[arch-commits] Commit in strongswan/trunk (PKGBUILD)
Christian Rebischke
shibumi at archlinux.org
Mon Aug 14 18:40:58 UTC 2017
Date: Monday, August 14, 2017 @ 18:40:57
Author: shibumi
Revision: 250420
upgpkg: strongswan 5.5.3-4 Security update
Modified:
strongswan/trunk/PKGBUILD
----------+
PKGBUILD | 9 +++++++--
1 file changed, 7 insertions(+), 2 deletions(-)
Modified: PKGBUILD
===================================================================
--- PKGBUILD 2017-08-14 18:34:28 UTC (rev 250419)
+++ PKGBUILD 2017-08-14 18:40:57 UTC (rev 250420)
@@ -11,7 +11,7 @@
pkgname=strongswan
pkgver=5.5.3
-pkgrel=3
+pkgrel=4
pkgdesc="open source IPsec implementation"
url='http://www.strongswan.org'
license=("GPL2")
@@ -38,6 +38,8 @@
source=("https://download.strongswan.org/strongswan-${pkgver}.tar.bz2"
"https://download.strongswan.org/strongswan-${pkgver}.tar.bz2.sig"
'configure_ac.patch'
+ 'https://download.strongswan.org/security/CVE-2017-11185/strongswan-4.4.0-5.5.3_gmp_mpz_export.patch'
+ 'https://download.strongswan.org/security/CVE-2017-11185/strongswan-4.4.0-5.5.3_gmp_mpz_export.patch.sig'
)
validpgpkeys=("948F158A4E76A27BF3D07532DF42C170B34DBA77")
@@ -44,7 +46,9 @@
sha512sums=('0b0b25d2102c98cda54300dc8c3c3a49a55e64f7c695dda65a24f2194f19bce0b7aab9e4f7486c243b552f9d1a94867d6a8782ee504aad1c9973809706d599ac'
'SKIP'
- '0e2c818f2f620410dda949d9016a4c1a686bf2946acb3b42a729b2376c077f4dad6762fe8d2f736c213c4895c1fbd60c0d654a1c36f72d06f58ba7cff635bc74')
+ '0e2c818f2f620410dda949d9016a4c1a686bf2946acb3b42a729b2376c077f4dad6762fe8d2f736c213c4895c1fbd60c0d654a1c36f72d06f58ba7cff635bc74'
+ '276bcbd0cd3c550ddd4b3f5dfbcb490bb1e50ec8ed97789944409e3c05232903b99332c653cec9c9cf46eab445fd67113d1babef32156b1a5c77a68d2b83260b'
+ 'SKIP')
# We don't build libipsec because it would get loaded before kernel-netlink and netkey, which
# would case processing to be handled in user space. Also, the plugin is experimental. If you need it,
@@ -52,6 +56,7 @@
prepare() {
cd "${srcdir}/${pkgname}-${pkgver}"
patch -p1 -l < "${srcdir}/configure_ac.patch"
+ patch -p1 -l < "${srcdir}/strongswan-4.4.0-5.5.3_gmp_mpz_export.patch"
autoreconf
}
More information about the arch-commits
mailing list