From 56fd994ee85c90dbfc90eaaaa5fc53596a0037d9 Mon Sep 17 00:00:00 2001 From: Fredrik Rinnestam Date: Thu, 18 May 2017 17:16:29 +0200 Subject: [PATCH] [notify] shadow: updated to 4.5. Fix for CVE-2017-2616. See https://github.com/shadow-maint/shadow/releases for other changes --- shadow/.footprint | 4 ++-- shadow/.md5sum | 2 +- shadow/.signature | 8 ++++---- shadow/Pkgfile | 6 +++--- 4 files changed, 10 insertions(+), 10 deletions(-) diff --git a/shadow/.footprint b/shadow/.footprint index ca33c359..4d8875b0 100644 --- a/shadow/.footprint +++ b/shadow/.footprint @@ -16,9 +16,9 @@ drwxr-xr-x root/root usr/bin/ -rwxr-xr-x root/root usr/bin/faillog -rwxr-xr-x root/root usr/bin/groups -rwxr-xr-x root/root usr/bin/lastlog --rwxr-xr-x root/root usr/bin/newgidmap +-rwsr-xr-x root/root usr/bin/newgidmap -rwsr-xr-x root/root usr/bin/newgrp --rwxr-xr-x root/root usr/bin/newuidmap +-rwsr-xr-x root/root usr/bin/newuidmap -rwsr-xr-x root/root usr/bin/passwd lrwxrwxrwx root/root usr/bin/sg -> newgrp -rwsr-xr-x root/root usr/bin/su diff --git a/shadow/.md5sum b/shadow/.md5sum index 5f5e90c4..06f99533 100644 --- a/shadow/.md5sum +++ b/shadow/.md5sum @@ -1,3 +1,3 @@ 80756b2d5b3351b3757f48ae69fe866d login.defs be8f69c2701118093af3d7f3bc02af16 pwck -ff357d9d232f6ad55a4d8b93f78caff7 shadow-4.4.tar.xz +c350da50c2120de6bb29177699d89fe3 shadow-4.5.tar.xz diff --git a/shadow/.signature b/shadow/.signature index db279f92..0711d487 100644 --- a/shadow/.signature +++ b/shadow/.signature @@ -1,7 +1,7 @@ untrusted comment: verify with /etc/ports/core.pub -RWRJc1FUaeVeqnO8FH9Op6wItGTLc9Fplf8ZHnnX2VmftYl5CgT+8XHZ3j1d5xtILa4UJyvk+yU8m1oVxhdoOVOxnprr/qnROgQ= -SHA256 (Pkgfile) = 56004b9563ba7ede8a153aa97546aba5be77ae26b26a27f29805b567de21b78f -SHA256 (.footprint) = 61d1be2651cfd92984010fba452d8c581f60a6252f0b666710dfd912fa6a5948 -SHA256 (shadow-4.4.tar.xz) = dd79e3e6c49d560cd7901838e8b544ec94d56e5c6fabb77e8949235189a50940 +RWRJc1FUaeVeqpDsCheU2Flzc0CeEsEe3NNLiW1rztqmJbdJolKG3tJmJXgvIZDG5AmhN6URgAK9BoPhy46gWxv9CRZdtZgMvwU= +SHA256 (Pkgfile) = 28e4ab2a059acc5972ecbb882d0b08fbe36d8c6b026fc87c150df2d5f06cdc1e +SHA256 (.footprint) = 196891826eef19be5e249380bc5c9560b10051556be4a3be5d33e099a56f23ae +SHA256 (shadow-4.5.tar.xz) = fc8c858381ad577a5c25ff5beb6ee60a34f8719c73e4e7c61e74188b4e54b741 SHA256 (pwck) = c62f1bf5785c2bb93bb269156bfa02b06728a01ff5d6c2e09cf6285701a1fda0 SHA256 (login.defs) = a5c63da222b9dd921b60a21be8fc888726b557fd3fde9f60c8899376d0311b0b diff --git a/shadow/Pkgfile b/shadow/Pkgfile index 8f4eff7b..25870198 100644 --- a/shadow/Pkgfile +++ b/shadow/Pkgfile @@ -4,13 +4,13 @@ # Depends on: acl name=shadow -version=4.4 +version=4.5 release=1 -source=(http://crux.nu/files/distfiles/$name-$version.tar.xz +source=(https://github.com/shadow-maint/shadow/releases/download/$version/shadow-$version.tar.xz pwck login.defs) build() { - cd $name-upstream-$version + cd $name-$version ./configure --prefix=/usr \ --sysconfdir=/etc \