From 4ab76cd28b12ab0eeba4931268b0b933b38f58cd Mon Sep 17 00:00:00 2001 From: Juergen Daubert Date: Thu, 3 Sep 2015 17:28:59 +0200 Subject: [PATCH 1/3] mutt: update to 1.5.24 --- mutt/.md5sum | 3 +-- mutt/CVE-2014-9116.patch | 41 ---------------------------------------- mutt/Pkgfile | 9 +++------ 3 files changed, 4 insertions(+), 49 deletions(-) delete mode 100644 mutt/CVE-2014-9116.patch diff --git a/mutt/.md5sum b/mutt/.md5sum index de15fff0b..ff43ff6be 100644 --- a/mutt/.md5sum +++ b/mutt/.md5sum @@ -1,2 +1 @@ -9aee189b0c8a8755b5a10712e8d45b0b CVE-2014-9116.patch -11f5b6a3eeba1afa1257fe93c9f26bff mutt-1.5.23.tar.gz +7f25d27f3c7c82285ac07aac35f5f0f2 mutt-1.5.24.tar.gz diff --git a/mutt/CVE-2014-9116.patch b/mutt/CVE-2014-9116.patch deleted file mode 100644 index 9da334a05..000000000 --- a/mutt/CVE-2014-9116.patch +++ /dev/null @@ -1,41 +0,0 @@ -# http://dev.mutt.org/trac/ticket/3716 - -This patch solves the issue raised by CVE-2014-9116 in bug 771125. - -We correctly redefine what are the whitespace characters as per RFC5322; by -doing so we prevent mutt_substrdup from being used in a way that could lead to -a segfault. - -The lib.c part was written by Antonio Radici to prevent -crashes due to this kind of bugs from happening again. - -The wheezy version of this patch is slightly different, therefore this patch -has -jessie prefixed in its name. - -Index: mutt/lib.c -=================================================================== ---- mutt.orig/lib.c -+++ mutt/lib.c -@@ -815,6 +815,9 @@ char *mutt_substrdup (const char *begin, - size_t len; - char *p; - -+ if (end != NULL && end < begin) -+ return NULL; -+ - if (end) - len = end - begin; - else -Index: mutt/lib.h -=================================================================== ---- mutt.orig/lib.h -+++ mutt/lib.h -@@ -98,7 +98,7 @@ - on some systems */ - # define SKIPWS(c) while (*(c) && isspace ((unsigned char) *(c))) c++; - --#define EMAIL_WSP " \t\r\n" -+#define EMAIL_WSP " \t\r" - - /* skip over WSP as defined by RFC5322. This is used primarily for parsing - * header fields. */ diff --git a/mutt/Pkgfile b/mutt/Pkgfile index bc0b8d6ef..255f32912 100644 --- a/mutt/Pkgfile +++ b/mutt/Pkgfile @@ -4,16 +4,13 @@ # Depends on: gdbm ncurses openssl zlib name=mutt -version=1.5.23 -release=2 -source=(https://bitbucket.org/mutt/mutt/downloads/$name-$version.tar.gz - CVE-2014-9116.patch) +version=1.5.24 +release=1 +source=(https://bitbucket.org/mutt/mutt/downloads/$name-$version.tar.gz) build () { cd $name-$version - patch -p1 -i $SRC/CVE-2014-9116.patch - ./configure --prefix=/usr \ --mandir=/usr/man \ --with-docdir=/usr/share/mutt \ From b8da933e1b0937b21fd7b71719df4b7bf0836f77 Mon Sep 17 00:00:00 2001 From: Juergen Daubert Date: Thu, 3 Sep 2015 17:29:45 +0200 Subject: [PATCH 2/3] cups-filters: update to 1.0.74 --- cups-filters/.md5sum | 2 +- cups-filters/Pkgfile | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/cups-filters/.md5sum b/cups-filters/.md5sum index 70058aff9..fb7dd2154 100644 --- a/cups-filters/.md5sum +++ b/cups-filters/.md5sum @@ -1,2 +1,2 @@ 7540a6989be0042429f41770b1cdf215 cups-browsed -7c8d792eb872be5a5b596409e5f05f40 cups-filters-1.0.73.tar.xz +14862048b4a9a87abfeeae07531dd020 cups-filters-1.0.74.tar.xz diff --git a/cups-filters/Pkgfile b/cups-filters/Pkgfile index 8806ee816..46539c238 100644 --- a/cups-filters/Pkgfile +++ b/cups-filters/Pkgfile @@ -4,7 +4,7 @@ # Depends on: cups ghostscript poppler qpdf name=cups-filters -version=1.0.73 +version=1.0.74 release=1 source=(http://www.openprinting.org/download/$name/$name-$version.tar.xz cups-browsed) From 893cd5e8fc0795d5917d983caee9906b9722f622 Mon Sep 17 00:00:00 2001 From: Juergen Daubert Date: Thu, 3 Sep 2015 18:20:41 +0200 Subject: [PATCH 3/3] dar: update to 2.4.18 --- dar/.footprint | 6 +++--- dar/.md5sum | 2 +- dar/Pkgfile | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/dar/.footprint b/dar/.footprint index 0c40ed553..104184b25 100644 --- a/dar/.footprint +++ b/dar/.footprint @@ -72,9 +72,9 @@ drwxr-xr-x root/root usr/include/dar/ drwxr-xr-x root/root usr/lib/ -rw-r--r-- root/root usr/lib/libdar64.a -rwxr-xr-x root/root usr/lib/libdar64.la -lrwxrwxrwx root/root usr/lib/libdar64.so -> libdar64.so.5000.6.4 -lrwxrwxrwx root/root usr/lib/libdar64.so.5000 -> libdar64.so.5000.6.4 --rwxr-xr-x root/root usr/lib/libdar64.so.5000.6.4 +lrwxrwxrwx root/root usr/lib/libdar64.so -> libdar64.so.5000.6.5 +lrwxrwxrwx root/root usr/lib/libdar64.so.5000 -> libdar64.so.5000.6.5 +-rwxr-xr-x root/root usr/lib/libdar64.so.5000.6.5 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/libdar64.pc drwxr-xr-x root/root usr/man/ diff --git a/dar/.md5sum b/dar/.md5sum index 7ded11fab..3c91bb402 100644 --- a/dar/.md5sum +++ b/dar/.md5sum @@ -1,2 +1,2 @@ -b8986a75539a901f70854d7068e898af dar-2.4.17.tar.gz +fc243d3e4702bcbb78e553b4a659d4eb dar-2.4.18.tar.gz f453ca0df13e48ca72095f9ef71529c9 darrc diff --git a/dar/Pkgfile b/dar/Pkgfile index 6e6161db9..1d59e1128 100644 --- a/dar/Pkgfile +++ b/dar/Pkgfile @@ -4,7 +4,7 @@ # Depends on: attr, lzo, zlib, bzip2, libgcrypt name=dar -version=2.4.17 +version=2.4.18 release=1 source=(http://downloads.sourceforge.net/project/dar/dar/$version/$name-$version.tar.gz \ darrc)