diff options
author | Patrick J Volkerding <volkerdi@slackware.com> | 2023-10-10 19:27:56 +0000 |
---|---|---|
committer | Eric Hameleers <alien@slackware.com> | 2023-10-11 13:30:18 +0200 |
commit | 3923d6b15dedd0eef9a6374a0c7e233d6b3efae6 (patch) | |
tree | 68690f2e3b214a21fd5279155e2e0835c83b27eb /patches | |
parent | 8e8992f0643004cdb338c880848d0d7d6e457879 (diff) | |
download | current-3923d6b15dedd0eef9a6374a0c7e233d6b3efae6.tar.gz current-3923d6b15dedd0eef9a6374a0c7e233d6b3efae6.tar.xz |
Tue Oct 10 19:27:56 UTC 202320231010192756_15.0
patches/packages/libcue-2.2.1-x86_64-4_slack15.0.txz: Rebuilt.
Fixed a bug which could allow memory corruption resulting in arbitrary
code execution.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-43641
(* Security fix *)
patches/packages/libnotify-0.8.3-x86_64-1_slack15.0.txz: Upgraded.
This release contains a critical stability/minor security update which
affects Electron applications that utilize Portal notifications (eg,
through Flatpak). It is highly recommended that all users of libnotify
0.8.x update to this release.
(* Security fix *)
Diffstat (limited to 'patches')
-rw-r--r-- | patches/packages/libcue-2.2.1-x86_64-4_slack15.0.txt | 11 | ||||
-rw-r--r-- | patches/packages/libnotify-0.8.3-x86_64-1_slack15.0.txt | 11 | ||||
-rw-r--r-- | patches/source/libcue/fdf72c8bded8d24cfa0608b8e97f2eed210a920e.patch | 24 | ||||
-rwxr-xr-x | patches/source/libcue/libcue.SlackBuild | 126 | ||||
-rw-r--r-- | patches/source/libcue/libcue.url | 1 | ||||
-rw-r--r-- | patches/source/libcue/slack-desc | 19 | ||||
-rwxr-xr-x | patches/source/libnotify/libnotify.SlackBuild | 126 | ||||
-rw-r--r-- | patches/source/libnotify/slack-desc | 19 |
8 files changed, 337 insertions, 0 deletions
diff --git a/patches/packages/libcue-2.2.1-x86_64-4_slack15.0.txt b/patches/packages/libcue-2.2.1-x86_64-4_slack15.0.txt new file mode 100644 index 000000000..724a5f8f8 --- /dev/null +++ b/patches/packages/libcue-2.2.1-x86_64-4_slack15.0.txt @@ -0,0 +1,11 @@ +libcue: libcue (CUE sheet parser library) +libcue: +libcue: A CUE sheet is a metadata file which describes the layout of a CD or +libcue: DVD. The libcue library is intended for parsing a CUE sheet and +libcue: providing an API for programs to access the parsed data. While there +libcue: is no single CUE sheet standard, libcue attempts to parse the most +libcue: commonly known CUE layouts. +libcue: +libcue: Homepage: https://github.com/lipnitsk/libcue +libcue: +libcue: diff --git a/patches/packages/libnotify-0.8.3-x86_64-1_slack15.0.txt b/patches/packages/libnotify-0.8.3-x86_64-1_slack15.0.txt new file mode 100644 index 000000000..e2edf103d --- /dev/null +++ b/patches/packages/libnotify-0.8.3-x86_64-1_slack15.0.txt @@ -0,0 +1,11 @@ +libnotify: libnotify (notification library) +libnotify: +libnotify: A general library for event notification. +libnotify: +libnotify: Homepage: https://gitlab.gnome.org/GNOME/libnotify +libnotify: +libnotify: +libnotify: +libnotify: +libnotify: +libnotify: diff --git a/patches/source/libcue/fdf72c8bded8d24cfa0608b8e97f2eed210a920e.patch b/patches/source/libcue/fdf72c8bded8d24cfa0608b8e97f2eed210a920e.patch new file mode 100644 index 000000000..b38727fdc --- /dev/null +++ b/patches/source/libcue/fdf72c8bded8d24cfa0608b8e97f2eed210a920e.patch @@ -0,0 +1,24 @@ +From fdf72c8bded8d24cfa0608b8e97f2eed210a920e Mon Sep 17 00:00:00 2001 +From: Kevin Backhouse <kevinbackhouse@github.com> +Date: Wed, 27 Sep 2023 20:22:43 +0100 +Subject: [PATCH] Check that the array index isn't negative. This fixes + CVE-2023-43641. + +Signed-off-by: Kevin Backhouse <kevinbackhouse@github.com> +--- + cd.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/cd.c b/cd.c +index cf77a18..4bbea19 100644 +--- a/cd.c ++++ b/cd.c +@@ -339,7 +339,7 @@ track_get_rem(const Track* track) + + void track_set_index(Track *track, int i, long ind) + { +- if (i > MAXINDEX) { ++ if (i < 0 || i > MAXINDEX) { + fprintf(stderr, "too many indexes\n"); + return; + } diff --git a/patches/source/libcue/libcue.SlackBuild b/patches/source/libcue/libcue.SlackBuild new file mode 100755 index 000000000..112d14d98 --- /dev/null +++ b/patches/source/libcue/libcue.SlackBuild @@ -0,0 +1,126 @@ +#!/bin/bash + +# Copyright 2020 Patrick J. Volkerding, Sebeka, Minnesota, USA +# All rights reserved. +# +# Redistribution and use of this script, with or without modification, is +# permitted provided that the following conditions are met: +# +# 1. Redistributions of this script must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# +# THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED +# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF +# MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO +# EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, +# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, +# PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; +# OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, +# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR +# OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF +# ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +cd $(dirname $0) ; CWD=$(pwd) + +PKGNAM=libcue +VERSION=${VERSION:-$(echo $PKGNAM-*.tar.?z | rev | cut -f 3- -d . | cut -f 1 -d - | rev)} +BUILD=${BUILD:-4_slack15.0} + +# Automatically determine the architecture we're building on: +if [ -z "$ARCH" ]; then + case "$(uname -m)" in + i?86) ARCH=i586 ;; + arm*) readelf /usr/bin/file -A | grep -E -q "Tag_CPU.*[4,5]" && ARCH=arm || ARCH=armv7hl ;; + # Unless $ARCH is already set, use uname -m for all other archs: + *) ARCH=$(uname -m) ;; + esac + export ARCH +fi + +# If the variable PRINT_PACKAGE_NAME is set, then this script will report what +# the name of the created package would be, and then exit. This information +# could be useful to other scripts. +if [ ! -z "${PRINT_PACKAGE_NAME}" ]; then + echo "$PKGNAM-$VERSION-$ARCH-$BUILD.txz" + exit 0 +fi + +NUMJOBS=${NUMJOBS:-" -j$(expr $(nproc) + 1) "} + +if [ "$ARCH" = "i586" ]; then + SLKCFLAGS="-O2 -march=i586 -mtune=i686" + LIBDIRSUFFIX="" +elif [ "$ARCH" = "i686" ]; then + SLKCFLAGS="-O2 -march=i686" + LIBDIRSUFFIX="" +elif [ "$ARCH" = "s390" ]; then + SLKCFLAGS="-O2" + LIBDIRSUFFIX="" +elif [ "$ARCH" = "x86_64" ]; then + SLKCFLAGS="-O2 -fPIC" + LIBDIRSUFFIX="64" +elif [ "$ARCH" = "armv7hl" ]; then + SLKCFLAGS="-O3 -march=armv7-a -mfpu=vfpv3-d16" + LIBDIRSUFFIX="" +else + SLKCFLAGS="-O2" + LIBDIRSUFFIX="" +fi + +TMP=${TMP:-/tmp} +PKG=$TMP/package-$PKGNAM + +rm -rf $PKG +mkdir -p $TMP $PKG + +cd $TMP +rm -rf $PKGNAM-$VERSION +tar xvf $CWD/$PKGNAM-$VERSION.tar.?z || exit 1 +cd $PKGNAM-$VERSION || exit 1 + +chown -R root:root . +find . \ + \( -perm 777 -o -perm 775 -o -perm 711 -o -perm 555 -o -perm 511 \) \ + -exec chmod 755 {} \+ -o \ + \( -perm 666 -o -perm 664 -o -perm 600 -o -perm 444 -o -perm 440 -o -perm 400 \) \ + -exec chmod 644 {} \+ + +cat $CWD/fdf72c8bded8d24cfa0608b8e97f2eed210a920e.patch | patch -p1 --verbose || exit 1 + +# Configure, build, and install: +mkdir cmake-build +cd cmake-build + cmake \ + -DCMAKE_C_FLAGS="$SLKCFLAGS" \ + -DCMAKE_INSTALL_PREFIX=/usr \ + -DCMAKE_INSTALL_LIBDIR=lib${LIBDIRSUFFIX} \ + -DBUILD_SHARED_LIBS=ON \ + -DDOC_INSTALL_DIR="doc" \ + -DMAN_INSTALL_DIR=/usr/man \ + .. || exit 1 + make $NUMJOBS || make || exit 1 + make install DESTDIR=$PKG || exit 1 +cd .. + +# Strip binaries: +find $PKG | xargs file | grep -e "executable" -e "shared object" | grep ELF | cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null + +# Add a documentation directory: +mkdir -p $PKG/usr/doc/${PKGNAM}-$VERSION +cp -a \ + AUTHORS* ChangeLog COPYING* LICENSE* NEWS* README* THANKS* TODO* \ + $PKG/usr/doc/${PKGNAM}-$VERSION + +# If there's a ChangeLog, installing at least part of the recent history +# is useful, but don't let it get totally out of control: +if [ -r ChangeLog ]; then + DOCSDIR=$(echo $PKG/usr/doc/${PKGNAM}-$VERSION) + cat ChangeLog | head -n 1000 > $DOCSDIR/ChangeLog + touch -r ChangeLog $DOCSDIR/ChangeLog +fi + +mkdir -p $PKG/install +cat $CWD/slack-desc > $PKG/install/slack-desc + +cd $PKG +/sbin/makepkg -l y -c n $TMP/$PKGNAM-$VERSION-$ARCH-$BUILD.txz diff --git a/patches/source/libcue/libcue.url b/patches/source/libcue/libcue.url new file mode 100644 index 000000000..836563979 --- /dev/null +++ b/patches/source/libcue/libcue.url @@ -0,0 +1 @@ +https://github.com/lipnitsk/libcue diff --git a/patches/source/libcue/slack-desc b/patches/source/libcue/slack-desc new file mode 100644 index 000000000..d69c8d326 --- /dev/null +++ b/patches/source/libcue/slack-desc @@ -0,0 +1,19 @@ +# HOW TO EDIT THIS FILE: +# The "handy ruler" below makes it easier to edit a package description. Line +# up the first '|' above the ':' following the base package name, and the '|' +# on the right side marks the last column you can put a character in. You must +# make exactly 11 lines for the formatting to be correct. It's also +# customary to leave one space after the ':'. + + |-----handy-ruler------------------------------------------------------| +libcue: libcue (CUE sheet parser library) +libcue: +libcue: A CUE sheet is a metadata file which describes the layout of a CD or +libcue: DVD. The libcue library is intended for parsing a CUE sheet and +libcue: providing an API for programs to access the parsed data. While there +libcue: is no single CUE sheet standard, libcue attempts to parse the most +libcue: commonly known CUE layouts. +libcue: +libcue: Homepage: https://github.com/lipnitsk/libcue +libcue: +libcue: diff --git a/patches/source/libnotify/libnotify.SlackBuild b/patches/source/libnotify/libnotify.SlackBuild new file mode 100755 index 000000000..0f750b6af --- /dev/null +++ b/patches/source/libnotify/libnotify.SlackBuild @@ -0,0 +1,126 @@ +#!/bin/bash +# +# Slackware build script for libnotify +# +# Copyright 2009 Erik W. Hanson, Minneapolis, MN, USA +# Copyright 2010, 2018, 2019, 2022, 2023 Patrick J. Volkerding, Sebeka, MN, USA +# All rights reserved. +# +# Redistribution and use of this script, with or without modification, is +# permitted provided that the following conditions are met: +# +# 1. Redistributions of this script must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# +# THIS SOFTWARE IS PROVIDED BY THE AUTHOR ''AS IS'' AND ANY EXPRESS OR IMPLIED +# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF +# MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO +# EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, +# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, +# PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; +# OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, +# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR +# OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF +# ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +cd $(dirname $0) ; CWD=$(pwd) + +PKGNAM=libnotify +VERSION=${VERSION:-$(echo $PKGNAM-*.tar.?z | rev | cut -f 3- -d . | cut -f 1 -d - | rev)} +BUILD=${BUILD:-1_slack15.0} + +NUMJOBS=${NUMJOBS:-" -j$(expr $(nproc) + 1) "} + +if [ -z "$ARCH" ]; then + case "$( uname -m )" in + i?86) export ARCH=i586 ;; + arm*) export ARCH=arm ;; + *) export ARCH=$( uname -m ) ;; + esac +fi + +# If the variable PRINT_PACKAGE_NAME is set, then this script will report what +# the name of the created package would be, and then exit. This information +# could be useful to other scripts. +if [ ! -z "${PRINT_PACKAGE_NAME}" ]; then + echo "$PKGNAM-$VERSION-$ARCH-$BUILD.txz" + exit 0 +fi + +TMP=${TMP:-/tmp} +PKG=$TMP/package-$PKGNAM + +if [ "$ARCH" = "i586" ]; then + SLKCFLAGS="-O2 -march=i586 -mtune=i686" + LIBDIRSUFFIX="" +elif [ "$ARCH" = "i686" ]; then + SLKCFLAGS="-O2 -march=i686 -mtune=i686" + LIBDIRSUFFIX="" +elif [ "$ARCH" = "x86_64" ]; then + SLKCFLAGS="-O2 -fPIC" + LIBDIRSUFFIX="64" +else + SLKCFLAGS="-O2" + LIBDIRSUFFIX="" +fi + +rm -rf $PKG +mkdir -p $TMP $PKG +cd $TMP +rm -rf $PKGNAM-$VERSION +tar xvf $CWD/$PKGNAM-$VERSION.tar.?z || exit 1 +cd $PKGNAM-$VERSION || exit 1 +chown -R root:root . +chmod -R u+w,go+r-w,a-s . + +# Configure, build, and install: +export CFLAGS="$SLKCFLAGS" +export CXXFLAGS="$SLKCFLAGS" +mkdir meson-build +cd meson-build +meson setup \ + --prefix=/usr \ + --libdir=lib${LIBDIRSUFFIX} \ + --libexecdir=/usr/libexec \ + --bindir=/usr/bin \ + --sbindir=/usr/sbin \ + --includedir=/usr/include \ + --datadir=/usr/share \ + --mandir=/usr/man \ + --sysconfdir=/etc \ + --localstatedir=/var \ + --buildtype=release \ + -Ddocbook_docs=disabled \ + -Dgtk_doc=false \ + -Dtests=false \ + -Dman=false \ + .. || exit 1 + "${NINJA:=ninja}" $NUMJOBS || exit 1 + DESTDIR=$PKG $NINJA install || exit 1 +cd .. + +# Don't ship .la files: +rm -f $PKG/{,usr/}lib${LIBDIRSUFFIX}/*.la + +find $PKG | xargs file | grep -e "executable" -e "shared object" | grep ELF \ + | cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null + +mkdir -p $PKG/usr/doc/$PKGNAM-$VERSION +cp -a AUTHORS* COPYING* NEWS* README* SPEC* $PKG/usr/doc/$PKGNAM-$VERSION +if [ -d $PKG/usr/share/gtk-doc/html/libnotify ]; then + ( cd $PKG/usr/doc/$PKGNAM-$VERSION ; ln -s ../../share/gtk-doc/html/libnotify html ) +fi + +# If there's a ChangeLog, installing at least part of the recent history +# is useful, but don't let it get totally out of control: +if [ -r ChangeLog ]; then + DOCSDIR=$(echo $PKG/usr/doc/*-$VERSION) + cat ChangeLog | head -n 1000 > $DOCSDIR/ChangeLog + touch -r ChangeLog $DOCSDIR/ChangeLog +fi + +mkdir -p $PKG/install +cat $CWD/slack-desc > $PKG/install/slack-desc + +cd $PKG +/sbin/makepkg -l y -c n $TMP/$PKGNAM-$VERSION-$ARCH-$BUILD.txz diff --git a/patches/source/libnotify/slack-desc b/patches/source/libnotify/slack-desc new file mode 100644 index 000000000..7cad2dd54 --- /dev/null +++ b/patches/source/libnotify/slack-desc @@ -0,0 +1,19 @@ +# HOW TO EDIT THIS FILE: +# The "handy ruler" below makes it easier to edit a package description. Line +# up the first '|' above the ':' following the base package name, and the '|' +# on the right side marks the last column you can put a character in. You must +# make exactly 11 lines for the formatting to be correct. It's also +# customary to leave one space after the ':'. + + |-----handy-ruler--------------------------------------------------| +libnotify: libnotify (notification library) +libnotify: +libnotify: A general library for event notification. +libnotify: +libnotify: Homepage: https://gitlab.gnome.org/GNOME/libnotify +libnotify: +libnotify: +libnotify: +libnotify: +libnotify: +libnotify: |