSION | tr - _)-$ARCH-$BUILD.txz"
exit 0
fi
NUMJOBS=${NUMJOBS:-" -j$(expr $(nproc) + 1) "}
TMP=${TMP:-/tmp}
PKG=$TMP/package-cyrus-sasl
if [ "$ARCH" = "i586" ]; then
SLKCFLAGS="-O2 -march=i586 -mtune=i686"
LIBDIRSUFFIX=""
elif [ "$ARCH" = "s390" ]; then
SLKCFLAGS="-O2"
LIBDIRSUFFIX=""
elif [ "$ARCH" = "x86_64" ]; then
SLKCFLAGS="-O2 -fPIC"
LIBDIRSUFFIX="64"
else
SLKCFLAGS="-O2"
LIBDIRSUFFIX=""
fi
rm -rf $PKG
mkdir -p $TMP $PKG
cd $TMP
rm -rf cyrus-sasl-$VERSION
tar xvf $CWD/cyrus-sasl-$VERSION.tar.?z* || exit 1
cd cyrus-sasl-$(echo $VERSION | cut -f 1 -d -) || exit 1
chown -R root:root .
find . -perm 777 -exec chmod 755 {} \+
find . -perm 664 -exec chmod 644 {} \+
CFLAGS="$SLKCFLAGS" \
./configure \
--prefix=/usr \
--libdir=/usr/lib${LIBDIRSUFFIX} \
--with-plugindir=/usr/lib${LIBDIRSUFFIX}/sasl2 \
--with-configdir=/etc/sasl2 \
--sysconfdir=/etc \
--localstatedir=/var \
--mandir=/usr/man \
--disable-static \
--enable-login \
--enable-sql \
--disable-anon \
--with-ldap \
--without-pgsql \
--with-saslauthd \
--with-mysql=/usr \
--with-sqlite3=/usr \
--with-gdbm \
--with-devrandom=/dev/urandom \
--with-dblib=gdbm || exit 1
# How stupid that I need to specify 'sasldir' again for 'make' or else you get
# the warning "Plugins are being installed into /usr/lib/sasl2, but the library
# will look for them in /usr/lib64/sasl2" and advised to create a symlink...
make $NUMJOBS sasldir=/usr/lib${LIBDIRSUFFIX}/sasl2 || exit 1
make $NUMJOBS sasldir=/usr/lib${LIBDIRSUFFIX}/sasl2 install DESTDIR=$PKG || exit 1
# Don't ship .la files:
rm -f $PKG/{,usr/}lib${LIBDIRSUFFIX}/*.la
( cd $PKG
find . | xargs file | grep "executable" | grep ELF | cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null
find . | xargs file | grep "shared object" | grep ELF | cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null
)
mkdir -p $PKG/var/state/saslauthd
mkdir -p $PKG/etc/rc.d
mkdir -p $PKG/etc/sasl2
zcat $CWD/rc.saslauthd.gz > $PKG/etc/rc.d/rc.saslauthd.new
# Fix sloppy man page installation:
rm -r $PKG/usr/man/cat8
cat saslauthd/saslauthd.mdoc > $PKG/usr/man/man8/saslauthd.8
gzip -9 $PKG/usr/man/man?/*.?
# Add other documentation:
mkdir -p $PKG/usr/doc/cyrus-sasl-$VERSION
cp -a \
AUTHORS* COPYING* INSTALL* NEWS* README* \
saslauthd/LDAP_SASLAUTHD \
doc \
$PKG/usr/doc/cyrus-sasl-$VERSION
find $PKG/usr/doc/cyrus-sasl-$VERSION -type f -exec chmod 644 {} \+
rm -f $PKG/usr/doc/cyrus-sasl-$VERSION/doc/*Makefile*
mkdir -p $PKG/install
zcat $CWD/doinst.sh.gz > $PKG/install/doinst.sh
cat $CWD/slack-desc > $PKG/install/slack-desc
cd $PKG
makepkg -l y -c n $TMP/cyrus-sasl-$(echo $VERSION | tr - _)-$ARCH-$BUILD.txz

View file

@ -0,0 +1 @@
https://github.com/cyrusimap/cyrus-sasl/releases

View file

@ -0,0 +1,13 @@
#!/bin/sh
config() {
NEW="$1"
OLD="`dirname $NEW`/`basename $NEW .new`"
# If there's no config file by that name, mv it over:
if [ ! -r $OLD ]; then
mv $NEW $OLD
elif [ "`cat $OLD | md5sum`" = "`cat $NEW | md5sum`" ]; then # toss the redundant copy
rm $NEW
fi
# Otherwise, we leave the .new copy for the admin to consider...
}
config etc/rc.d/rc.saslauthd.new

View file

@ -0,0 +1,45 @@
#!/bin/sh
# rc.saslauthd: start/stop/restart saslauthd
#
# saslauthd is a daemon process that handles plaintext authentication
# requests on behalf of the SASL library. The CMU Cyrus SASL library
# is a general purpose authentication library for server and client
# applications. It is mostly used to authenticate to mail servers.
#
# saslauthd should be started from the system boot scripts when going
# to multi-user mode. When running against a protected authentication
# database (e.g. the shadow mechanism), it must be run as the superuser.
#
saslauthd_start() {
# If saslauthd is not running, start it:
if [ ! -r /var/state/saslauthd/saslauthd.pid ]; then
# Use PAM authentication with credential caching:
echo "Starting SASL authentication daemon: /usr/sbin/saslauthd -a pam -c"
/usr/sbin/saslauthd -a pam -c
fi
}
saslauthd_stop() {
kill `cat /var/state/saslauthd/saslauthd.pid 2> /dev/null` 2> /dev/null
sleep 1
}
saslauthd_restart() {
saslauthd_stop
saslauthd_start
}
case "$1" in
'start')
saslauthd_start
;;
'stop')
saslauthd_stop
;;
'restart')
saslauthd_restart
;;
*)
echo "usage $0 start|stop|restart"
esac

View file

@ -0,0 +1,19 @@
# HOW TO EDIT THIS FILE:
# The "handy ruler" below makes it easier to edit a package description. Line
# up the first '|' above the ':' following the base package name, and the '|' on
# the right side marks the last column you can put a character in. You must make
# exactly 11 lines for the formatting to be correct. It's also customary to
# leave one space after the ':'.
|-----handy-ruler------------------------------------------------------|
cyrus-sasl: cyrus-sasl (Simple Authentication and Security Layer)
cyrus-sasl:
cyrus-sasl: This is the Cyrus SASL library. Cyrus SASL is used by mail programs
cyrus-sasl: on the client or server side to provide authentication and
cyrus-sasl: authorization services. See RFC 2222 for more information.
cyrus-sasl:
cyrus-sasl:
cyrus-sasl:
cyrus-sasl:
cyrus-sasl:
cyrus-sasl:

View file

@ -1189,6 +1189,8 @@ gzip ./patches/source/mozilla-firefox/mimeTypes.rdf
gzip ./patches/source/mozilla-firefox/mozilla-firefox-mimeTypes-fix.diff
gzip ./patches/source/mozilla-firefox/0027-LTO-Only-enable-LTO-for-Rust-when-complete-build-use.patch
gzip ./patches/source/mozilla-firefox/gkrust.a.no.networking.check.diff
gzip ./patches/source/cyrus-sasl/rc.saslauthd
gzip ./patches/source/cyrus-sasl/doinst.sh
gzip ./pasture/source/php/php-fpm.conf.diff
gzip ./pasture/source/php/doinst.sh
gzip ./pasture/source/php/PHP-5.6.31-OpenSSL-1.1.0-compatibility-20170801.patch