[arch-commits] Commit in lighttpd/trunk (PKGBUILD)

Pierre Schmitz pierre at nymeria.archlinux.org
Fri Nov 15 09:38:30 UTC 2013


    Date: Friday, November 15, 2013 @ 10:38:30
  Author: pierre
Revision: 199542

Apply security fixes; FS#37765

Modified:
  lighttpd/trunk/PKGBUILD

----------+
 PKGBUILD |   25 ++++++++++++++++++++++++-
 1 file changed, 24 insertions(+), 1 deletion(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2013-11-15 08:46:32 UTC (rev 199541)
+++ PKGBUILD	2013-11-15 09:38:30 UTC (rev 199542)
@@ -3,7 +3,7 @@
 
 pkgname=lighttpd
 pkgver=1.4.33
-pkgrel=2
+pkgrel=3
 pkgdesc='A secure, fast, compliant and very flexible web-server'
 license=('custom')
 arch=('i686' 'x86_64')
@@ -19,14 +19,37 @@
 install='lighttpd.install'
 source=("http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-${pkgver}.tar.xz"
         "http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-${pkgver}.tar.xz.asc"
+        "http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.33_fix_setuid.patch"
+        "http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.33_fix_setuid.patch.asc"
+        "http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.33_fix_fam_use_after_free.patch"
+        "http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.33_fix_fam_use_after_free.patch.asc"
+        "http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.33_fix_ssl_sni.patch"
+        "http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.33_fix_ssl_sni.patch.asc"
         'lighttpd.logrotate.d' 'lighttpd.conf' 'lighttpd.tmpfiles' 'lighttpd.service')
 sha256sums=('2886aedc23857ca44df91b8fe6f36059ec82a859ae0eb230220e42abc331610c'
             'SKIP'
+            '87792bcf62a554ac094263b931a8ae369d975b7e6bf83778f8f0a6c0ff31b979'
+            'SKIP'
+            '1772cae2a0678c93dd5fa54f2622a563c3eb0a0047ba2a6648a5680d50d3bfde'
+            'SKIP'
+            'babf177f2e88a1444550825ce8e8ad1a95dbc78cfaa59c2c3f121ccbb37799d2'
+            'SKIP'
             '41f6c0042bb61021553779f861910e335834f6c15e4411756cdc6233b31076fe'
             'fece4581bebf39768571962dedce176b2b5f487c0abb5c1cfb35395de216c01f'
             'd8a185145a7c08b4fd8c8e6c12dae3e176389dd9b1c66e239757b2ba5108c871'
             '503fd8557297f4fb814d74effcb59633135b3c2407a87f5abe97467f0822c147')
 
+prepare() {
+	cd $srcdir/$pkgname-$pkgver
+
+	# http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2013_02.txt
+	patch -p1 -i $srcdir/lighttpd-1.4.33_fix_setuid.patch
+	# http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2013_03.txt
+	patch -p1 -i $srcdir/lighttpd-1.4.33_fix_fam_use_after_free.patch
+	# http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2013_01.txt
+	patch -p1 -i $srcdir/lighttpd-1.4.33_fix_ssl_sni.patch
+}
+
 build() {
 	cd $srcdir/$pkgname-$pkgver
 




More information about the arch-commits mailing list