mirror of
git://slackware.nl/current.git
synced 2024-12-28 09:59:53 +01:00
05538a2b6d
ap/linuxdoc-tools-0.9.73-x86_64-1.txz: Upgraded.
Upgraded to gtk-doc-1.29.
Upgraded to asciidoc-8.6.10.
Upgraded to perl-XML-SAX-1.00.
Thanks to Stuart Winter.
d/meson-0.49.2-x86_64-1.txz: Upgraded.
d/python-setuptools-40.8.0-x86_64-1.txz: Upgraded.
d/slacktrack-2.19-x86_64-1.txz: Upgraded.
Thanks to Stuart Winter.
l/imagemagick-6.9.10_26-x86_64-1.txz: Upgraded.
n/dovecot-2.3.4.1-x86_64-1.txz: Upgraded.
This update addresses security issues:
CVE-2019-3814: If imap/pop3/managesieve/submission client has trusted
certificate with missing username field (ssl_cert_username_field), under
some configurations Dovecot mistakenly trusts the username provided via
authentication instead of failing.
ssl_cert_username_field setting was ignored with external SMTP AUTH,
because none of the MTAs (Postfix, Exim) currently send the cert_username
field. This may have allowed users with trusted certificate to specify any
username in the authentication. This bug didn't affect Dovecot's
Submission service.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3814
(* Security fix *)
95 lines
4.1 KiB
Bash
Executable file
95 lines
4.1 KiB
Bash
Executable file
#!/bin/bash
|
|
|
|
# Once slacktrack has determined what the contents of the package
|
|
# should be, it copies them into $SLACKTRACKFAKEROOT and creates
|
|
# an entry in /var/log/packages.
|
|
# Subsequently, within $SLACKTRACKFAKEROOT, it performs the requested
|
|
# packaging operations (gzipping man pages, setting permissions and ownerships,
|
|
# etc.) and then runs _this_ script.
|
|
#
|
|
# From here we can make modifications to the package's contents
|
|
# immediately prior to the invocation of makepkg: slacktrack will
|
|
# perform no other operations upon the contents of the package after
|
|
# the execution of _this_ script.
|
|
# It also means that when we rename the conf files to ".new", it does not
|
|
# affect the ability to ''removepkg linuxdoc-tools'' on the build box,
|
|
# as the entry in /var/log/packages still matches what was installed
|
|
# into /etc by the 'linuxdoc-tools.build' script.
|
|
#
|
|
# If you modify anything here, be careful *not* to include the full
|
|
# path name - only use relative paths (ie rm usr/bin/foo *not* rm /usr/bin/foo).
|
|
|
|
# Enter the package's contents:
|
|
cd $SLACKTRACKFAKEROOT || exit 1
|
|
|
|
# OpenSP creates this symlink; we delete it.
|
|
if [ -L usr/share/doc ]; then
|
|
rm -f usr/share/doc
|
|
fi
|
|
|
|
# Incase you had CUPS running:
|
|
rm -rf etc/cups etc/printcap
|
|
# crond & mail (just incase you got a delivery!)
|
|
rm -rf var/spool/{cron,mail}
|
|
rmdir var/spool 2>/dev/null
|
|
|
|
# Some doc dirs have attracted setuid.
|
|
# We don't need setuid for anything in this package:
|
|
chmod -R a-s .
|
|
|
|
# Remove dangling symlinks from /usr/doc. asciidoc-8.6.7 was a culprit.
|
|
find usr/doc -xtype l -print0 | xargs -0 rm -fv
|
|
|
|
# Ensure some permissions.
|
|
# I don't know why but these dirs are installed chmod 1755:
|
|
#drwxr-xr-t root/root 0 2006-05-27 15:42:44 var/lib/texmf/
|
|
#drwxr-xr-t root/root 0 2006-05-27 15:42:44 var/lib/texmf/pk/
|
|
#drwxr-xr-t root/root 0 2006-05-27 15:42:44 var/lib/texmf/pk/ljfour/
|
|
#drwxr-xr-t root/root 0 2006-05-27 15:42:44 var/lib/texmf/pk/ljfour/jknappen/
|
|
#drwxr-xr-t root/root 0 2006-05-27 15:42:44 var/lib/texmf/pk/ljfour/jknappen/ec/
|
|
#drwxr-xr-t root/root 0 2006-05-27 15:42:44 var/lib/texmf/source/
|
|
#drwxr-xr-t root/root 0 2006-05-27 15:42:44 var/lib/texmf/source/jknappen/
|
|
#drwxr-xr-t root/root 0 2006-05-27 15:42:44 var/lib/texmf/source/jknappen/ec/
|
|
#drwxr-xr-t root/root 0 2006-05-27 15:42:44 var/lib/texmf/tfm/
|
|
#drwxr-xr-t root/root 0 2006-05-27 15:42:44 var/lib/texmf/tfm/jknappen/
|
|
#drwxr-xr-t root/root 0 2006-05-27 15:42:44 var/lib/texmf/tfm/jknappen/ec/
|
|
#find var/lib/texmf -type d -print0 | xargs -0 chmod 755
|
|
# This directory needs these permissions to permit pleb accounts to make
|
|
# fonts:
|
|
#chmod 1777 var/lib/texmf
|
|
#
|
|
# Never mind: I think this stuff is surplus to requirements:
|
|
rm -rf var/lib/texmf
|
|
# Now to prevent deletion of anything else that lives in the package's '/var'
|
|
echo "Errors from 'rmdir' below are harmless and are expected, but should be reviewed"
|
|
echo "in case there are any files that have crept in there."
|
|
rmdir var/lib
|
|
rmdir var
|
|
|
|
# There's no reason to include huge redundant documentation:
|
|
pushd usr/doc
|
|
find . -name "*.txt" | while read docfile ; do
|
|
basedocname=$(echo $docfile | rev | cut -f 2- -d . | rev)
|
|
rm -fv ${basedocname}.{html,pdf,xml}
|
|
rm -fv docbook-xsl*/reference.pdf.gz
|
|
done
|
|
popd
|
|
|
|
# Allow preservation of conf files for ascii-doc. Some of the other bundled
|
|
# packages may benefit from this treatment, but nobody's asked for anything
|
|
# other than asciidoc in over 10 years!
|
|
echo "Renaming configuration files to '.conf.new'.."
|
|
find etc/asciidoc -type f -name '*.conf' -print0 | xargs -0i mv -fv '{}' '{}.new'
|
|
# Search for any dangling symlinks created by renaming the files:
|
|
if [ ! -z "$( find -L etc/asciidoc -type l -print )" ]; then
|
|
echo "WARNING: Dangling symlinks in etc/asciidoc -- you need to fix them!"
|
|
find -L etc/asciidoc -type l -print
|
|
fi
|
|
# Populate the doinst.sh script
|
|
find etc/asciidoc -type f -name '*.conf.new' | while read cfile ; do
|
|
echo "config $cfile" >> install/doinst.sh
|
|
done
|
|
|
|
# Now you should manually extract the .t?z
|
|
# - check through the install/doinst.sh script;
|
|
# - check the contents, permissions and ownerships in the package archive.
|