mirror of
git://slackware.nl/current.git
synced 2024-12-30 10:24:23 +01:00
c7bc4d7179
a/pkgtools-15.0-noarch-42.txz: Rebuilt.
setup.services: list rc.nfsd. Suggested by alienBOB.
l/expat-2.4.2-x86_64-1.txz: Upgraded.
l/gegl-0.4.34-x86_64-1.txz: Upgraded.
n/httpd-2.4.52-x86_64-1.txz: Upgraded.
SECURITY: CVE-2021-44790: Possible buffer overflow when parsing
multipart content in mod_lua of Apache HTTP Server 2.4.51 and
earlier (cve.mitre.org)
A carefully crafted request body can cause a buffer overflow in
the mod_lua multipart parser (r:parsebody() called from Lua
scripts).
The Apache httpd team is not aware of an exploit for the
vulnerabilty though it might be possible to craft one.
This issue affects Apache HTTP Server 2.4.51 and earlier.
Credits: Chamal
SECURITY: CVE-2021-44224: Possible NULL dereference or SSRF in
forward proxy configurations in Apache HTTP Server 2.4.51 and
earlier (cve.mitre.org)
A crafted URI sent to httpd configured as a forward proxy
(ProxyRequests on) can cause a crash (NULL pointer dereference)
or, for configurations mixing forward and reverse proxy
declarations, can allow for requests to be directed to a
declared Unix Domain Socket endpoint (Server Side Request
Forgery).
This issue affects Apache HTTP Server 2.4.7 up to 2.4.51
(included).
Credits: ae 1/4*a-o(R)e 1/4
TengMA(@Te3t123)
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224
(* Security fix *)
xap/gimp-2.10.30-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-91.4.1-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/91.4.1/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2021-55/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4126
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44538
(* Security fix *)
xap/xlockmore-5.68-x86_64-1.txz: Upgraded.
xap/xsnow-3.4.2-x86_64-1.txz: Upgraded.
109 lines
3.7 KiB
Bash
Executable file
109 lines
3.7 KiB
Bash
Executable file
#!/bin/bash
|
|
# Copyright 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2018 Patrick J. Volkerding, Sebeka, MN, USA
|
|
# All rights reserved.
|
|
#
|
|
# Redistribution and use of this script, with or without modification, is
|
|
# permitted provided that the following conditions are met:
|
|
#
|
|
# 1. Redistributions of this script must retain the above copyright
|
|
# notice, this list of conditions and the following disclaimer.
|
|
#
|
|
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED
|
|
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
|
# MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
|
|
# EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
|
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
|
|
# PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
|
|
# OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
|
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
|
|
# OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
|
|
# ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
|
|
# Set initial variables:
|
|
cd $(dirname $0) ; CWD=$(pwd)
|
|
if [ "$TMP" = "" ]; then
|
|
TMP=/tmp
|
|
fi
|
|
PKG=$TMP/package-pkgtools
|
|
|
|
PKGNAM=pkgtools
|
|
# *** UPDATE THESE WITH EACH BUILD:
|
|
VERSION=15.0
|
|
ARCH=${ARCH:-noarch}
|
|
BUILD=${BUILD:-42}
|
|
|
|
# If the variable PRINT_PACKAGE_NAME is set, then this script will report what
|
|
# the name of the created package would be, and then exit. This information
|
|
# could be useful to other scripts.
|
|
if [ ! -z "${PRINT_PACKAGE_NAME}" ]; then
|
|
echo "$PKGNAM-$VERSION-$ARCH-$BUILD.txz"
|
|
exit 0
|
|
fi
|
|
|
|
if [ ! -d $TMP ]; then
|
|
mkdir -p $TMP # location to build the source
|
|
fi
|
|
rm -rf $PKG
|
|
mkdir -p $PKG
|
|
|
|
# Install Slackware script manpages:
|
|
( cd $CWD/manpages
|
|
mkdir -p $PKG/usr/man/man8
|
|
for page in explodepkg.8 installpkg.8 makepkg.8 upgradepkg.8 pkgdiff.8 \
|
|
pkgtool.8 removepkg.8 ; do
|
|
cat $page | gzip -9c > $PKG/usr/man/man8/$page.gz
|
|
done
|
|
)
|
|
|
|
# Install internationalized manpages from
|
|
# http://slint.fr/forSlackware/man_l10n/pkgtools/
|
|
( cd $PKG/usr/man
|
|
tar xf $CWD/manpages-l10n.tar.xz
|
|
for page in manpages-l10n/* ; do
|
|
manpage=$(basename $page)
|
|
mkdir -p ${manpage%%.*}/man8
|
|
mv $page ${manpage%%.*}/man8/${page#*.}.8
|
|
done
|
|
gzip -9 */man8/*.8
|
|
rmdir manpages-l10n
|
|
)
|
|
|
|
# Install Slackware scripts:
|
|
( cd $CWD/scripts
|
|
# Install the core Slackware package tools:
|
|
mkdir -p $PKG/sbin
|
|
# Don't include makebootdisk... it's useless since a kernel won't fit on a
|
|
# floppy disk, and nobody uses floppies any more anyway.
|
|
for file in explodepkg installpkg makepkg pkgdiff pkgtool removepkg upgradepkg ; do
|
|
cp -a $CWD/scripts/$file $PKG/sbin
|
|
done
|
|
chown root:root $PKG/sbin/*
|
|
chmod 755 $PKG/sbin/*
|
|
# These scripts are used during the installation:
|
|
mkdir -p $PKG/var/lib/pkgtools/setup/tmp
|
|
chmod 700 $PKG/var/lib/pkgtools/setup/tmp
|
|
for file in setup.* ; do
|
|
cp -a $file $PKG/var/lib/pkgtools/setup
|
|
done
|
|
chown root:root $PKG/var/lib/pkgtools/setup/setup.*
|
|
chmod 755 $PKG/var/lib/pkgtools/setup/setup.*
|
|
# Add a link for makebootstick:
|
|
( cd $PKG/sbin ; ln -sf ../var/lib/pkgtools/setup/setup.80.make-bootdisk makebootstick )
|
|
)
|
|
|
|
# Create the base directories (not really necessary, but doesn't hurt):
|
|
mkdir -p $PKG/var/lib/pkgtools/{packages,scripts,douninst.sh}
|
|
mkdir -p $PKG/var/log/pkgtools/{removed_packages,removed_scripts}
|
|
|
|
mkdir -p $PKG/install
|
|
cat $CWD/slack-desc > $PKG/install/slack-desc
|
|
zcat $CWD/doinst.sh.gz > $PKG/install/doinst.sh
|
|
|
|
# Build the package:
|
|
cd $PKG
|
|
makepkg -l y -c n $TMP/pkgtools-$VERSION-$ARCH-$BUILD.txz
|
|
|
|
echo
|
|
echo "HEY -- did you remember to update the version numbers in the setup scripts?"
|
|
echo
|
|
|