diff options
Diffstat (limited to 'source/n')
| -rw-r--r-- | source/n/bind/bind-9.16.11.CVE-2020-8625.diff | 12 | ||||
| -rwxr-xr-x | source/n/bind/bind.SlackBuild | 6 | ||||
| -rwxr-xr-x | source/n/openvpn/openvpn.SlackBuild | 2 | ||||
| -rwxr-xr-x | source/n/s-nail/s-nail.SlackBuild | 2 | ||||
| -rw-r--r-- | source/n/s-nail/s-nail.url | 4 |
5 files changed, 21 insertions, 5 deletions
diff --git a/source/n/bind/bind-9.16.11.CVE-2020-8625.diff b/source/n/bind/bind-9.16.11.CVE-2020-8625.diff new file mode 100644 index 000000000..419b5bea0 --- /dev/null +++ b/source/n/bind/bind-9.16.11.CVE-2020-8625.diff @@ -0,0 +1,12 @@ +diff -u -r --new-file bind-9.16.11.orig/lib/dns/spnego.c bind-9.16.11/lib/dns/spnego.c +--- bind-9.16.11.orig/lib/dns/spnego.c 2021-01-11 07:23:31.000000000 -0600 ++++ bind-9.16.11/lib/dns/spnego.c 2021-02-24 13:57:17.199873321 -0600 +@@ -848,7 +848,7 @@ + return (ASN1_OVERRUN); + } + +- data->components = malloc(len * sizeof(*data->components)); ++ data->components = malloc((len + 1) * sizeof(*data->components)); + if (data->components == NULL) { + return (ENOMEM); + } diff --git a/source/n/bind/bind.SlackBuild b/source/n/bind/bind.SlackBuild index 1b7af8957..a77c53178 100755 --- a/source/n/bind/bind.SlackBuild +++ b/source/n/bind/bind.SlackBuild @@ -24,7 +24,7 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=bind VERSION=${VERSION:-$(echo ${PKGNAM}-[0-9]*.tar.?z | rev | cut -f 3- -d . | cut -f 1 -d - | rev)} -BUILD=${BUILD:-1} +BUILD=${BUILD:-3} # Automatically determine the architecture we're building on: if [ -z "$ARCH" ]; then @@ -82,6 +82,10 @@ else GSSAPI=" " fi +# Fix a security vulnerability. This is fixed in 9.16.12, but we can't use +# that version due to other regressions. +zcat $CWD/bind-9.16.11.CVE-2020-8625.diff.gz | patch -p1 --verbose || exit 1 + # Configure: CFLAGS="$SLKCFLAGS" \ ./configure \ diff --git a/source/n/openvpn/openvpn.SlackBuild b/source/n/openvpn/openvpn.SlackBuild index f136d02a2..21406b8b4 100755 --- a/source/n/openvpn/openvpn.SlackBuild +++ b/source/n/openvpn/openvpn.SlackBuild @@ -25,7 +25,7 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=openvpn VERSION=${VERSION:-$(echo $PKGNAM-*.tar.?z | rev | cut -f 3- -d . | cut -f 1 -d - | rev)} -BUILD=${BUILD:-3} +BUILD=${BUILD:-1} # Automatically determine the architecture we're building on: if [ -z "$ARCH" ]; then diff --git a/source/n/s-nail/s-nail.SlackBuild b/source/n/s-nail/s-nail.SlackBuild index 567acd577..ccb0f4e20 100755 --- a/source/n/s-nail/s-nail.SlackBuild +++ b/source/n/s-nail/s-nail.SlackBuild @@ -27,7 +27,7 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=s-nail VERSION=${VERSION:-$(echo $PKGNAM-*.tar.?z | rev | cut -f 3- -d . | cut -f 1 -d - | rev)} -BUILD=${BUILD:-4} +BUILD=${BUILD:-1} if [ -z "$ARCH" ]; then case "$( uname -m )" in diff --git a/source/n/s-nail/s-nail.url b/source/n/s-nail/s-nail.url index 6395063b6..01af6a6a7 100644 --- a/source/n/s-nail/s-nail.url +++ b/source/n/s-nail/s-nail.url @@ -1,2 +1,2 @@ -http://ftp.sdaoden.eu/s-nail-14.9.21.tar.xz -http://ftp.sdaoden.eu/s-nail-14.9.21.tar.xz.asc +http://ftp.sdaoden.eu/s-nail-14.9.22.tar.xz +http://ftp.sdaoden.eu/s-nail-14.9.22.tar.xz.asc |